$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: GJlBK13DX3YSQ1JQakIKMKPq/+Mz7o9ZOws9NObKMTs= Subject key identifier: 5C:B5:A8:B9:BF:28:DF:56:61:C7:BE:9D:FF:7A:CF:6D:BF:FF:6C:F9 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584D93255D3F4AEC5AA63594DF00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:5d:3f:4a:ec:5a:a6:35:94:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=09dbc5e5-ef55-4a4e-9798-7388fc118a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:27:c9:de:3c:d5:bf:42:e0:ac:66:d6:9d: 82:88:6b:d9:53:e2:34:5b:2c:02:59:36:5e:b2:5e: f1:4b:fe:81:22:cc:36:8a:25:ee:f5:b8:22:a4:fa: a5:16:1f:31:a7:ef:a6:f5:71:67:1a:be:8d:82:f4: 6c:d7:97:a3:68:31:65:88:d3:97:d7:a0:42:0e:21: 8a:fd:3e:bb:8a:ee:c2:20:f8:d0:c3:58:31:05:31: 6e:64:f0:c9:c8:94:ac:fb:d0:bd:b4:9f:a1:17:fd: cb:8e:46:3a:7e:77:3b:78:1d:c6:f8:f8:3c:58:c1: b5:37:ca:b4:48:79:41:24:c6:8e:d5:c9:ab:fb:b8: 2e:5d:ad:be:8c:87:df:65:15:09:6e:78:bd:12:47: fb:38:2f:d3:10:04:f0:c0:7b:5b:3b:cb:bb:2a:eb: e0:33:d1:dd:fa:c2:12:86:50:8a:c6:cc:70:82:2b: eb:c1:13:fe:cf:5e:b7:32:fa:cb:25:6e:3d:24:eb: 2e:f7:0b:af:54:6d:0a:d2:e6:27:a1:a0:99:9b:1a: 26:5a:20:ab:11:fa:58:56:f7:a2:24:d0:02:0a:6b: dd:44:44:61:e0:75:93:d7:15:82:d6:ab:86:8e:35: 4b:a5:53:fd:69:f7:3e:fd:b7:c7:fe:f6:3b:4c:b0: 94:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B5:A8:B9:BF:28:DF:56:61:C7:BE:9D:FF:7A:CF:6D:BF:FF:6C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f1:0b:db:fe:d6:75:e3:2e:97:37:cd:50:a6:dd:0f:b3:16: 0a:cc:c3:e2:f2:25:8c:37:97:b4:24:b2:43:36:f4:9b:f8:96: 93:1d:dc:65:3b:f7:87:1c:bd:c3:d9:59:70:83:c1:a8:78:f7: a5:0f:4e:64:11:19:85:a7:ef:06:c7:e7:f5:77:f3:e4:a6:30: f0:a1:e4:45:08:48:73:c9:d8:10:3e:29:12:29:ce:94:5f:8c: 58:3b:21:56:82:02:c2:8e:5d:fc:57:3a:dc:06:db:50:81:75: 03:8c:ff:5a:a2:29:46:fa:91:d9:0c:12:2c:91:49:59:82:48: dd:67:1c:f6:79:92:f3:ce:1a:49:f3:b5:f9:76:9d:91:78:ad: fc:cd:8a:bf:45:a4:56:6e:82:de:da:80:76:b5:f3:62:34:48: 5d:d0:f6:0c:09:26:b0:8c:ed:e2:d4:7d:27:60:00:37:bd:c9: 31:96:eb:0c:84:25:31:d6:32:31:43:1e:89:54:79:f0:1f:3d: 5c:c3:09:77:21:a1:fb:2f:98:48:fc:f0:4b:a3:67:c6:da:0d: d5:77:c9:67:24:f4:47:02:22:64:bf:e8:84:14:5c:de:5f:c9: 70:a4:68:e7:0d:f3:66:a6:6e:56:86:b9:cb:08:44:09:5c:b5: 95:1b:28:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJV0/SuxapjWU3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk MDlkYmM1ZTUtZWY1NS00YTRlLTk3OTgtNzM4OGZjMTE4YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VEnyd481b9C4Kxm1p2CiGvZU+I0WywCWTZe sl7xS/6BIsw2iiXu9bgipPqlFh8xp++m9XFnGr6NgvRs15ejaDFliNOX16BCDiGK /T67iu7CIPjQw1gxBTFuZPDJyJSs+9C9tJ+hF/3LjkY6fnc7eB3G+Pg8WMG1N8q0 SHlBJMaO1cmr+7guXa2+jIffZRUJbni9Ekf7OC/TEATwwHtbO8u7KuvgM9Hd+sIS hlCKxsxwgivrwRP+z163MvrLJW49JOsu9wuvVG0K0uYnoaCZmxomWiCrEfpYVvei JNACCmvdRERh4HWT1xWC1quGjjVLpVP9afc+/bfH/vY7TLCUAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy1qLm/KN9WYce+nf96z22//2z5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXxC9v+1nXjLpc3zVCm3Q+zFgrMw+LyJYw3l7QkskM29Jv4lpMd3GU7 94ccvcPZWXCDwah496UPTmQRGYWn7wbH5/V38+SmMPCh5EUISHPJ2BA+KRIpzpRf jFg7IVaCAsKOXfxXOtwG21CBdQOM/1qiKUb6kdkMEiyRSVmCSN1nHPZ5kvPOGknz tfl2nZF4rfzNir9FpFZugt7agHa182I0SF3Q9gwJJrCM7eLUfSdgADe9yTGW6wyE JTHWMjFDHolUefAfPVzDCXchofsvmEj88EujZ8baDdV3yWck9EcCImS/6IQUXN5f yXCkaOcN82amblaGucsIRAlctZUbKIo= -----END CERTIFICATE-----Generated at Wed Apr 22 01:52:23 2026 by rpki-client