$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa File: c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa (raw, json) Hash identifier: 4LPLI5Te7nAOor2fmALqnQSyW7iVX8/OUhXnSa2Au/o= Subject key identifier: 19:86:FB:02:BC:BB:39:D4:E5:DA:D2:32:42:7C:59:C4:76:F3:99:D5 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584BBE40455919C7B4D93196A800 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19107 IP address blocks: 68.235.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:45:59:19:c7:b4:d9:31:96:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=c3d19100-840f-477d-a922-f39f501a0526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:54:31:85:fd:bd:8e:23:2c:59:b4:82:69: fd:61:66:45:85:a4:3b:13:34:b4:2a:d2:a5:46:7b: 24:31:40:ca:79:55:81:71:36:1c:f2:c2:59:a2:61: 5f:e2:54:47:48:ab:ec:39:0a:c0:93:62:45:e2:00: 4d:9b:02:d1:01:c8:c6:61:d9:fb:95:4f:82:6d:8a: 08:2a:95:c0:00:f4:f2:c3:66:79:6a:c6:d8:6b:d0: d3:92:d9:a9:38:81:fb:79:9f:fb:ee:60:a0:58:36: 32:d8:ce:cf:9c:40:69:59:18:1f:2e:43:03:82:4e: 29:b2:6c:88:17:da:4f:4e:20:5a:ce:31:a1:ad:8f: 49:14:0b:ff:6f:5c:b4:15:ef:82:fe:cf:80:67:ce: 61:cd:b7:96:a3:68:9d:31:a9:98:11:17:38:b3:1f: bd:c3:be:4e:90:dc:b5:2f:79:07:a5:9f:35:0f:ab: ed:93:bc:bc:e8:a7:6f:73:c6:10:ae:78:82:31:4c: d8:7b:50:80:a4:96:64:65:c5:e1:8d:0a:e4:24:f7: 7d:f3:4b:a5:22:fd:f4:40:67:60:d6:04:08:f9:36: 31:82:74:76:26:e5:d2:bd:05:f8:17:52:4f:8c:48: e1:44:d4:56:b7:62:64:e5:ac:3f:75:08:df:be:a5: 47:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:FB:02:BC:BB:39:D4:E5:DA:D2:32:42:7C:59:C4:76:F3:99:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c5:11:e6:a0:c5:01:e5:fe:63:54:59:24:1b:78:18:12:79: 63:76:eb:60:c8:cf:44:b5:a1:b5:06:fd:cb:ec:b8:d8:55:af: 95:e7:4d:3f:28:dd:42:9e:36:ee:12:58:ed:44:66:d2:af:81: 71:be:89:10:b8:85:14:4e:b9:fb:c4:c8:d1:9a:5f:0d:fb:c9: 88:88:3f:f3:d0:2b:b2:10:a2:4c:39:ae:09:9f:6e:cf:46:c8: 83:b6:27:84:40:cd:4f:e7:aa:e0:df:42:89:e0:3d:bf:48:37: f7:4b:5d:36:28:d8:ab:8a:a2:2c:05:45:19:ad:4d:ab:50:f3: 4c:0f:66:20:9a:e5:dc:a2:fc:af:a8:57:da:07:5a:b4:ea:b5: af:b2:12:e1:01:94:f5:47:8b:01:07:f3:74:1a:bc:34:6f:b8: 52:7c:cb:7a:91:8d:40:02:b4:69:fe:21:8a:84:42:de:79:88: 2e:29:b5:72:dc:39:42:5f:3a:36:f9:9b:60:35:8c:e4:f5:fe: e5:c3:a9:e5:43:6d:41:6f:f0:1d:dc:4b:d6:fb:0a:a8:73:de: 3e:96:cd:55:e2:25:c1:31:fd:c3:fa:92:52:7e:a0:fe:76:81: c1:0e:75:da:0c:bc:6d:f3:71:fb:ed:68:79:64:2c:31:20:85: 51:1a:7c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QEVZGce02TGWqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YzNkMTkxMDAtODQwZi00NzdkLWE5MjItZjM5ZjUwMWEwNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgNUMYX9vY4jLFm0gmn9YWZFhaQ7EzS0KtKl RnskMUDKeVWBcTYc8sJZomFf4lRHSKvsOQrAk2JF4gBNmwLRAcjGYdn7lU+CbYoI KpXAAPTyw2Z5asbYa9DTktmpOIH7eZ/77mCgWDYy2M7PnEBpWRgfLkMDgk4psmyI F9pPTiBazjGhrY9JFAv/b1y0Fe+C/s+AZ85hzbeWo2idMamYERc4sx+9w75OkNy1 L3kHpZ81D6vtk7y86Kdvc8YQrniCMUzYe1CApJZkZcXhjQrkJPd980ulIv30QGdg 1gQI+TYxgnR2JuXSvQX4F1JPjEjhRNRWt2Jk5aw/dQjfvqVHUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmG+wK8uznU5drSMkJ8WcR285nVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYzA4ZGJmMTUtOThkOS0z Y2M3LThhNDUtNmJjNTAzNDJjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHFEeagxQHl/mNUWSQbeBgSeWN262DIz0S1obUG/cvsuNhVr5XnTT8o 3UKeNu4SWO1EZtKvgXG+iRC4hRROufvEyNGaXw37yYiIP/PQK7IQokw5rgmfbs9G yIO2J4RAzU/nquDfQongPb9IN/dLXTYo2KuKoiwFRRmtTatQ80wPZiCa5dyi/K+o V9oHWrTqta+yEuEBlPVHiwEH83QavDRvuFJ8y3qRjUACtGn+IYqEQt55iC4ptXLc OUJfOjb5m2A1jOT1/uXDqeVDbUFv8B3cS9b7Cqhz3j6WzVXiJcEx/cP6klJ+oP52 gcEOddoMvG3zcfvtaHlkLDEghVEafDQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:46 2025 by rpki-client