$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa File: 43d09c92-e733-3dac-88d4-a905a60d1295.roa (raw, json) Hash identifier: uJBmBYXhC7xi1pLOnN+w7d/5afyJvtMadx58wmUxFB4= Subject key identifier: 6E:48:99:12:78:D4:9C:43:6C:87:22:C5:1E:77:1D:91:46:59:3F:E4 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E779A28DE669CE951AC108240 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 8069 IP address blocks: 20.33.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:28:de:66:9c:e9:51:ac:10:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=313c9ba8-ad17-4f65-87cd-a85b15d2aeb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:5a:30:0f:0c:3d:ee:38:38:f5:42:e2:47: c0:b6:4d:3d:06:7a:2a:d6:44:c1:63:39:71:7c:7d: 1e:c9:30:fe:a7:15:0c:ef:1b:c5:f5:01:3a:20:1f: 99:b9:95:ee:4f:0c:6e:58:ad:ea:48:b5:9f:2d:1a: 8d:6d:46:3a:ee:0d:54:6b:e4:29:c8:93:2c:43:11: f6:f3:18:87:ba:2e:53:42:98:86:47:3c:03:b8:11: 68:82:6a:ce:0e:78:5c:13:7c:d0:ec:48:86:cb:be: 05:b2:21:16:ac:f6:07:f5:23:5f:af:ea:77:13:c0: 45:e0:2a:dc:ee:88:b8:68:83:27:1e:f0:48:a8:6a: 9f:44:4a:66:53:1d:83:86:c4:5b:dc:96:74:af:4a: 1f:9e:6d:f0:e5:1b:0a:d9:29:3b:2e:c0:5a:51:9b: 00:9d:bc:93:8d:2d:30:97:6f:57:52:2f:b8:c5:49: 3e:77:aa:a9:68:15:8e:fb:a8:21:95:38:ba:12:be: d8:c5:d5:97:b1:1c:d7:9b:21:2e:3f:7d:87:08:24: 3e:39:7c:58:24:d8:ae:9e:b6:bc:13:e3:d0:6a:5d: ac:96:74:c4:92:b0:40:6e:f9:b5:70:6a:46:1a:a5: 58:ac:6e:6c:a2:2a:89:11:f2:2f:9e:b4:39:85:04: cc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:48:99:12:78:D4:9C:43:6C:87:22:C5:1E:77:1D:91:46:59:3F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43d09c92-e733-3dac-88d4-a905a60d1295.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c7:9b:c9:84:c9:2d:91:55:fc:33:37:04:0e:d8:d0:85:18: cf:f3:fe:df:c9:cd:0a:55:e5:01:1f:b2:a5:72:7e:69:96:99: a4:92:65:ee:03:03:50:ed:cb:ca:49:d5:d7:1b:08:d3:9d:47: f1:71:a6:76:50:57:0e:82:d7:9f:bd:bc:a6:37:62:e9:e6:51: d6:a5:ff:8b:03:ab:ce:06:f7:81:ff:04:8b:99:92:81:d7:07: 6a:4d:83:b6:58:88:4e:c1:2a:e3:37:63:2f:88:40:b9:de:f1: 0f:07:02:01:4c:84:69:2e:01:26:c0:b3:34:81:f7:5c:f9:ad: 37:f7:41:a3:a1:00:e8:09:0a:75:9e:5e:81:a3:22:e8:25:2f: 02:dd:59:2b:7f:88:6f:b3:3e:7e:a0:13:6e:4f:9a:80:5f:a9: 7b:f4:5d:08:e7:a1:2d:fd:3b:c9:0d:1a:72:d5:66:81:90:85: a6:2b:8b:a7:1f:f1:e1:39:3e:22:a9:ea:c0:a8:e5:80:9e:bc: 08:1e:7d:41:be:45:d4:97:da:fa:9f:74:f6:62:bb:2a:78:ce: 45:0b:15:04:bc:9d:07:a8:81:99:cb:7e:c6:26:20:10:45:de: b5:72:b4:be:73:85:6a:c8:9c:bb:1c:7e:41:a8:16:52:dd:61: a3:08:37:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mijeZpzpUawQgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk MzEzYzliYTgtYWQxNy00ZjY1LTg3Y2QtYTg1YjE1ZDJhZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGtaMA8MPe44OPVC4kfAtk09Bnoq1kTBYzlx fH0eyTD+pxUM7xvF9QE6IB+ZuZXuTwxuWK3qSLWfLRqNbUY67g1Ua+QpyJMsQxH2 8xiHui5TQpiGRzwDuBFogmrODnhcE3zQ7EiGy74FsiEWrPYH9SNfr+p3E8BF4Crc 7oi4aIMnHvBIqGqfREpmUx2DhsRb3JZ0r0ofnm3w5RsK2Sk7LsBaUZsAnbyTjS0w l29XUi+4xUk+d6qpaBWO+6ghlTi6Er7YxdWXsRzXmyEuP32HCCQ+OXxYJNiunra8 E+PQal2slnTEkrBAbvm1cGpGGqVYrG5soiqJEfIvnrQ5hQTMOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5ImRJ41JxDbIcixR53HZFGWT/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDNkMDljOTItZTczMy0z ZGFjLTg4ZDQtYTkwNWE2MGQxMjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfHm8mEyS2RVfwzNwQO2NCFGM/z/t/JzQpV5QEfsqVyfmmWmaSSZe4D A1Dty8pJ1dcbCNOdR/FxpnZQVw6C15+9vKY3YunmUdal/4sDq84G94H/BIuZkoHX B2pNg7ZYiE7BKuM3Yy+IQLne8Q8HAgFMhGkuASbAszSB91z5rTf3QaOhAOgJCnWe XoGjIuglLwLdWSt/iG+zPn6gE25PmoBfqXv0XQjnoS39O8kNGnLVZoGQhaYri6cf 8eE5PiKp6sCo5YCevAgefUG+RdSX2vqfdPZiuyp4zkULFQS8nQeogZnLfsYmIBBF 3rVytL5zhWrInLscfkGoFlLdYaMIN1Y= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:52 2026 by rpki-client