$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa File: 6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa (raw, json) Hash identifier: 5/djsXAlMGdmoOmJf3DCwc9x+Jlr3MFFolleU31Bu8w= Subject key identifier: 17:2B:8F:D8:3F:68:53:A9:A0:EE:64:14:B0:66:56:FA:F8:A4:B9:C8 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584BBE4044CCADD45D7D617806C0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19107 IP address blocks: 68.235.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:44:cc:ad:d4:5d:7d:61:78:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=a19e8009-58f4-4a91-b467-290c93631d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cc:36:f8:27:b9:d4:7d:bb:2f:f5:1d:ec:c3: e8:0c:c6:66:19:14:78:dc:95:f2:20:2f:34:5c:04: 5b:54:4d:0a:7e:b3:bc:cd:9f:98:96:b7:b5:43:29: e5:a2:f9:cc:34:ee:84:b4:2e:39:f7:32:97:f7:e1: 79:3c:b6:16:eb:23:30:93:68:cb:cb:23:76:5d:93: 1c:13:19:24:50:54:66:b5:44:67:6f:07:f5:ac:91: f8:27:7c:e3:97:45:11:6b:2f:40:19:d2:5f:0b:e9: e6:27:90:b8:8c:85:80:d4:b9:24:6d:05:0f:6a:ab: 9c:86:3d:5c:03:ec:24:4e:79:e6:db:82:45:a5:96: d0:b4:33:31:3a:5d:f3:a8:f1:0b:9a:e1:9a:e0:d0: 1a:d6:43:41:91:f9:92:b4:9f:3f:79:d0:bc:61:62: bd:87:64:fa:3b:ac:ad:9f:e0:8c:9e:85:7a:69:8e: 11:ca:96:bd:91:50:fe:2f:00:ad:02:e4:52:d2:bc: a1:52:05:f6:22:27:5b:70:86:52:a0:d5:c0:15:aa: a2:e5:1c:ce:c5:79:ef:88:9b:75:d9:a6:e4:19:9d: 1f:c6:ff:b5:2f:61:02:48:00:9e:38:d8:c8:b2:19: 00:06:65:26:c0:20:b1:0a:7f:50:9a:f7:20:e1:e7: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:8F:D8:3F:68:53:A9:A0:EE:64:14:B0:66:56:FA:F8:A4:B9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6475ebe4-9b44-3dc9-9db6-0c7de00e2bbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:47:4d:f0:66:f4:52:03:ac:34:3b:eb:bb:45:37:03:ad:6e: f7:a5:65:da:b0:07:9b:b2:73:fb:fb:a3:53:4d:42:e9:15:bd: 23:f7:ad:49:4c:c2:d7:5f:f8:4f:b6:f7:47:ee:d0:00:74:a3: 63:06:03:75:af:65:ab:1b:48:53:54:a2:ac:84:0b:31:bf:37: 01:19:42:23:fb:10:f2:27:31:b4:b8:db:21:32:7d:28:5f:b8: 40:3f:ec:24:14:75:60:30:b5:b4:06:59:07:31:c9:dc:b7:eb: af:1a:5c:37:c6:26:92:fd:ca:57:eb:d2:73:23:7d:87:04:a6: 9b:31:1b:77:0e:57:fa:ea:7d:ab:87:99:bb:6f:70:b2:62:11: 69:30:54:7c:d5:ce:ba:a8:91:28:6f:0f:f4:50:3d:32:06:3d: 8d:85:60:b2:51:a9:ef:3d:75:8f:94:4c:79:ba:5a:0f:b9:bb: 9f:aa:53:bc:0a:6d:16:8b:6e:6b:00:0a:a3:71:45:2f:a8:ba: 9c:54:0e:3b:f4:9c:1a:9e:a7:34:70:14:1d:86:5c:5f:4f:da: 51:eb:dc:c9:a1:02:84:f4:8d:82:f3:1f:fd:d5:75:ce:41:27: b4:12:46:38:fd:f9:a5:60:0c:3a:bb:68:e6:c5:13:4b:1c:d8: e6:63:b9:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QETMrdRdfWF4BsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YTE5ZTgwMDktNThmNC00YTkxLWI0NjctMjkwYzkzNjMxZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsw2+Ce51H27L/Ud7MPoDMZmGRR43JXyIC80 XARbVE0KfrO8zZ+Ylre1QynlovnMNO6EtC459zKX9+F5PLYW6yMwk2jLyyN2XZMc ExkkUFRmtURnbwf1rJH4J3zjl0URay9AGdJfC+nmJ5C4jIWA1LkkbQUPaquchj1c A+wkTnnm24JFpZbQtDMxOl3zqPELmuGa4NAa1kNBkfmStJ8/edC8YWK9h2T6O6yt n+CMnoV6aY4Rypa9kVD+LwCtAuRS0ryhUgX2IidbcIZSoNXAFaqi5RzOxXnviJt1 2abkGZ0fxv+1L2ECSACeONjIshkABmUmwCCxCn9Qmvcg4ecpqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcrj9g/aFOpoO5kFLBmVvr4pLnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNjQ3NWViZTQtOWI0NC0z ZGM5LTlkYjYtMGM3ZGUwMGUyYmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9HTfBm9FIDrDQ767tFNwOtbvelZdqwB5uyc/v7o1NNQukVvSP3rUlM wtdf+E+290fu0AB0o2MGA3WvZasbSFNUoqyECzG/NwEZQiP7EPInMbS42yEyfShf uEA/7CQUdWAwtbQGWQcxydy3668aXDfGJpL9ylfr0nMjfYcEppsxG3cOV/rqfauH mbtvcLJiEWkwVHzVzrqokShvD/RQPTIGPY2FYLJRqe89dY+UTHm6Wg+5u5+qU7wK bRaLbmsACqNxRS+oupxUDjv0nBqepzRwFB2GXF9P2lHr3MmhAoT0jYLzH/3Vdc5B J7QSRjj9+aVgDDq7aObFE0sc2OZjucc= -----END CERTIFICATE-----Generated at Wed Nov 5 19:21:59 2025 by rpki-client