$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa File: d0843c5d-c232-3c52-a28c-e504b426fab2.roa (raw, json) Hash identifier: yOXxx9dakzKQvcnBo1qx80SY8wecSZAXSMpb8U96sCQ= Subject key identifier: 7C:27:32:8D:04:67:FA:3B:37:BA:17:D7:C5:F7:02:95:06:7C:5D:1C Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584F02422F6F51D5905102C23E00 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 19107 IP address blocks: 68.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2f:6f:51:d5:90:51:02:c2:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=bb04484e-cdd4-485b-b453-fa423e0c94f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:71:92:01:fd:55:c2:c3:0b:c3:59:fc:26: 01:fa:c0:92:c0:d8:87:fa:d0:44:d9:09:82:e4:54: 18:91:51:d8:02:02:d9:e4:27:49:a7:fe:6d:f4:99: c7:9f:fa:3d:08:c3:56:6f:04:11:d0:1f:57:36:64: 81:44:c8:04:81:e6:98:4a:86:dd:8d:0c:24:49:3b: d0:b0:bb:ef:4a:26:d0:98:e0:f0:c6:25:93:a2:07: 6b:8a:a0:35:42:3d:84:c1:0d:b3:3b:d9:78:15:2f: 8b:5e:24:f4:5c:c6:9a:73:70:53:69:b7:95:45:e3: d0:7f:d5:b6:63:fa:70:a4:a2:e8:d8:00:6c:9b:a8: 35:f5:f3:ab:68:e0:4f:fb:bd:e4:bb:96:31:c2:d0: f3:7e:ed:b5:ce:6a:d9:08:da:ca:57:59:0e:36:82: 10:c7:83:8c:ac:26:0b:bb:38:d4:5e:98:df:4f:a0: b6:f3:ad:2b:5f:f7:17:fa:83:29:30:af:4a:00:50: 78:23:01:b4:9d:30:e2:48:12:d0:0b:2f:27:e3:fa: 18:08:ce:46:6f:2c:41:e1:01:31:23:c4:cc:4b:8b: b5:59:ee:76:43:97:12:c0:90:ee:d9:8f:d4:84:0a: 1e:25:13:67:cf:12:54:4b:11:c5:ae:56:15:74:4b: 0e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:27:32:8D:04:67:FA:3B:37:BA:17:D7:C5:F7:02:95:06:7C:5D:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/d0843c5d-c232-3c52-a28c-e504b426fab2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b8:b6:ef:25:d8:fb:44:30:c4:5d:e6:f2:66:b6:86:e0:2b: a2:a1:28:7a:8b:d5:0f:e6:14:79:ce:c0:14:ba:04:7a:f7:8e: 21:6c:3a:64:77:94:2b:6f:96:d2:e5:c8:ab:73:97:38:4f:05: da:99:f2:7d:74:d1:30:e1:53:c5:e1:84:ac:56:93:b0:b1:71: 9f:01:26:b0:a2:98:07:07:a8:84:43:1f:07:9b:fc:2e:f5:81: ec:40:31:04:11:b7:61:e7:a7:29:be:70:78:9f:11:e3:df:f8: 47:0f:3d:00:0a:b6:02:26:4e:74:23:a8:15:db:a4:7e:44:50: 78:7c:ad:7e:34:84:d5:7d:46:05:6f:92:89:de:ec:bf:72:f3: ef:a5:51:b1:91:28:4c:77:ef:63:2f:ef:52:80:27:bc:51:fe: eb:29:64:ab:55:4c:1b:d7:32:4f:76:27:b0:d4:68:a9:e2:2b: 4e:de:7b:3d:9f:c9:14:50:3c:6c:de:fd:a2:5f:38:05:1e:d7: 2f:73:54:9b:0b:7b:3e:3b:36:27:aa:18:d0:47:16:96:1d:0b: 46:cd:75:8e:53:c5:52:ba:0d:17:c1:ac:e3:ec:50:52:44:23: 9e:99:2b:b6:d8:fd:fa:e5:5e:36:08:01:dd:bc:2e:ff:b0:23: 9c:bd:0c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQi9vUdWQUQLCPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YmIwNDQ4NGUtY2RkNC00ODViLWI0NTMtZmE0MjNlMGM5NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtJxkgH9VcLDC8NZ/CYB+sCSwNiH+tBE2QmC 5FQYkVHYAgLZ5CdJp/5t9JnHn/o9CMNWbwQR0B9XNmSBRMgEgeaYSobdjQwkSTvQ sLvvSibQmODwxiWTogdriqA1Qj2EwQ2zO9l4FS+LXiT0XMaac3BTabeVRePQf9W2 Y/pwpKLo2ABsm6g19fOraOBP+73ku5YxwtDzfu21zmrZCNrKV1kONoIQx4OMrCYL uzjUXpjfT6C2860rX/cX+oMpMK9KAFB4IwG0nTDiSBLQCy8n4/oYCM5GbyxB4QEx I8TMS4u1We52Q5cSwJDu2Y/UhAoeJRNnzxJUSxHFrlYVdEsO3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHwnMo0EZ/o7N7oX18X3ApUGfF0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvZDA4NDNjNWQtYzIzMi0z YzUyLWEyOGMtZTUwNGI0MjZmYWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAC4tu8l2PtEMMRd5vJmtobgK6KhKHqL1Q/mFHnOwBS6BHr3jiFsOmR3 lCtvltLlyKtzlzhPBdqZ8n100TDhU8XhhKxWk7CxcZ8BJrCimAcHqIRDHweb/C71 gexAMQQRt2Hnpym+cHifEePf+EcPPQAKtgImTnQjqBXbpH5EUHh8rX40hNV9RgVv kone7L9y8++lUbGRKEx372Mv71KAJ7xR/uspZKtVTBvXMk92J7DUaKniK07eez2f yRRQPGze/aJfOAUe1y9zVJsLez47NieqGNBHFpYdC0bNdY5TxVK6DRfBrOPsUFJE I56ZK7bY/frlXjYIAd28Lv+wI5y9DDs= -----END CERTIFICATE-----Generated at Tue Sep 22 21:58:52 2026 by rpki-client