$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa File: 3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa (raw, json) Hash identifier: 96mGBEUsz02dh7bmLeIkmPtPG2Mir/21W1hrueHiNug= Subject key identifier: C7:D6:D7:4B:04:69:19:FB:24:0A:02:7D:AD:71:26:31:92:EE:B4:CC Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584BBE40458EC198678A841A4E40 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19107 IP address blocks: 68.235.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:45:8e:c1:98:67:8a:84:1a:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=3ea64343-ffb4-4903-b3b8-152b9e4c9aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8b:f1:30:14:5b:2a:ad:29:87:0b:22:a8:16: be:53:7c:f3:88:35:e9:8d:d9:13:f4:9e:f7:68:3e: 8d:ff:bb:c4:ce:95:58:3e:26:ab:ec:0b:92:6e:e9: cb:40:70:fa:8f:12:61:14:23:a0:4a:e6:e6:3f:91: b7:07:2f:31:55:fd:25:0c:7a:80:50:e7:fa:86:aa: 8a:e6:0d:b5:e8:6e:90:a0:2b:ed:c0:87:b0:5d:4e: 51:da:35:a8:a5:3f:a4:cc:5d:bd:d3:71:f8:87:eb: c0:01:3b:5d:c7:b5:b2:5b:69:a9:98:94:4f:ff:cf: 3e:9e:4d:2a:6d:45:3f:b8:49:d3:5e:ff:48:3e:2b: ed:83:81:fb:68:b5:06:9f:cb:52:f3:cd:b0:0b:1c: 08:5c:c0:c8:dd:8f:a7:e8:08:17:a7:70:e4:1d:66: af:9e:71:b4:2a:33:ed:80:93:b3:2b:da:84:16:3d: 9f:ae:f6:e2:6a:d0:3c:1e:e1:4d:ce:b2:7c:34:16: 3f:4d:d9:7a:11:a5:5d:f1:56:54:87:7c:1d:b3:59: 21:c9:4b:fc:3a:5c:d6:aa:51:6e:3a:8e:1b:25:25: 66:4d:87:81:c8:99:13:31:57:14:c7:f6:99:66:1d: 52:0b:cb:cf:9d:f9:41:fd:88:d8:89:64:d1:51:21: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D6:D7:4B:04:69:19:FB:24:0A:02:7D:AD:71:26:31:92:EE:B4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/3d2884eb-84c9-34ac-97d1-34b7790d7bc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ad:89:21:0c:05:f0:25:2d:c3:75:b7:79:6f:6f:89:d5:9f: c1:ef:f1:0a:60:fd:4e:70:75:6c:6c:fa:c5:c9:09:6a:ba:b4: fe:c4:d0:ef:c6:10:f1:7a:1a:d4:a6:34:5b:7e:a2:72:a8:4d: a1:1c:6c:f4:34:ec:3e:9d:56:56:5c:8b:2d:4d:e7:10:0b:ba: 36:c9:07:1d:9e:c9:55:93:5b:43:19:d2:85:6e:96:ab:84:09: 4f:66:46:7e:ee:4e:f3:31:a8:a0:57:74:a9:9a:43:9e:da:d5: 20:61:bb:24:03:b6:e7:2d:c5:e9:1a:be:61:dd:fe:68:4c:70: 4f:e5:bc:4b:19:75:01:65:ff:09:f0:3f:1d:08:94:eb:64:e2: ac:8b:80:23:0f:97:ad:38:83:bc:f4:4d:46:c2:35:58:a8:0c: a3:05:64:d0:da:db:d1:5b:ff:11:c0:12:01:36:85:1f:64:02: 4b:c5:d3:00:f1:53:22:a2:d8:ea:34:71:fd:56:ec:fa:19:2e: d6:86:eb:9f:85:ed:e7:09:12:98:2e:95:35:99:87:8b:e5:87: d2:03:c8:8b:ad:39:e3:b5:ad:c9:43:bc:e0:fc:25:d4:34:fe: 33:27:25:b7:f9:6d:37:4d:f6:79:7d:04:23:3c:20:86:87:75: 77:01:e0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEWOwZhnioQaTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk M2VhNjQzNDMtZmZiNC00OTAzLWIzYjgtMTUyYjllNGM5YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4vxMBRbKq0phwsiqBa+U3zziDXpjdkT9J73 aD6N/7vEzpVYPiar7AuSbunLQHD6jxJhFCOgSubmP5G3By8xVf0lDHqAUOf6hqqK 5g216G6QoCvtwIewXU5R2jWopT+kzF2903H4h+vAATtdx7WyW2mpmJRP/88+nk0q bUU/uEnTXv9IPivtg4H7aLUGn8tS882wCxwIXMDI3Y+n6AgXp3DkHWavnnG0KjPt gJOzK9qEFj2frvbiatA8HuFNzrJ8NBY/Tdl6EaVd8VZUh3wds1khyUv8OlzWqlFu Oo4bJSVmTYeByJkTMVcUx/aZZh1SC8vPnflB/YjYiWTRUSFfHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfW10sEaRn7JAoCfa1xJjGS7rTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvM2QyODg0ZWItODRjOS0z NGFjLTk3ZDEtMzRiNzc5MGQ3YmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqtiSEMBfAlLcN1t3lvb4nVn8Hv8Qpg/U5wdWxs+sXJCWq6tP7E0O/G EPF6GtSmNFt+onKoTaEcbPQ07D6dVlZciy1N5xALujbJBx2eyVWTW0MZ0oVulquE CU9mRn7uTvMxqKBXdKmaQ57a1SBhuyQDtuctxekavmHd/mhMcE/lvEsZdQFl/wnw Px0IlOtk4qyLgCMPl604g7z0TUbCNVioDKMFZNDa29Fb/xHAEgE2hR9kAkvF0wDx UyKi2Oo0cf1W7PoZLtaG65+F7ecJEpgulTWZh4vlh9IDyIutOeO1rclDvOD8JdQ0 /jMnJbf5bTdN9nl9BCM8IIaHdXcB4Lg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:11:55 2025 by rpki-client