$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa File: 22ce9333-f4e1-3463-b3d9-608137f7b619.roa (raw, json) Hash identifier: uh42ujLvs2WXD+pcO4k7KON5vMegEquJCITZrjRv/cc= Subject key identifier: 5F:65:B3:F9:E0:91:F1:BA:8C:44:9E:12:84:21:E9:02:0F:B7:A4:BF Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD6684E71392393B16E259C0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 68.235.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:84:e7:13:92:39:3b:16:e2:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=c5ed8d33-da7e-43ad-bf89-0b7adda73651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:31:0a:b9:ab:8d:d2:41:3d:56:51:ec:3c:c1: 9e:3a:88:c4:3d:1f:4a:d5:d9:b1:23:b8:41:d7:16: 5f:e7:4a:4d:cf:5c:05:6a:e8:23:6b:ee:e7:88:05: d3:21:ff:35:95:ca:f2:bb:d8:a3:e3:a9:b3:88:1f: 98:97:02:0f:5d:1d:ab:34:83:08:35:1f:ff:c0:25: a8:54:b0:3d:52:2b:28:e6:4a:54:49:2e:bf:55:e4: 4f:c4:b3:23:1c:53:4f:7b:92:ba:7f:c1:e5:34:b3: d1:62:f9:cd:7a:0e:e8:46:ec:91:04:ee:f6:2e:80: ea:11:fb:75:6e:42:53:14:3a:60:0b:f6:d3:40:0e: 70:f8:1b:c0:20:7e:3d:8a:f9:a8:a8:30:31:cf:ce: 95:73:06:b5:2e:35:41:6b:ce:41:cf:2c:56:0b:3f: 92:c8:81:61:3a:22:a8:d6:66:f5:c9:5c:7f:53:bd: 88:b1:97:6a:65:29:8e:b5:9f:58:5e:81:26:45:d4: b5:9a:85:1b:a5:71:91:ba:68:f1:4d:f2:ac:a8:87: d7:0f:62:f3:e7:ed:2f:d7:58:c5:bb:82:63:41:39: 6b:d4:f7:26:17:7f:45:25:46:0e:93:1b:2d:44:23: 69:5a:34:30:68:55:a0:34:ac:65:b7:6b:93:15:e2: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:65:B3:F9:E0:91:F1:BA:8C:44:9E:12:84:21:E9:02:0F:B7:A4:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/22ce9333-f4e1-3463-b3d9-608137f7b619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:60:a5:a8:72:76:96:1a:4b:7b:23:1a:d7:23:71:de:a8:b6: 65:4c:9b:65:17:a2:69:f6:42:ae:44:aa:05:32:fa:65:96:08: d1:61:a3:9c:c8:22:ad:52:e5:c0:6a:98:4c:9d:69:22:e7:f9: 86:1c:6a:34:2e:ec:8d:9c:cb:66:7c:a3:db:82:e9:fb:c8:78: 73:af:c9:c9:9a:0e:20:5f:54:93:e7:53:cd:9d:9d:5a:d4:df: bb:71:7f:7d:c4:28:67:8f:98:ad:f7:e8:bd:7a:aa:3d:da:4f: 01:8e:70:70:bf:f7:63:4c:8d:4f:51:ae:d5:56:d4:81:3a:66: 75:ef:e8:ca:08:e1:e1:d5:09:27:ab:4c:71:e2:3e:1d:71:d4: 3a:96:19:50:d6:84:1d:af:66:1b:73:e1:17:c1:65:14:de:b4: 5c:f0:9f:77:cc:91:e7:7f:70:0b:da:17:37:93:f7:91:1a:43: 03:ba:27:04:55:79:eb:b8:5a:da:e4:ca:24:6b:0c:2e:df:f2: de:67:e6:05:ba:a8:9d:0c:54:47:c3:4d:b1:97:57:52:47:0e: fd:e9:8d:23:28:7d:5d:f6:96:39:ed:0f:7f:a3:4f:c7:3c:f7: b3:31:7b:47:a0:38:88:b2:05:aa:a4:1b:d4:a0:0e:83:9c:46: 23:c3:0b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoTnE5I5OxbiWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YzVlZDhkMzMtZGE3ZS00M2FkLWJmODktMGI3YWRkYTczNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDEKuauN0kE9VlHsPMGeOojEPR9K1dmxI7hB 1xZf50pNz1wFaugja+7niAXTIf81lcryu9ij46mziB+YlwIPXR2rNIMINR//wCWo VLA9Uiso5kpUSS6/VeRPxLMjHFNPe5K6f8HlNLPRYvnNeg7oRuyRBO72LoDqEft1 bkJTFDpgC/bTQA5w+BvAIH49ivmoqDAxz86Vcwa1LjVBa85BzyxWCz+SyIFhOiKo 1mb1yVx/U72IsZdqZSmOtZ9YXoEmRdS1moUbpXGRumjxTfKsqIfXD2Lz5+0v11jF u4JjQTlr1PcmF39FJUYOkxstRCNpWjQwaFWgNKxlt2uTFeIHBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9ls/ngkfG6jESeEoQh6QIPt6S/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMjJjZTkzMzMtZjRlMS0z NDYzLWIzZDktNjA4MTM3ZjdiNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlgpahydpYaS3sjGtcjcd6otmVMm2UXomn2Qq5EqgUy+mWWCNFho5zI Iq1S5cBqmEydaSLn+YYcajQu7I2cy2Z8o9uC6fvIeHOvycmaDiBfVJPnU82dnVrU 37txf33EKGePmK336L16qj3aTwGOcHC/92NMjU9RrtVW1IE6ZnXv6MoI4eHVCSer THHiPh1x1DqWGVDWhB2vZhtz4RfBZRTetFzwn3fMked/cAvaFzeT95EaQwO6JwRV eeu4WtrkyiRrDC7f8t5n5gW6qJ0MVEfDTbGXV1JHDv3pjSMofV32ljntD3+jT8c8 97Mxe0egOIiyBaqkG9SgDoOcRiPDC/A= -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:05 2025 by rpki-client