$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa File: c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa (raw, json) Hash identifier: xoEB0borXeHYdF3Dsbdq+E3eEzez+aiwRndVaeU+v28= Subject key identifier: 41:D0:6F:11:40:98:8A:CE:B0:62:3A:66:FE:95:2B:6E:07:4D:B4:F5 Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b Certificate serial: 010D0C9F4328584E5FDF646855FE1BE812EC9F80 Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 19107 IP address blocks: 68.235.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:64:68:55:fe:1b:e8:12:ec:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=a631b107-17db-488b-9121-dc7011afcf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:19:fd:3b:34:00:a8:90:6a:21:52:dd:21: 38:b4:64:5f:a9:0a:5a:b4:aa:18:8f:c9:4f:79:f1: 19:59:ba:2d:89:6e:37:1a:11:d4:4d:28:97:67:73: cc:d0:a5:ad:80:03:ad:61:82:4a:69:f8:f9:61:bb: be:08:d4:7b:5e:27:18:d7:a4:99:f3:0e:15:00:ef: 3b:a1:f1:aa:17:5f:37:fe:85:19:54:0f:3d:fa:df: 3e:f8:8c:98:69:d2:eb:54:c5:ae:06:5e:94:3b:47: d6:8b:85:2a:4a:c4:03:50:c6:b3:da:ca:f6:c3:f9: 93:bd:5d:90:7c:34:a0:c0:c4:b3:7d:39:5e:d8:54: 87:26:a2:2d:1d:c8:41:bd:e6:90:d4:8e:e8:b6:77: e7:77:ff:b8:43:42:e3:df:29:cb:78:1d:67:ff:4c: 9c:8f:52:e2:8b:b3:f7:db:81:38:f9:6e:a6:b8:59: 39:f8:d3:1c:eb:66:f6:f3:64:8f:9f:77:58:21:47: f3:44:be:ad:46:95:44:14:60:53:4d:8e:47:e0:49: 4b:13:5d:b2:ca:cd:d3:f3:b9:d0:95:1c:2b:93:61: 19:78:5e:81:03:d4:6c:9a:7a:05:b1:29:b0:4a:13: a7:2c:ed:bb:97:7f:8b:f1:23:ea:e5:f1:4f:85:aa: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:6F:11:40:98:8A:CE:B0:62:3A:66:FE:95:2B:6E:07:4D:B4:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/c08dbf15-98d9-3cc7-8a45-6bc50342c68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl X509v3 Authority Key Identifier: keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer sbgp-ipAddrBlock: critical IPv4: 68.235.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:97:cc:39:ba:51:0e:e7:d1:64:52:49:a8:ed:87:75:78:f6: 83:84:5e:d2:e7:42:c2:9b:7a:1c:71:24:63:7b:eb:e0:6f:14: 31:d2:04:99:a9:c0:7c:28:70:9f:16:8b:c5:dc:f8:ec:97:32: ba:c6:15:8f:c0:88:91:99:2c:c8:0e:41:e4:a9:f3:e6:24:19: fa:47:49:ff:81:c3:ea:6e:1f:73:ef:ac:46:c2:b0:ce:48:fa: 93:48:ea:37:ae:1c:f0:0d:f4:c5:04:bf:87:16:33:05:a8:81: 84:f7:ac:9b:f1:30:f6:29:2c:9b:dc:2d:e5:18:fb:20:fa:8f: cb:37:60:d2:29:4c:74:7b:bd:fd:d9:63:35:5a:9a:66:ac:b0: a6:67:02:fd:1f:d6:57:73:9f:80:d9:71:24:f4:f7:02:18:21: fe:dc:7f:40:26:bd:27:99:b9:cc:16:1e:4d:3c:1c:2f:e5:95: 72:91:1f:e1:f1:a5:b5:5f:1f:3b:66:7e:3f:ff:39:0e:cc:3f: 48:95:31:ce:21:b8:ec:bd:ef:cf:38:04:7c:0e:68:fc:48:36: 0d:b5:24:c2:f7:84:4a:77:ec:15:6d:d1:7f:f8:a0:6b:40:52: a2:54:28:54:6d:bc:25:4b:c5:6d:12:44:0c:25:fa:38:3f:9a: 84:c2:73:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f32RoVf4b6BLsn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2 ODZiMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk YTYzMWIxMDctMTdkYi00ODhiLTkxMjEtZGM3MDExYWZjZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK0Z/Ts0AKiQaiFS3SE4tGRfqQpatKoYj8lP efEZWbotiW43GhHUTSiXZ3PM0KWtgAOtYYJKafj5Ybu+CNR7XicY16SZ8w4VAO87 ofGqF183/oUZVA89+t8++IyYadLrVMWuBl6UO0fWi4UqSsQDUMaz2sr2w/mTvV2Q fDSgwMSzfTle2FSHJqItHchBveaQ1I7otnfnd/+4Q0Lj3ynLeB1n/0ycj1Lii7P3 24E4+W6muFk5+NMc62b282SPn3dYIUfzRL6tRpVEFGBTTY5H4ElLE12yys3T87nQ lRwrk2EZeF6BA9RsmnoFsSmwShOnLO27l3+L8SPq5fFPhaq6eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHQbxFAmIrOsGI6Zv6VK24HTbT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvYzA4ZGJmMTUtOThkOS0z Y2M3LThhNDUtNmJjNTAzNDJjNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3 M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2 NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeXzDm6UQ7n0WRSSajth3V49oOEXtLnQsKbehxxJGN76+BvFDHSBJmp wHwocJ8Wi8Xc+OyXMrrGFY/AiJGZLMgOQeSp8+YkGfpHSf+Bw+puH3PvrEbCsM5I +pNI6jeuHPAN9MUEv4cWMwWogYT3rJvxMPYpLJvcLeUY+yD6j8s3YNIpTHR7vf3Z YzVammassKZnAv0f1ldzn4DZcST09wIYIf7cf0AmvSeZucwWHk08HC/llXKRH+Hx pbVfHztmfj//OQ7MP0iVMc4huOy97884BHwOaPxINg21JML3hEp37BVt0X/4oGtA UqJUKFRtvCVLxW0SRAwl+jg/moTCcxo= -----END CERTIFICATE-----Generated at Wed Jul 8 16:09:46 2026 by rpki-client