$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa File: 43645d55-9561-369b-9813-11df0c8526be.roa (raw, json) Hash identifier: wrITdOTbcPyIChctH4602AAAAJiiC7MoK9FIArKYzXI= Subject key identifier: 19:2E:4D:22:68:50:2D:BD:13:69:DE:2C:FC:F2:55:02:FB:94:4C:66 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584F15CCFE5F98F2C5C7229513C0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:fe:5f:98:f2:c5:c7:22:95:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=ffc51897-4b88-4a35-a144-338f08e7c0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5e:51:2a:ba:55:16:d1:c6:a1:71:00:9f:cd: b5:09:8f:3a:4c:01:6e:57:dd:41:84:b8:a5:78:f3: 86:01:43:54:b5:31:07:57:c2:15:11:69:f3:9f:0b: c4:2a:99:94:b5:a5:cc:9f:0d:d7:2b:2b:ec:2f:ea: da:fd:92:de:75:52:75:e3:dc:df:29:e1:1d:67:0c: 8f:80:cb:8e:3b:87:ac:8a:f2:54:ea:2e:dc:a0:ed: d3:fa:75:a7:b5:ab:35:fa:5e:c3:5f:26:6c:f2:1e: 5d:82:28:3b:66:20:b6:8b:b8:ec:4c:6f:c6:a5:f8: d0:03:6d:5a:0b:05:a3:49:1e:98:08:17:af:34:6a: 8b:2a:02:6f:29:4f:ee:88:e3:8b:01:5c:0a:36:c5: b4:1a:dc:ae:32:6b:1e:b6:a5:08:44:2f:79:c8:9b: e9:e8:6b:28:97:bd:64:51:e3:b2:13:bc:de:c9:16: 86:92:60:8d:f3:5a:86:01:d8:8c:bd:ee:85:47:54: 18:cd:da:22:1c:e8:70:43:10:9b:8f:97:d4:e9:ec: 86:e8:fc:fe:59:6f:84:c5:0b:43:5e:4d:56:35:b4: 13:0b:ba:5e:9a:dd:76:68:dc:6d:67:03:60:5e:c3: 6d:c9:b9:94:e0:eb:62:3d:71:6c:26:6d:1c:12:58: b7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2E:4D:22:68:50:2D:BD:13:69:DE:2C:FC:F2:55:02:FB:94:4C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/43645d55-9561-369b-9813-11df0c8526be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ea:da:ac:78:b6:7f:a5:eb:f0:0b:8a:7f:5d:42:27:ab:c7: de:e0:e1:0a:b1:06:7c:67:4f:b5:20:41:09:d4:ee:c9:36:b3: be:f2:f8:ca:ab:10:3b:09:e0:d1:85:ba:c2:13:80:0a:0d:91: 1e:5b:3e:4b:fa:7d:81:0b:b5:92:d5:9d:ff:88:67:d1:a8:7a: ad:e8:68:07:02:6c:6f:9b:3c:33:92:ca:10:a0:ec:4e:40:d1: 2c:c9:2a:f4:92:7c:dd:03:77:af:24:a8:b2:fa:c8:be:78:53: 22:b9:7c:b8:de:58:00:6c:74:ea:1f:a4:a1:6d:48:41:8b:2c: 39:7e:47:ba:a6:f6:9a:ba:23:6f:6a:93:83:95:a7:73:1c:d4: 06:f8:1b:eb:7f:1c:f7:d5:fa:79:2e:82:76:bf:7c:cc:68:88: 60:6b:3d:3f:bf:e5:0c:90:0b:e4:1b:98:50:ba:1a:43:2e:3b: 23:4a:a3:bd:d0:29:ea:14:58:df:cb:ba:3e:d4:7e:c7:45:07: 46:0c:96:c6:4e:85:75:cc:f1:bd:28:17:67:2d:bd:80:e5:27: b3:46:c4:e7:06:ae:39:dc:11:47:03:c2:5b:6b:06:fc:66:42: 23:23:55:e3:90:52:ee:40:f7:ed:ef:ae:c9:ae:b4:da:a7:d5: 90:cf:a3:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzP5fmPLFxyKVE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZmZjNTE4OTctNGI4OC00YTM1LWExNDQtMzM4ZjA4ZTdjMGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF5RKrpVFtHGoXEAn821CY86TAFuV91BhLil ePOGAUNUtTEHV8IVEWnznwvEKpmUtaXMnw3XKyvsL+ra/ZLedVJ149zfKeEdZwyP gMuOO4esivJU6i7coO3T+nWntas1+l7DXyZs8h5dgig7ZiC2i7jsTG/GpfjQA21a CwWjSR6YCBevNGqLKgJvKU/uiOOLAVwKNsW0GtyuMmsetqUIRC95yJvp6Gsol71k UeOyE7zeyRaGkmCN81qGAdiMve6FR1QYzdoiHOhwQxCbj5fU6eyG6Pz+WW+ExQtD Xk1WNbQTC7pemt12aNxtZwNgXsNtybmU4OtiPXFsJm0cEli3vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkuTSJoUC29E2neLPzyVQL7lExmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNDM2NDVkNTUtOTU2MS0z NjliLTk4MTMtMTFkZjBjODUyNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrq2qx4tn+l6/ALin9dQierx97g4QqxBnxnT7UgQQnU7sk2s77y+Mqr EDsJ4NGFusITgAoNkR5bPkv6fYELtZLVnf+IZ9Goeq3oaAcCbG+bPDOSyhCg7E5A 0SzJKvSSfN0Dd68kqLL6yL54UyK5fLjeWABsdOofpKFtSEGLLDl+R7qm9pq6I29q k4OVp3Mc1Ab4G+t/HPfV+nkugna/fMxoiGBrPT+/5QyQC+QbmFC6GkMuOyNKo73Q KeoUWN/Luj7UfsdFB0YMlsZOhXXM8b0oF2ctvYDlJ7NGxOcGrjncEUcDwltrBvxm QiMjVeOQUu5A9+3vrsmutNqn1ZDPo2c= -----END CERTIFICATE-----Generated at Tue Oct 13 08:07:11 2026 by rpki-client