$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json) Hash identifier: jTIUNCT0EIgnluowYlQnT8HWb8V+eLufsEwzNS5+9nk= Subject key identifier: 74:9A:40:03:A4:A1:1C:98:EB:FF:FC:C1:FC:8D:C2:C6:4F:6F:6E:14 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD668487B21B5FFA51707400 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 68.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:84:87:b2:1b:5f:fa:51:70:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=bd7a2d28-4f6b-48aa-b128-6fafaba7d86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:0e:ce:74:44:8d:76:6c:b6:b9:a1:8f:62: 6d:86:58:9b:a9:18:9e:1f:3f:65:af:dc:71:08:a1: 39:e6:26:7b:58:7a:67:a7:0a:bf:49:b2:1d:26:54: 1f:85:50:79:2a:f9:44:53:8f:90:f0:99:64:ce:92: de:fe:d7:57:c9:55:ec:31:a6:06:f0:93:f2:8e:10: 71:e5:d0:df:93:fd:97:c6:4b:b0:96:2b:b2:df:dd: 39:db:a7:2e:82:f3:6b:4e:6d:18:a2:74:d5:3f:aa: d9:b0:2a:f8:42:db:64:0d:7c:ac:3c:f6:4f:c5:f2: 29:1b:98:41:d9:43:a3:3b:b2:16:c7:e2:ee:9f:a7: f4:39:db:9b:12:80:02:52:a6:41:07:53:91:4c:82: 5b:33:aa:01:7d:12:81:fa:84:35:26:cf:03:cd:6b: cf:a3:3b:0a:54:aa:60:7e:92:2f:51:77:7d:14:9b: f5:c0:e0:3b:0b:c6:c5:ca:4f:71:ad:08:a5:21:d6: 46:ae:b3:24:16:24:24:7c:d9:cc:73:9b:e2:45:1c: d3:b8:83:73:25:5c:99:cc:27:1f:3c:9c:7f:a9:ae: b3:f5:9a:cd:ac:29:b5:70:25:3e:d6:65:0a:7e:f8: 22:4a:f0:03:be:df:39:5d:bc:a3:78:c8:6e:64:72: c2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:40:03:A4:A1:1C:98:EB:FF:FC:C1:FC:8D:C2:C6:4F:6F:6E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9f:ef:e6:e0:f3:61:0a:a4:c5:56:64:90:16:e4:98:6b:b3: 00:9f:ae:ba:a3:12:64:4b:f4:57:d2:da:0e:f8:38:8f:3b:e2: b2:a0:e0:ec:d4:92:29:fa:21:4f:b6:0c:b3:7c:14:0f:58:73: 46:91:9e:2f:36:17:74:85:7b:df:65:d5:3c:16:ab:71:ca:04: 42:26:21:3e:54:69:86:ee:83:ed:53:27:21:1b:5b:30:af:d7: 0c:32:22:21:91:68:8e:eb:49:10:c2:f9:84:ea:bc:32:f3:47: 19:a0:d9:5a:1e:d0:6a:0e:59:bd:c2:13:d3:97:94:bf:35:c4: 58:05:ee:7b:cb:03:6e:03:5a:9f:59:18:f1:0c:2a:86:41:10: b2:13:95:54:8c:71:58:23:a7:8e:86:c2:2c:70:5a:ce:2a:1d: a7:2e:d7:3f:04:ef:dd:ad:16:3a:da:4d:b1:b5:7b:09:9b:34: 23:bf:4a:07:9d:ab:ed:b3:57:04:bf:90:aa:8b:d3:ae:9c:ae: 85:79:67:94:4c:35:38:73:2e:27:59:59:53:09:d3:db:83:f3: ee:cd:36:12:8a:0e:f6:ac:e6:78:dc:8b:5f:b0:74:43:7f:73: d5:38:a7:31:13:64:67:87:4f:bd:fa:c5:45:01:65:72:6f:57: 18:32:4c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoSHshtf+lFwdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk YmQ3YTJkMjgtNGY2Yi00OGFhLWIxMjgtNmZhZmFiYTdkODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikoOznREjXZstrmhj2JthlibqRieHz9lr9xx CKE55iZ7WHpnpwq/SbIdJlQfhVB5KvlEU4+Q8JlkzpLe/tdXyVXsMaYG8JPyjhBx 5dDfk/2Xxkuwliuy390526cugvNrTm0YonTVP6rZsCr4QttkDXysPPZPxfIpG5hB 2UOjO7IWx+Lun6f0OdubEoACUqZBB1ORTIJbM6oBfRKB+oQ1Js8DzWvPozsKVKpg fpIvUXd9FJv1wOA7C8bFyk9xrQilIdZGrrMkFiQkfNnMc5viRRzTuINzJVyZzCcf PJx/qa6z9ZrNrCm1cCU+1mUKfvgiSvADvt85XbyjeMhuZHLCEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSaQAOkoRyY6//8wfyNwsZPb24UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNGFmNmYzNDItYmYyYi0z MTdhLThjNmMtOWRhNmU0ZTQ2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACf7+bg82EKpMVWZJAW5JhrswCfrrqjEmRL9FfS2g74OI874rKg4OzU kin6IU+2DLN8FA9Yc0aRni82F3SFe99l1TwWq3HKBEImIT5UaYbug+1TJyEbWzCv 1wwyIiGRaI7rSRDC+YTqvDLzRxmg2Voe0GoOWb3CE9OXlL81xFgF7nvLA24DWp9Z GPEMKoZBELITlVSMcVgjp46GwixwWs4qHacu1z8E792tFjraTbG1ewmbNCO/Sged q+2zVwS/kKqL066croV5Z5RMNThzLidZWVMJ09uD8+7NNhKKDvas5njci1+wdEN/ c9U4pzETZGeHT736xUUBZXJvVxgyTPw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:41:19 2025 by rpki-client