$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: pAwg6GWxdB3nRroQ5No931aRqqwDvoa6asMvJCbAg/k= Subject key identifier: E8:4D:34:0F:C5:56:0B:13:14:41:50:A3:BC:69:E2:88:56:90:1F:6E Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E736A341B462C372BDA39AF40 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Fri 10 Jul 2026 09:00:12 +0000 ROA not before: Fri 10 Jul 2026 09:00:12 +0000 ROA not after: Thu 08 Oct 2026 09:00:12 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:73:6a:34:1b:46:2c:37:2b:da:39:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 10 09:00:12 2026 GMT Not After : Oct 8 09:00:12 2026 GMT Subject: CN=7296ca0e-6aeb-4257-8f5c-2e707d129a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:0a:23:6a:d3:0b:e5:ea:01:27:f4:1c:d1: f2:27:53:e4:05:8a:d5:4a:a7:e5:77:79:66:95:9f: ac:97:1a:a3:73:44:19:b9:46:78:1c:f9:c7:02:db: 40:f7:e8:af:40:b9:27:7b:8e:75:6e:96:16:de:01: f2:70:da:c2:c4:67:76:91:94:3a:fd:e3:21:ef:bd: 03:04:4f:3c:28:3d:c1:79:62:2a:89:3f:95:6b:3f: e5:98:75:0a:73:f9:5f:07:60:9c:d0:9c:ed:52:17: 92:57:92:a8:e6:94:2c:4e:c3:aa:cf:81:21:64:5b: 40:75:52:29:05:98:0a:8e:75:ad:b4:2c:6c:8e:a6: 04:f2:06:9d:c5:53:59:46:de:71:a8:f6:b1:3a:a4: b4:25:fb:e3:bd:8e:05:2f:ff:fa:9d:82:62:11:3b: c2:26:cb:c0:1d:e2:0a:cb:e8:c2:e1:87:3e:bd:53: 14:5e:dd:44:a0:10:02:54:a9:ef:c3:22:40:f7:b8: 6f:68:6a:d2:73:b5:77:11:7c:44:d8:b3:6a:78:26: d9:c1:4f:1a:4e:26:48:88:11:f5:7a:14:e4:51:69: 29:6c:f9:10:74:96:5d:8a:e8:ff:92:33:9b:8f:be: f7:af:54:79:be:a6:4c:d7:a4:96:b3:b3:b8:1b:76: 97:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4D:34:0F:C5:56:0B:13:14:41:50:A3:BC:69:E2:88:56:90:1F:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5e:51:2a:ac:38:08:e8:d6:59:bf:35:f3:39:4d:9a:2b:26: 6c:09:d5:d1:30:db:b4:07:2b:64:5d:a0:39:6f:24:8f:84:a6: 47:05:b4:71:91:74:58:82:a4:bb:c3:2e:9f:77:c8:d9:75:b9: 85:4d:84:f8:fe:eb:d6:9d:71:92:5d:f9:29:88:fe:df:24:20: 3c:48:c9:56:8b:26:f2:a4:0d:0e:79:ba:ec:32:72:cf:25:ef: 44:c7:81:cf:26:7e:5c:be:b7:bb:75:23:b1:8f:18:34:ae:21: 85:b5:88:8e:22:42:78:fd:9c:de:ac:1a:2b:fa:99:73:0f:5f: 61:33:f5:ef:74:69:31:0d:90:bc:25:9b:80:df:2b:0f:59:29: ee:e8:dd:57:b1:5b:5c:ed:7b:fd:9d:21:31:f6:f6:41:24:bc: ad:c1:85:9f:c7:8f:97:10:cd:56:e9:20:1d:c7:69:83:8e:35: 44:96:42:1b:7a:e1:82:70:e0:75:26:41:bf:31:dd:7c:04:81: 4a:29:be:4d:d3:5b:5c:52:c4:40:8e:b7:2e:73:ba:87:b7:9c: 46:52:a3:01:bf:94:4a:d8:3a:a2:47:fa:67:cb:45:51:5a:80: 33:da:67:0e:57:5a:3b:71:1a:ea:bf:b5:31:a7:c8:50:87:cd: 48:41:cd:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zajQbRiw3K9o5r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk NzI5NmNhMGUtNmFlYi00MjU3LThmNWMtMmU3MDdkMTI5YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi68KI2rTC+XqASf0HNHyJ1PkBYrVSqfld3lm lZ+slxqjc0QZuUZ4HPnHAttA9+ivQLkne451bpYW3gHycNrCxGd2kZQ6/eMh770D BE88KD3BeWIqiT+Vaz/lmHUKc/lfB2Cc0JztUheSV5Ko5pQsTsOqz4EhZFtAdVIp BZgKjnWttCxsjqYE8gadxVNZRt5xqPaxOqS0JfvjvY4FL//6nYJiETvCJsvAHeIK y+jC4Yc+vVMUXt1EoBACVKnvwyJA97hvaGrSc7V3EXxE2LNqeCbZwU8aTiZIiBH1 ehTkUWkpbPkQdJZdiuj/kjObj773r1R5vqZM16SWs7O4G3aXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhNNA/FVgsTFEFQo7xp4ohWkB9uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADheUSqsOAjo1lm/NfM5TZorJmwJ1dEw27QHK2RdoDlvJI+EpkcFtHGR dFiCpLvDLp93yNl1uYVNhPj+69adcZJd+SmI/t8kIDxIyVaLJvKkDQ55uuwycs8l 70THgc8mfly+t7t1I7GPGDSuIYW1iI4iQnj9nN6sGiv6mXMPX2Ez9e90aTENkLwl m4DfKw9ZKe7o3VexW1zte/2dITH29kEkvK3BhZ/Hj5cQzVbpIB3HaYOONUSWQht6 4YJw4HUmQb8x3XwEgUopvk3TW1xSxECOty5zuoe3nEZSowG/lErYOqJH+mfLRVFa gDPaZw5XWjtxGuq/tTGnyFCHzUhBzY4= -----END CERTIFICATE-----Generated at Tue Jul 21 21:09:26 2026 by rpki-client