$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa File: 33e115ff-b633-3582-af61-694f0a8bdd0a.roa (raw, json) Hash identifier: mlhN49qP+LlTDDyUsh6ltL99VoLyGrLyy34kYrUSC8s= Subject key identifier: 2F:34:40:C6:79:68:5B:DF:B6:8C:06:7F:CE:3A:CC:8F:0A:B6:39:45 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD668509CD4D7CAAFB2CF500 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 68.235.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:85:09:cd:4d:7c:aa:fb:2c:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=b03c6cdb-7e4e-4e00-b8fb-f8ee212934fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d6:3e:18:f6:c3:e1:42:7a:6c:8c:38:98:18: e3:ae:99:3c:23:60:1b:f9:f9:9c:be:5a:73:e8:64: 82:13:43:f3:ee:21:a4:f0:92:49:f6:8b:31:6c:3d: 69:54:cb:55:23:dd:02:21:30:c1:2a:ba:c0:2d:20: 7b:70:79:cc:06:1a:27:f6:b5:77:ac:28:f8:87:df: 6e:72:23:6b:f0:dd:e2:6e:aa:b7:ca:b3:02:44:29: ce:d7:14:eb:35:45:ff:0a:e2:99:0a:4d:01:53:1f: 1b:f2:59:2b:b5:e0:b6:b1:7f:4d:60:59:c0:ca:d1: b7:fb:56:53:d8:0f:e7:2e:61:ac:96:e7:22:cc:38: 5c:ec:67:01:31:d3:0b:05:6d:a1:16:80:65:20:49: 5d:1c:dd:8c:1c:4e:36:f0:d2:fb:ff:59:f4:5e:6d: 9e:f4:6b:cf:8c:11:ea:e6:d6:79:40:1e:e1:be:c6: 33:aa:fc:53:15:45:bc:e0:19:ef:25:25:bd:c2:e0: ba:c6:f2:5e:b5:69:55:ed:ff:7b:0c:2b:b8:44:f7: 4f:0c:bc:62:14:07:76:73:42:22:c0:23:e7:49:a7: cc:2d:ad:65:a3:a0:16:1b:4b:f2:f0:21:cb:a8:64: cc:ef:d7:5c:1a:a0:aa:77:b4:13:a2:d5:dd:37:d1: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:34:40:C6:79:68:5B:DF:B6:8C:06:7F:CE:3A:CC:8F:0A:B6:39:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:01:d3:24:93:86:41:08:ba:a2:38:fd:ea:16:a7:75:08:2a: 4d:59:23:ad:e4:33:8e:7f:fe:b6:68:b9:f9:5d:b8:8e:2b:40: 56:43:47:44:56:59:79:39:41:b1:14:00:d9:8c:09:c9:5c:d5: 1e:59:99:85:28:93:5e:33:42:eb:0c:cf:19:d9:67:8a:76:6e: 06:6a:56:24:d4:3f:8e:48:e0:2d:9e:df:85:9a:23:a2:11:36: 5c:8c:b7:0c:0f:30:13:e6:bc:d6:e2:ba:32:f7:a1:bb:35:8f: 29:b8:e4:6c:5f:13:75:84:78:af:cc:96:55:58:b2:81:36:52: 96:b7:ab:5b:9f:65:c7:20:4a:3f:46:03:8b:ef:5e:3c:af:0c: f1:9a:0e:93:35:e6:f7:70:c6:c9:1f:d5:66:38:c5:28:47:84: 73:0a:16:0c:ef:d8:e8:d7:6c:58:ec:87:34:6f:3f:7a:a6:7e: fa:8f:57:36:3d:71:40:d5:9f:b5:a1:bb:03:6e:c5:7a:6a:45: fb:e0:57:bc:78:b4:5f:50:a3:82:88:26:1f:be:33:29:9e:e0: 32:91:49:b3:05:f1:a5:47:ff:42:ee:50:33:aa:59:08:fd:3d: d8:f2:fa:80:12:f8:1d:7b:ed:43:ea:39:45:0b:20:b8:8c:24: a2:d4:6e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoUJzU18qvss9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YjAzYzZjZGItN2U0ZS00ZTAwLWI4ZmItZjhlZTIxMjkzNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidY+GPbD4UJ6bIw4mBjjrpk8I2Ab+fmcvlpz 6GSCE0Pz7iGk8JJJ9osxbD1pVMtVI90CITDBKrrALSB7cHnMBhon9rV3rCj4h99u ciNr8N3ibqq3yrMCRCnO1xTrNUX/CuKZCk0BUx8b8lkrteC2sX9NYFnAytG3+1ZT 2A/nLmGslucizDhc7GcBMdMLBW2hFoBlIEldHN2MHE428NL7/1n0Xm2e9GvPjBHq 5tZ5QB7hvsYzqvxTFUW84BnvJSW9wuC6xvJetWlV7f97DCu4RPdPDLxiFAd2c0Ii wCPnSafMLa1lo6AWG0vy8CHLqGTM79dcGqCqd7QTotXdN9EhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC80QMZ5aFvftowGf846zI8KtjlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMzNlMTE1ZmYtYjYzMy0z NTgyLWFmNjEtNjk0ZjBhOGJkZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUB0ySThkEIuqI4/eoWp3UIKk1ZI63kM45//rZouflduI4rQFZDR0RW WXk5QbEUANmMCclc1R5ZmYUok14zQusMzxnZZ4p2bgZqViTUP45I4C2e34WaI6IR NlyMtwwPMBPmvNbiujL3obs1jym45GxfE3WEeK/MllVYsoE2Upa3q1ufZccgSj9G A4vvXjyvDPGaDpM15vdwxskf1WY4xShHhHMKFgzv2OjXbFjshzRvP3qmfvqPVzY9 cUDVn7WhuwNuxXpqRfvgV7x4tF9Qo4KIJh++Myme4DKRSbMF8aVH/0LuUDOqWQj9 Pdjy+oAS+B177UPqOUULILiMJKLUbhI= -----END CERTIFICATE-----Generated at Sun Aug 24 04:43:57 2025 by rpki-client