$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa File: 3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json) Hash identifier: gxk8uVme5v/tLg+hcPNmDMsD5cW9ynzqDcXhZSsHvyI= Subject key identifier: D0:82:84:A8:57:B3:EF:A6:00:33:E8:AD:EF:A8:F7:BC:E3:92:80:5C Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F43285849FCAA8547D6EF2118FEADA400 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 19107 IP address blocks: 68.235.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:85:47:d6:ef:21:18:fe:ad:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=921b99b4-d255-46e8-a8c0-7d3074425f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:b0:07:98:ad:4b:44:cf:d0:6f:2e:23:90: be:33:b2:53:52:21:a3:2f:ee:90:f7:dc:e6:ad:10: b7:46:1c:06:47:79:84:1f:a9:b6:fb:f1:d7:e3:bf: 2e:c2:df:55:69:f9:4b:b1:d4:43:91:65:5d:95:9f: 92:61:19:e5:ea:94:36:ab:be:3c:11:db:cb:dd:34: b1:d9:71:af:39:96:11:17:72:56:0c:d3:8a:bf:c4: f1:c0:79:08:f4:be:76:74:51:58:cd:25:4d:70:67: 1a:8d:a3:a7:16:d8:27:c4:95:0e:b6:eb:f2:f8:88: 1c:7c:ac:a0:ea:d5:e6:d1:45:e1:3b:2f:73:a1:db: 79:ae:6a:a0:5e:94:6d:fc:b6:99:f7:15:47:b2:77: e6:84:9c:d1:f5:1a:96:91:61:d1:d5:40:b9:8e:cf: 54:a3:65:96:6a:73:47:a6:46:d1:83:4c:f4:24:69: 02:12:88:c7:b0:a6:5e:5d:12:dc:32:c1:8a:69:e8: 7f:d6:72:29:be:9a:9a:9c:50:b1:e1:5c:81:8b:97: 0d:37:2c:82:a8:f7:ec:b4:6a:d8:3c:a1:6e:6d:94: 21:9f:08:a4:1c:b9:f8:52:a9:05:1e:52:e2:1c:e4: 16:2c:a2:2f:48:6b:bb:49:4c:51:53:dc:8d:80:3a: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:84:A8:57:B3:EF:A6:00:33:E8:AD:EF:A8:F7:BC:E3:92:80:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b8:23:08:e7:53:43:87:e7:25:c7:6e:8d:41:be:31:b1:f4: fb:8d:8d:b9:64:84:26:00:0a:41:84:2f:68:da:2d:09:b0:f8: 36:30:32:7f:26:4c:b0:5b:ef:51:9a:6d:01:80:a6:3a:ba:65: 3e:ee:18:02:c1:ab:cc:07:fa:78:be:50:e5:54:82:40:ae:1b: 28:c8:8a:ce:7d:a9:0f:7c:11:06:b3:e7:0f:0d:c7:7c:01:d2: db:76:aa:1e:2d:05:dd:28:d4:cb:5e:b5:79:ab:7a:85:bb:ef: 70:65:31:c3:75:d0:81:2f:48:44:f5:80:40:3f:d7:ae:00:b2: 0b:71:7f:a9:c1:e0:ec:c1:ae:bc:23:36:97:5c:19:c1:bd:88: b3:d6:8b:5a:91:c3:bc:b6:3d:52:91:21:06:de:d7:c8:fa:26: 94:d4:6d:b4:ce:a3:0c:94:a5:19:30:60:27:a3:00:80:de:6e: 4c:e1:0a:28:3e:a9:15:e9:00:b2:7c:78:f6:b5:c5:28:8d:ea: 28:0f:6a:6c:5e:fe:16:61:96:aa:9d:de:4f:a9:72:41:d6:3e: ce:57:a4:74:97:06:d8:89:25:80:6b:e6:6d:4c:1a:3f:b3:b4: e3:a1:dd:1c:f0:e9:3f:97:c5:4c:22:84:89:c8:98:08:3f:64: c6:18:70:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoVH1u8hGP6tpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTIxYjk5YjQtZDI1NS00NmU4LWE4YzAtN2QzMDc0NDI1ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzSwB5itS0TP0G8uI5C+M7JTUiGjL+6Q99zm rRC3RhwGR3mEH6m2+/HX478uwt9VaflLsdRDkWVdlZ+SYRnl6pQ2q748EdvL3TSx 2XGvOZYRF3JWDNOKv8TxwHkI9L52dFFYzSVNcGcajaOnFtgnxJUOtuvy+IgcfKyg 6tXm0UXhOy9zodt5rmqgXpRt/LaZ9xVHsnfmhJzR9RqWkWHR1UC5js9Uo2WWanNH pkbRg0z0JGkCEojHsKZeXRLcMsGKaeh/1nIpvpqanFCx4VyBi5cNNyyCqPfstGrY PKFubZQhnwikHLn4UqkFHlLiHOQWLKIvSGu7SUxRU9yNgDoHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCChKhXs++mADPore+o97zjkoBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvM2QyODg0ZWItODRjOS0z NGFjLTk3ZDEtMzRiNzc5MGQ3YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO4IwjnU0OH5yXHbo1BvjGx9PuNjblkhCYACkGEL2jaLQmw+DYwMn8m TLBb71GabQGApjq6ZT7uGALBq8wH+ni+UOVUgkCuGyjIis59qQ98EQaz5w8Nx3wB 0tt2qh4tBd0o1MtetXmreoW773BlMcN10IEvSET1gEA/164Asgtxf6nB4OzBrrwj NpdcGcG9iLPWi1qRw7y2PVKRIQbe18j6JpTUbbTOowyUpRkwYCejAIDebkzhCig+ qRXpALJ8ePa1xSiN6igPamxe/hZhlqqd3k+pckHWPs5XpHSXBtiJJYBr5m1MGj+z tOOh3Rzw6T+XxUwihInImAg/ZMYYcHQ= -----END CERTIFICATE-----Generated at Sat Jul 5 05:06:15 2025 by rpki-client