$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa File: 4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa (raw, json) Hash identifier: DY4sy6cSx+O1vz9574BiaIkSj8EehJlCGOuw6amuUSE= Subject key identifier: F4:B3:43:91:8E:58:13:20:54:DA:FD:AB:07:6A:5D:98:DE:66:85:7B Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584E5FDF64249D6A58FB9389BC80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 19107 IP address blocks: 68.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:64:24:9d:6a:58:fb:93:89:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=6d121532-cb0a-4b51-a796-aa9a1138c636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:c3:48:0a:52:a4:fa:94:37:ea:59:76:64: ae:c6:37:33:70:82:b0:88:2f:f8:17:8c:55:38:9c: 6c:84:47:6c:26:ed:35:45:99:ef:1f:71:29:41:86: af:04:9b:54:2d:1d:ac:e1:30:b7:0d:ad:49:75:aa: 6d:16:52:8b:03:09:14:64:02:15:5d:c8:f4:e9:d5: b9:ce:42:21:49:96:4f:94:fe:89:95:6a:2a:1f:72: dc:c4:e5:cf:e8:4e:60:05:78:13:32:39:1f:8d:4f: 94:4e:b6:75:0f:ca:ac:9a:23:3d:58:5c:57:c2:8d: 40:b7:6b:c7:78:12:75:bd:3d:90:8c:50:4e:ff:86: 7d:1e:8b:d3:dc:38:47:8d:65:4d:99:50:be:6b:e2: 82:cf:c4:68:95:10:e9:37:4b:9c:59:bc:2f:57:01: 7b:9f:68:cb:30:53:4f:b4:77:b5:31:99:bb:87:15: 19:23:7a:0d:7e:23:0f:08:4f:d4:59:53:b5:d1:5b: dc:8f:43:6d:d0:d7:ff:cf:bb:8c:9e:ad:8b:30:9a: 6d:3a:ff:a3:98:57:21:08:6f:b6:12:39:1f:1f:8f: 9f:a2:f0:3e:d6:01:6d:76:55:62:a0:05:c2:2a:6d: fb:40:d5:b2:3b:7d:98:36:68:a5:3d:a8:f4:1a:1b: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B3:43:91:8E:58:13:20:54:DA:FD:AB:07:6A:5D:98:DE:66:85:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/4af6f342-bf2b-317a-8c6c-9da6e4e46c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:79:7a:59:85:5b:a5:f6:e4:d4:28:ea:9a:64:ea:21:54:30: f6:8a:42:3e:d8:f3:37:4e:d8:9e:cd:38:0c:c5:83:35:bd:a2: d2:b1:57:8b:4c:81:4c:87:af:92:8d:b2:02:bc:a8:1a:99:c2: a9:37:2a:bc:e8:50:61:8d:d8:84:76:6f:1f:02:55:8e:91:84: 81:93:fb:bf:5a:87:2b:56:08:22:b7:e2:b6:b3:86:d1:52:66: f1:a1:9c:07:dc:d3:cb:c5:a6:10:30:53:1c:95:47:ff:eb:c6: b6:bb:f2:17:c1:5a:9e:31:77:cc:97:3c:09:11:c1:fa:f8:7e: d5:b0:37:09:4b:fc:42:06:71:38:32:3e:a1:73:18:b0:bb:dc: 58:62:bb:c4:f4:11:90:36:fc:5a:60:63:23:70:90:33:d9:eb: f7:ae:bb:16:0b:14:f1:5d:90:8e:1b:a3:1b:b8:3f:ea:43:a4: 71:fd:3e:77:57:3e:da:1b:4f:3d:f3:b5:a4:63:2c:ad:d1:4c: bb:6d:a5:84:7c:b9:35:a5:ba:94:45:52:a3:c0:05:1e:b0:39: 08:d4:a8:e6:da:a0:72:bb:51:ec:8e:62:8c:d0:92:db:5a:3a: 1a:cd:2e:0f:1b:eb:b0:da:ba:02:b2:9a:05:68:43:20:46:39: ec:e8:ec:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32QknWpY+5OJvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NmQxMjE1MzItY2IwYS00YjUxLWE3OTYtYWE5YTExMzhjNjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrjDSApSpPqUN+pZdmSuxjczcIKwiC/4F4xV OJxshEdsJu01RZnvH3EpQYavBJtULR2s4TC3Da1JdaptFlKLAwkUZAIVXcj06dW5 zkIhSZZPlP6JlWoqH3LcxOXP6E5gBXgTMjkfjU+UTrZ1D8qsmiM9WFxXwo1At2vH eBJ1vT2QjFBO/4Z9HovT3DhHjWVNmVC+a+KCz8RolRDpN0ucWbwvVwF7n2jLMFNP tHe1MZm7hxUZI3oNfiMPCE/UWVO10Vvcj0Nt0Nf/z7uMnq2LMJptOv+jmFchCG+2 EjkfH4+fovA+1gFtdlVioAXCKm37QNWyO32YNmilPaj0GhsAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSzQ5GOWBMgVNr9qwdqXZjeZoV7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvNGFmNmYzNDItYmYyYi0z MTdhLThjNmMtOWRhNmU0ZTQ2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHB5elmFW6X25NQo6ppk6iFUMPaKQj7Y8zdO2J7NOAzFgzW9otKxV4tM gUyHr5KNsgK8qBqZwqk3KrzoUGGN2IR2bx8CVY6RhIGT+79ahytWCCK34razhtFS ZvGhnAfc08vFphAwUxyVR//rxra78hfBWp4xd8yXPAkRwfr4ftWwNwlL/EIGcTgy PqFzGLC73Fhiu8T0EZA2/FpgYyNwkDPZ6/euuxYLFPFdkI4boxu4P+pDpHH9PndX PtobTz3ztaRjLK3RTLttpYR8uTWlupRFUqPABR6wOQjUqObaoHK7UeyOYozQktta OhrNLg8b67DaugKymgVoQyBGOezo7DA= -----END CERTIFICATE-----Generated at Wed Jul 8 18:03:43 2026 by rpki-client