$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa File: c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa (raw, json) Hash identifier: utNMq4qIhlSYHdlTW4r5Tz3m3rIkjCxQd5MoJpvDrVQ= Subject key identifier: D4:8F:86:9B:EA:DF:44:F4:43:2D:CA:E2:C6:05:84:69:33:45:9D:93 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584D7F9A8FBA2F4764D5D8BE15C0 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19107 IP address blocks: 68.235.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8f:ba:2f:47:64:d5:d8:be:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=d257c2b1-3cf4-4712-b1c7-0b4f21793dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:7e:8e:26:49:37:5e:ac:8a:d8:4a:1a:88: 58:56:07:8e:81:c8:fa:89:2e:2a:59:f9:c6:6c:df: d2:40:e9:8d:2d:c3:0c:5c:1a:dc:7f:79:d6:4f:43: f4:50:4a:97:fa:51:23:80:11:72:fc:b9:37:16:1b: a5:41:0a:00:80:76:51:97:90:9b:17:e3:63:02:fe: 1f:00:7c:b4:18:9b:a3:8b:64:95:f2:32:22:9c:73: 1c:f4:4e:ef:1a:0d:65:a9:e7:5d:18:a1:e8:46:da: 22:7a:45:0e:55:e3:88:24:b5:83:d2:78:e4:ee:81: 2e:7d:9d:79:6c:32:38:32:04:01:43:23:96:e6:7a: 42:e2:93:a4:22:af:30:73:33:2e:7a:01:c5:e4:6d: 22:aa:ce:23:ce:bc:71:e9:55:04:f7:ca:a0:69:c8: 92:3b:de:0f:53:3d:8c:c3:25:20:62:8e:ac:ae:ba: c6:4e:59:35:4c:ef:c0:15:92:29:ac:3e:ad:0f:1b: 40:36:f4:6e:55:32:c5:c0:43:ae:b3:04:44:b5:55: a8:c6:ae:51:ec:02:24:5e:52:86:86:e6:29:e7:b2: b1:91:b9:8f:fe:52:a1:d7:03:1f:26:e0:4d:d4:a6: 29:77:40:2e:e4:6d:f3:80:62:71:44:a9:b5:9d:62: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8F:86:9B:EA:DF:44:F4:43:2D:CA:E2:C6:05:84:69:33:45:9D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1a:d9:8a:b6:2c:0d:ab:a1:8e:fd:de:4b:7a:15:7d:1d:4d: b7:f8:43:6a:b2:18:76:d1:55:a8:f9:8c:03:db:e1:7f:3f:45: 7a:ff:18:54:e4:ec:8f:f9:f5:04:0c:81:d2:45:c6:01:77:0f: a5:b5:f5:b4:a3:ad:41:b1:2c:90:9f:40:69:2b:54:54:23:6b: f4:fb:dc:cc:36:18:0c:56:a6:7c:f2:c0:de:4f:0f:a5:48:52: 6f:90:c6:b6:a5:a2:e5:0d:20:84:94:c1:5c:1e:7c:2f:af:c6: 07:2b:5d:c9:f9:9e:de:80:aa:69:c7:9d:40:cf:9e:23:ca:28: 8c:45:37:00:83:c9:7a:aa:38:59:34:4a:9d:9a:4d:01:b6:a4: f0:35:2f:e1:82:cd:c5:9e:a9:d5:a0:97:39:72:ec:81:55:ae: 01:3b:25:17:50:93:6f:4f:48:b8:15:94:f1:d6:87:15:0f:24: 29:91:89:57:c0:a9:c2:7b:b4:7d:e8:ca:39:6f:32:cc:64:58: e7:23:5c:21:15:ac:7b:ff:6b:23:90:97:53:23:b4:22:86:c7: 03:f8:51:d6:e9:c6:54:e2:57:fd:df:bb:2a:47:1b:c6:44:41: 14:0f:c0:b9:6f:7d:8c:78:56:d5:9b:fa:45:46:84:22:0a:65: a8:bf:5f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mo+6L0dk1di+FcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZDI1N2MyYjEtM2NmNC00NzEyLWIxYzctMGI0ZjIxNzkzZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSV+jiZJN16sithKGohYVgeOgcj6iS4qWfnG bN/SQOmNLcMMXBrcf3nWT0P0UEqX+lEjgBFy/Lk3FhulQQoAgHZRl5CbF+NjAv4f AHy0GJuji2SV8jIinHMc9E7vGg1lqeddGKHoRtoiekUOVeOIJLWD0njk7oEufZ15 bDI4MgQBQyOW5npC4pOkIq8wczMuegHF5G0iqs4jzrxx6VUE98qgaciSO94PUz2M wyUgYo6srrrGTlk1TO/AFZIprD6tDxtANvRuVTLFwEOuswREtVWoxq5R7AIkXlKG huYp57KxkbmP/lKh1wMfJuBN1KYpd0Au5G3zgGJxRKm1nWLcRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSPhpvq30T0Qy3K4sYFhGkzRZ2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYzA4ZGJmMTUtOThkOS0z Y2M3LThhNDUtNmJjNTAzNDJjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABka2Yq2LA2roY793kt6FX0dTbf4Q2qyGHbRVaj5jAPb4X8/RXr/GFTk 7I/59QQMgdJFxgF3D6W19bSjrUGxLJCfQGkrVFQja/T73Mw2GAxWpnzywN5PD6VI Um+QxralouUNIISUwVwefC+vxgcrXcn5nt6AqmnHnUDPniPKKIxFNwCDyXqqOFk0 Sp2aTQG2pPA1L+GCzcWeqdWglzly7IFVrgE7JRdQk29PSLgVlPHWhxUPJCmRiVfA qcJ7tH3oyjlvMsxkWOcjXCEVrHv/ayOQl1MjtCKGxwP4UdbpxlTiV/3fuypHG8ZE QRQPwLlvfYx4VtWb+kVGhCIKZai/X0I= -----END CERTIFICATE-----Generated at Fri Apr 17 17:06:05 2026 by rpki-client