$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: xPQuzJNxDXfiKMduuLRz85lQDcRC/0Vg3dflk9aH4EQ= Subject key identifier: C2:BE:49:B1:1A:6D:7D:9E:35:8A:BF:D5:AA:FC:12:2F:89:8F:30:D7 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584ADD6685411AB3AAB24A503900 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:85:41:1a:b3:aa:b2:4a:50:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=14b7182b-ebfc-412d-ba1e-487c8d50052e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ee:a3:e8:fe:b2:bf:41:0e:5d:92:0f:85:30: e1:c6:66:65:4e:81:65:e5:0a:b8:dc:1f:c6:db:03: 04:d1:b3:24:7f:0b:19:fa:26:32:5a:62:9a:3f:98: 4d:6f:5c:93:59:16:8d:61:8b:ed:b5:ea:64:6d:26: 87:e9:92:e6:eb:80:91:00:66:40:0f:08:ab:49:9c: 86:3f:4c:78:d8:ea:f9:f2:68:b3:1d:4a:92:0d:92: 4a:ed:af:a5:06:8f:94:a4:9e:9c:76:32:b9:46:5a: 75:63:f0:5c:36:33:a2:b3:bb:d8:ab:95:72:27:23: 3e:54:f5:24:34:cf:de:e7:29:cb:90:6e:d3:07:b3: 60:d7:e6:f6:b7:ae:5a:38:86:55:48:a6:33:69:3e: a5:a7:ba:75:5c:07:b6:b5:a2:76:65:a3:d0:c4:cc: 95:ae:8a:1b:2c:52:20:a0:01:35:8e:28:8b:cf:15: 98:ba:cb:e7:6b:9d:0a:0f:a7:ae:08:a5:ff:b1:21: b6:8d:98:8d:e9:38:7a:82:04:84:53:27:72:95:f3: d1:0d:09:7f:e1:44:4c:92:80:19:ee:6c:11:83:c4: fd:82:46:70:38:0b:a9:21:a0:90:3a:e9:60:a0:dd: b0:9c:7f:96:48:dc:f2:c4:e9:09:8c:0b:48:21:b6: e2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:49:B1:1A:6D:7D:9E:35:8A:BF:D5:AA:FC:12:2F:89:8F:30:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:52:e3:15:7b:98:eb:5b:98:43:dd:5a:13:4c:7d:ca:b8:03: 4a:a5:af:ff:65:0e:11:98:71:56:9a:35:dc:5e:64:eb:b2:5e: 09:2b:f5:61:b1:c9:95:29:a5:f3:fb:58:68:da:ff:66:97:aa: f8:7a:af:1d:5b:73:40:7f:f3:f4:b0:6f:6d:56:63:5a:b0:f2: 85:86:31:f3:bd:f0:6d:4d:6f:f6:d2:c4:d5:d6:0c:fe:02:53: 7b:71:e0:43:bc:3e:0d:99:1f:1c:38:7b:12:6a:b8:66:fb:20: 6d:6d:33:91:65:ed:13:ca:e7:27:2b:53:d0:7e:82:ee:a4:15: 3f:d2:bf:6d:dc:18:b2:eb:06:15:b7:c1:16:bf:0d:4f:89:bd: bb:f5:6b:f0:e2:91:b8:31:bc:5f:f3:c0:67:cb:9c:0f:df:2f: 16:85:9a:fa:f2:2c:fb:bb:54:e3:bf:36:d5:8c:16:1b:b2:b9: f4:1e:7c:a5:9b:5b:93:ef:1b:44:14:db:ee:f8:be:a8:0b:37: f4:08:f6:a6:74:51:4e:56:71:f2:8a:4b:2a:8a:cc:ed:4a:e2: 7b:84:96:74:95:75:fb:ec:94:10:05:38:2c:a3:21:a7:5a:84: 81:f0:35:d2:23:f7:ed:a5:d8:67:99:26:28:34:c8:87:cb:0c: ad:d8:77:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZoVBGrOqskpQOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk MTRiNzE4MmItZWJmYy00MTJkLWJhMWUtNDg3YzhkNTAwNTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje6j6P6yv0EOXZIPhTDhxmZlToFl5Qq43B/G 2wME0bMkfwsZ+iYyWmKaP5hNb1yTWRaNYYvttepkbSaH6ZLm64CRAGZADwirSZyG P0x42Or58mizHUqSDZJK7a+lBo+UpJ6cdjK5Rlp1Y/BcNjOis7vYq5VyJyM+VPUk NM/e5ynLkG7TB7Ng1+b2t65aOIZVSKYzaT6lp7p1XAe2taJ2ZaPQxMyVroobLFIg oAE1jiiLzxWYusvna50KD6euCKX/sSG2jZiN6Th6ggSEUydylfPRDQl/4URMkoAZ 7mwRg8T9gkZwOAupIaCQOulgoN2wnH+WSNzyxOkJjAtIIbbihwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMK+SbEabX2eNYq/1ar8Ei+JjzDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdS4xV7mOtbmEPdWhNMfcq4A0qlr/9lDhGYcVaaNdxeZOuyXgkr9WGx yZUppfP7WGja/2aXqvh6rx1bc0B/8/Swb21WY1qw8oWGMfO98G1Nb/bSxNXWDP4C U3tx4EO8Pg2ZHxw4exJquGb7IG1tM5Fl7RPK5ycrU9B+gu6kFT/Sv23cGLLrBhW3 wRa/DU+Jvbv1a/DikbgxvF/zwGfLnA/fLxaFmvryLPu7VOO/NtWMFhuyufQefKWb W5PvG0QU2+74vqgLN/QI9qZ0UU5WcfKKSyqKzO1K4nuElnSVdfvslBAFOCyjIada hIHwNdIj9+2l2GeZJig0yIfLDK3Ydwo= -----END CERTIFICATE-----Generated at Sun Aug 24 04:41:26 2025 by rpki-client