$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa File: 5e44192e-f545-3343-9375-5f961aee2b74.roa (raw, json) Hash identifier: GxyaZRv8nEDjYzjI5Mu4kXvj4ptCIxBFAjqz1qoHbK0= Subject key identifier: EE:B7:4C:84:3F:77:7E:0B:3C:34:DF:9C:CC:16:CD:A1:19:33:B7:52 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD6684C09E3B711A18EA4680 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 68.235.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:84:c0:9e:3b:71:1a:18:ea:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=4b5d926c-e335-4f73-8f6e-6d79c61ae891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:1e:2f:77:41:fe:f5:bd:77:21:40:0d:c8: a9:8e:50:0e:75:4f:01:79:e4:6f:b9:ca:37:54:58: c4:9b:30:92:88:4b:c3:c9:00:61:40:f5:66:72:a5: f3:42:f9:1b:3d:4e:1d:86:11:2c:66:20:b9:ea:42: a0:d6:10:64:a8:ce:ec:d9:7f:ba:13:66:39:2f:02: f5:93:1a:f3:55:a8:89:c1:19:e9:d3:71:fa:25:37: b5:e8:d5:ac:35:41:b9:57:b2:cc:eb:29:19:19:be: ce:51:4c:34:8f:85:18:35:a4:66:55:58:de:eb:a5: 33:2a:85:fc:19:06:b2:31:d1:cd:ca:2f:86:39:c4: 47:88:9a:97:c1:cd:64:6e:cc:a9:a7:00:33:b5:7e: 39:8d:20:50:5a:4d:f0:fd:56:1e:e2:79:d8:3e:17: 59:11:df:f6:a9:29:1f:4f:7b:62:e3:af:97:2f:42: bb:66:f0:37:75:03:ae:4a:6a:26:3a:e2:09:18:0f: 3a:94:2b:4d:35:36:ac:3f:b7:b6:e2:14:9b:df:aa: fe:00:2f:e9:bc:7d:d8:9f:8c:96:14:5b:07:74:64: cc:37:71:4c:35:0f:12:07:16:98:18:de:65:a0:43: a5:7a:9a:18:78:4f:23:01:ed:40:e5:f0:6e:35:65: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B7:4C:84:3F:77:7E:0B:3C:34:DF:9C:CC:16:CD:A1:19:33:B7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/5e44192e-f545-3343-9375-5f961aee2b74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5f:f3:dd:d8:7c:63:74:89:da:89:07:05:f6:d3:45:71:e2: 6e:e1:94:1a:ab:da:46:1f:41:9e:c8:7b:21:82:ec:12:89:8a: 6d:2c:d7:56:bf:9c:7d:97:cd:c8:17:8b:04:e2:fa:d5:40:06: 2d:f9:b6:1c:0e:ec:e5:9c:b2:e2:62:e4:d9:3d:7a:58:be:d1: b4:a7:c2:aa:2c:0e:77:38:a8:03:a1:3a:0d:ae:94:3d:66:23: 3c:b8:33:25:56:08:86:21:21:64:95:82:e9:69:c0:43:ab:67: 2a:a0:fd:6b:a0:e0:03:89:48:6e:fd:13:90:9e:7a:35:7a:15: 42:2d:dd:59:7a:0f:0e:08:0a:9b:17:50:61:9e:f6:c9:ae:b5: 4f:45:6c:b5:65:2e:c4:f7:f2:9d:86:5b:6c:fb:cc:c3:45:e4: c7:da:4b:77:9a:c0:67:21:18:50:04:14:88:e1:4a:a1:9a:7c: 39:c7:e6:e6:18:14:1e:2a:66:04:a4:08:0d:d6:e5:dc:56:b8: af:c3:64:0f:06:97:a8:ed:cc:d5:81:cb:7e:e4:fd:e9:56:40: 5b:f2:92:42:83:b5:fa:37:d2:32:1b:51:45:ee:3c:e8:ca:48: f6:02:90:fe:73:09:88:06:d4:7a:df:dd:1f:ef:65:73:35:61: 1f:68:84:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoTAnjtxGhjqRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NGI1ZDkyNmMtZTMzNS00ZjczLThmNmUtNmQ3OWM2MWFlODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbweL3dB/vW9dyFADcipjlAOdU8BeeRvuco3 VFjEmzCSiEvDyQBhQPVmcqXzQvkbPU4dhhEsZiC56kKg1hBkqM7s2X+6E2Y5LwL1 kxrzVaiJwRnp03H6JTe16NWsNUG5V7LM6ykZGb7OUUw0j4UYNaRmVVje66UzKoX8 GQayMdHNyi+GOcRHiJqXwc1kbsyppwAztX45jSBQWk3w/VYe4nnYPhdZEd/2qSkf T3ti46+XL0K7ZvA3dQOuSmomOuIJGA86lCtNNTasP7e24hSb36r+AC/pvH3Yn4yW FFsHdGTMN3FMNQ8SBxaYGN5loEOlepoYeE8jAe1A5fBuNWVDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO63TIQ/d34LPDTfnMwWzaEZM7dSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNWU0NDE5MmUtZjU0NS0z MzQzLTkzNzUtNWY5NjFhZWUyYjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENf893YfGN0idqJBwX200Vx4m7hlBqr2kYfQZ7IeyGC7BKJim0s11a/ nH2XzcgXiwTi+tVABi35thwO7OWcsuJi5Nk9eli+0bSnwqosDnc4qAOhOg2ulD1m Izy4MyVWCIYhIWSVgulpwEOrZyqg/Wug4AOJSG79E5CeejV6FUIt3Vl6Dw4ICpsX UGGe9smutU9FbLVlLsT38p2GW2z7zMNF5MfaS3eawGchGFAEFIjhSqGafDnH5uYY FB4qZgSkCA3W5dxWuK/DZA8Gl6jtzNWBy37k/elWQFvykkKDtfo30jIbUUXuPOjK SPYCkP5zCYgG1Hrf3R/vZXM1YR9ohD8= -----END CERTIFICATE-----Generated at Sun Aug 24 04:42:56 2025 by rpki-client