$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa File: 33e115ff-b633-3582-af61-694f0a8bdd0a.roa (raw, json) Hash identifier: 18GoJBysOEhH2sjzm6XXvOprZs3mO75d7/sb37VSVvg= Subject key identifier: 8C:18:7A:C1:42:B7:41:FF:F1:79:C2:2E:AC:0B:D5:EF:B4:C3:FD:AF Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584D7F9A8FC6A61DE2D09DBAFB60 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19107 IP address blocks: 68.235.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8f:c6:a6:1d:e2:d0:9d:ba:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=5f34f2ed-4bbc-47bb-8d56-5b1faa0adc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:89:7b:d5:9a:76:c6:0b:e5:36:7e:b5:c1: ca:20:9c:27:b0:f0:14:db:e0:1b:1a:d5:0f:28:71: 7b:98:39:9d:75:b0:22:72:6f:23:95:91:6d:b1:c1: 53:09:8a:22:70:b9:7c:8f:f4:b7:6d:6e:51:5b:a7: 43:db:05:0a:bb:19:2d:81:0f:ca:ba:ac:8d:a9:e1: ed:8a:bc:76:fc:91:73:03:d5:8b:0d:c4:8e:78:5e: b4:07:f6:0f:fa:87:1e:76:09:90:45:74:f0:1c:fe: 41:ba:e3:24:3d:ec:e2:d2:b1:62:3a:52:1a:15:69: 6d:21:1e:66:1e:15:51:94:59:57:b9:ea:82:e2:5e: f4:de:18:9c:48:1b:ba:87:82:34:1a:16:8e:cf:87: 76:b2:35:ef:23:7e:79:ff:fe:a0:b3:d7:a1:ee:92: 44:3f:15:ca:f1:89:ca:1c:1d:f7:42:54:da:98:4f: c1:3b:76:6d:1d:63:ea:76:58:1e:94:b1:40:1a:d2: f7:98:37:e6:96:a5:1c:62:da:c6:71:f8:5e:67:86: df:8e:da:09:a6:04:f4:bb:e5:20:e7:9d:07:aa:49: e3:a3:90:a7:1f:d2:7c:e8:0a:fa:92:c8:47:0e:6f: ab:92:cd:27:2c:3b:01:2b:0d:be:3f:44:40:d1:c9: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:18:7A:C1:42:B7:41:FF:F1:79:C2:2E:AC:0B:D5:EF:B4:C3:FD:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/33e115ff-b633-3582-af61-694f0a8bdd0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e0:97:e3:a6:2d:18:0e:71:30:c5:98:49:0b:4b:a3:36:cd: 12:d8:ad:a2:21:5f:05:48:30:94:b8:4e:d0:2d:d0:ec:07:9d: 94:0b:2f:42:23:7b:da:b2:10:ed:6f:a0:8d:42:b2:5b:8a:3e: dd:a2:31:33:7b:96:c4:14:8e:95:18:8d:fa:40:c9:9b:e8:51: 46:62:9c:17:fa:57:8c:99:e8:1b:cd:44:bc:9d:45:e1:ef:d6: 6e:63:59:ad:83:81:2e:02:d1:5b:6f:1b:ee:96:0c:9e:da:c8: 07:a2:d4:21:70:b9:db:8a:16:70:48:25:5b:37:7d:b5:a1:37: 66:5a:af:3f:3b:73:8a:d6:7d:fd:18:75:00:f6:e6:8c:b2:de: 0c:6c:0f:d5:dd:1a:3b:31:7c:77:93:eb:28:53:67:bd:94:37: 12:d6:48:d2:59:aa:b1:92:fe:88:50:3d:f2:c2:9f:0a:0a:9a: 1d:12:c3:56:ff:1d:a2:7a:4c:f5:8d:e3:b1:ce:4d:29:91:84: 7c:c9:8d:bc:96:05:87:74:40:da:ab:8f:ac:3e:d2:59:ab:b8: da:d6:59:41:b6:36:aa:53:81:94:05:e0:ed:eb:a4:42:9d:df: 0c:c3:1b:9f:2b:7e:60:06:58:06:05:5e:76:21:7d:06:ab:af: 66:c8:42:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo/Gph3i0J26+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NWYzNGYyZWQtNGJiYy00N2JiLThkNTYtNWIxZmFhMGFkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PCJe9WadsYL5TZ+tcHKIJwnsPAU2+AbGtUP KHF7mDmddbAicm8jlZFtscFTCYoicLl8j/S3bW5RW6dD2wUKuxktgQ/KuqyNqeHt irx2/JFzA9WLDcSOeF60B/YP+ocedgmQRXTwHP5BuuMkPezi0rFiOlIaFWltIR5m HhVRlFlXueqC4l703hicSBu6h4I0GhaOz4d2sjXvI355//6gs9eh7pJEPxXK8YnK HB33QlTamE/BO3ZtHWPqdlgelLFAGtL3mDfmlqUcYtrGcfheZ4bfjtoJpgT0u+Ug 550Hqknjo5CnH9J86Ar6kshHDm+rks0nLDsBKw2+P0RA0ckTLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwYesFCt0H/8XnCLqwL1e+0w/2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMzNlMTE1ZmYtYjYzMy0z NTgyLWFmNjEtNjk0ZjBhOGJkZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXgl+OmLRgOcTDFmEkLS6M2zRLYraIhXwVIMJS4TtAt0OwHnZQLL0Ij e9qyEO1voI1CsluKPt2iMTN7lsQUjpUYjfpAyZvoUUZinBf6V4yZ6BvNRLydReHv 1m5jWa2DgS4C0VtvG+6WDJ7ayAei1CFwuduKFnBIJVs3fbWhN2Zarz87c4rWff0Y dQD25oyy3gxsD9XdGjsxfHeT6yhTZ72UNxLWSNJZqrGS/ohQPfLCnwoKmh0Sw1b/ HaJ6TPWN47HOTSmRhHzJjbyWBYd0QNqrj6w+0lmruNrWWUG2NqpTgZQF4O3rpEKd 3wzDG58rfmAGWAYFXnYhfQarr2bIQjk= -----END CERTIFICATE-----Generated at Fri Apr 17 14:35:12 2026 by rpki-client