$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: yoc6lMHMn2i/y/j7KH/SYrF/LTr71TA5xy/1cEA1ccQ= Subject key identifier: F1:41:3A:6C:4F:38:10:02:9D:73:BD:AA:21:00:63:92:FB:BB:4F:5A Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F43285849FCAA8555E3EA725B7883C7B0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:85:55:e3:ea:72:5b:78:83:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=0b92eefa-3f83-4fcd-8d38-db2831337289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fe:7b:85:ae:77:03:bb:59:e2:ca:d9:b2:e3: ee:5a:1e:99:c3:bc:a1:91:38:96:0c:62:49:34:27: 87:29:9b:83:ff:f6:76:19:de:e4:62:92:e0:c5:a1: 84:1e:34:23:50:de:12:b0:fe:d2:5f:f9:49:7f:08: 12:72:75:7f:d7:6c:73:da:40:69:74:a2:00:bc:aa: 8d:99:33:70:ee:34:8f:1b:50:ea:a6:c4:7b:24:b5: a3:6e:62:f5:22:52:be:0c:f0:ad:81:26:c7:d4:ce: 97:d2:1d:f6:0d:4f:24:6c:60:aa:20:26:1e:83:75: c2:21:ab:37:6c:1e:0f:7a:92:79:b8:d8:e7:ef:a7: cc:4f:19:94:ce:07:0a:68:54:92:3d:14:4f:dd:9d: d3:ea:9a:bf:61:30:af:4b:f7:0e:35:7e:ca:ad:3f: 46:11:2d:ef:d8:93:2b:18:d1:90:cc:4f:5c:40:00: 9a:74:c2:14:16:f2:95:27:26:1a:b1:9a:3f:90:32: 77:17:bf:25:d8:30:13:8d:11:0d:6d:3c:e4:e7:21: 24:91:28:ed:6a:b1:e2:68:fb:01:01:9b:e5:2b:00: 87:3f:35:9c:e1:54:6e:a2:a7:1e:58:fd:16:2f:51: 72:1e:da:a3:cf:0a:47:2f:c6:7e:2b:cd:71:ee:61: 88:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:41:3A:6C:4F:38:10:02:9D:73:BD:AA:21:00:63:92:FB:BB:4F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c0:f8:df:25:76:8e:8e:c1:b5:36:e6:a4:f8:17:34:96:d2: d1:22:cc:a7:cf:76:d7:39:4e:fc:4c:8f:95:bb:1a:16:05:15: fc:82:9f:d2:1e:fe:ea:3f:a5:97:43:ee:b0:16:8d:43:a4:72: 5d:ed:2e:d3:f0:bb:ea:8f:2f:00:74:ff:7d:19:cb:9b:45:b8: f0:45:23:84:11:ff:56:f0:c1:d9:92:34:bf:00:65:a8:71:5a: 24:c2:82:f1:c3:36:14:27:5b:93:80:1f:4f:38:38:98:3d:25: d7:94:23:d7:00:0f:82:b5:be:7d:cf:8c:40:e6:71:41:5f:d5: 40:b7:be:4e:f9:03:68:06:0f:61:b5:69:ab:6b:06:d4:68:e2: 3e:10:26:e5:ac:ff:9a:4d:b1:97:c2:9b:c9:8e:68:55:ae:f0: fd:a2:47:4d:a6:5a:06:ed:6c:66:6e:5c:79:b4:93:23:dc:12: 3c:15:f9:89:59:21:db:e9:10:ec:66:f5:9e:4a:ef:d8:91:c8: 65:05:fd:5c:de:ef:be:3a:91:ba:66:2c:e5:e6:6b:64:34:9c: 42:d7:3b:15:ab:75:78:8e:b6:fe:ef:49:56:ff:5a:17:64:dd: 29:d4:13:51:33:ab:43:c3:05:0e:48:2f:b9:bd:1c:99:ac:97: 54:b3:9f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qoVV4+pyW3iDx7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MGI5MmVlZmEtM2Y4My00ZmNkLThkMzgtZGIyODMxMzM3Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv57ha53A7tZ4srZsuPuWh6Zw7yhkTiWDGJJ NCeHKZuD//Z2Gd7kYpLgxaGEHjQjUN4SsP7SX/lJfwgScnV/12xz2kBpdKIAvKqN mTNw7jSPG1DqpsR7JLWjbmL1IlK+DPCtgSbH1M6X0h32DU8kbGCqICYeg3XCIas3 bB4PepJ5uNjn76fMTxmUzgcKaFSSPRRP3Z3T6pq/YTCvS/cONX7KrT9GES3v2JMr GNGQzE9cQACadMIUFvKVJyYasZo/kDJ3F78l2DATjRENbTzk5yEkkSjtarHiaPsB AZvlKwCHPzWc4VRuoqceWP0WL1FyHtqjzwpHL8Z+K81x7mGIWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFBOmxPOBACnXO9qiEAY5L7u09aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATA+N8ldo6OwbU25qT4FzSW0tEizKfPdtc5TvxMj5W7GhYFFfyCn9Ie /uo/pZdD7rAWjUOkcl3tLtPwu+qPLwB0/30Zy5tFuPBFI4QR/1bwwdmSNL8AZahx WiTCgvHDNhQnW5OAH084OJg9JdeUI9cAD4K1vn3PjEDmcUFf1UC3vk75A2gGD2G1 aatrBtRo4j4QJuWs/5pNsZfCm8mOaFWu8P2iR02mWgbtbGZuXHm0kyPcEjwV+YlZ IdvpEOxm9Z5K79iRyGUF/Vze7746kbpmLOXma2Q0nELXOxWrdXiOtv7vSVb/Whdk 3SnUE1Ezq0PDBQ5IL7m9HJmsl1SznxQ= -----END CERTIFICATE-----Generated at Sat Jul 5 04:58:53 2025 by rpki-client