$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35240d07-44c1-3f4d-a948-a6ba2a4f0f9d.roa File: 35240d07-44c1-3f4d-a948-a6ba2a4f0f9d.roa (raw, json) Hash identifier: 8yi8NfmybBR9gfAl3E4K0rmrJ6ByUy1nUz17fIZPx1w= Subject key identifier: 5E:18:44:8F:4C:58:12:E6:4F:2E:85:E4:EE:32:26:9F:9B:42:24:16 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E9507F5A0A33D126E0F4C20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35240d07-44c1-3f4d-a948-a6ba2a4f0f9d.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 144.33.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:07:f5:a0:a3:3d:12:6e:0f:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=6f64628c-ea41-4e7a-b458-01ac4bbe216b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e7:b2:ab:5c:07:ad:c5:5a:7a:8c:d8:20:c9: 4c:a5:58:50:b8:d6:15:3e:a4:f9:79:49:01:31:e7: ad:78:10:a7:1c:11:69:93:b3:2b:56:e9:59:93:07: 79:74:ef:40:79:1e:26:07:4b:31:81:5e:2c:fe:ad: 3e:ca:80:3b:89:fc:44:f2:a2:56:23:99:90:c9:c3: 6d:6b:89:ec:2a:bf:7b:f4:bd:fc:4d:3a:4d:32:f3: 5a:2f:90:64:f6:65:f3:4b:45:c6:2b:21:9c:88:12: 4d:d2:6b:84:7b:43:88:28:5e:29:85:dd:c8:59:7e: 0e:1e:47:c1:fa:9a:8b:28:aa:dc:c4:bd:2d:f1:a3: 1e:a7:ea:de:4e:61:43:a8:5f:f9:20:44:b0:b6:64: ce:05:1c:4c:4b:b4:2f:bc:85:48:e3:95:0e:89:7c: ad:11:80:fb:e2:aa:5b:24:72:27:f4:ca:ad:12:1b: 70:bf:61:2e:b3:b4:e5:99:ad:0a:76:95:35:b8:7a: e8:20:c9:f1:85:9a:8e:37:03:88:b1:63:42:87:56: a9:ad:ed:33:2a:ae:59:72:85:bb:1f:36:17:db:91: e7:50:60:28:4a:16:d5:a5:2a:5f:93:92:2e:dc:5f: 27:7e:61:62:70:db:ad:2a:a9:d5:14:67:cd:c5:33: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:18:44:8F:4C:58:12:E6:4F:2E:85:E4:EE:32:26:9F:9B:42:24:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35240d07-44c1-3f4d-a948-a6ba2a4f0f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 144.33.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:79:04:4b:8d:05:1f:cc:cb:ff:ea:31:87:6d:1e:9c:b7:a4: ca:cd:d4:5d:2c:21:fc:e5:59:ed:c7:11:57:78:a5:f4:fa:9a: de:af:7c:72:a4:d8:e4:6a:ab:61:e0:da:83:51:02:5e:1c:76: 89:cd:ad:5c:3a:f9:71:67:50:ff:aa:52:cc:50:71:a3:10:85: c1:e2:70:1f:2e:d7:bc:34:ba:4f:3b:2e:b4:c8:02:5d:a6:4e: ca:60:d6:ca:0f:e4:58:1e:d8:00:d6:b5:b4:03:17:a7:31:36: d1:c9:46:9c:1b:6c:d8:4c:25:76:f1:e4:cb:ed:ad:d9:cc:da: 63:a3:f1:8a:d4:94:94:1c:0f:2c:5f:fb:67:e2:0f:c1:27:48: 8d:24:f5:52:b6:89:71:3d:4e:aa:ec:a0:4c:b7:3a:48:71:9f: 55:1d:cc:b9:e9:54:83:fa:9b:d1:0d:c3:26:bb:41:6f:15:96: f0:a6:8d:da:3d:5d:50:ee:0b:37:21:5d:a5:7e:fd:bd:fd:0e: 19:da:c7:7f:56:37:4b:11:e8:f1:8e:57:17:cc:f4:92:fc:ef: 52:50:2c:17:26:f8:e6:67:cf:21:d2:70:e0:44:bb:e2:f6:fe: aa:d0:18:0d:fc:21:f8:61:bf:df:8d:71:2b:f4:3f:30:94:55: a2:bb:70:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQf1oKM9Em4PTCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk NmY2NDYyOGMtZWE0MS00ZTdhLWI0NTgtMDFhYzRiYmUyMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ueyq1wHrcVaeozYIMlMpVhQuNYVPqT5eUkB MeeteBCnHBFpk7MrVulZkwd5dO9AeR4mB0sxgV4s/q0+yoA7ifxE8qJWI5mQycNt a4nsKr979L38TTpNMvNaL5Bk9mXzS0XGKyGciBJN0muEe0OIKF4phd3IWX4OHkfB +pqLKKrcxL0t8aMep+reTmFDqF/5IESwtmTOBRxMS7QvvIVI45UOiXytEYD74qpb JHIn9MqtEhtwv2Eus7Tlma0KdpU1uHroIMnxhZqONwOIsWNCh1apre0zKq5ZcoW7 HzYX25HnUGAoShbVpSpfk5Iu3F8nfmFicNutKqnVFGfNxTNXSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4YRI9MWBLmTy6F5O4yJp+bQiQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzUyNDBkMDctNDRjMS0z ZjRkLWE5NDgtYTZiYTJhNGYwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR5BEuNBR/My//qMYdtHpy3pMrN1F0sIfzlWe3HEVd4pfT6mt6vfHKk 2ORqq2Hg2oNRAl4cdonNrVw6+XFnUP+qUsxQcaMQhcHicB8u17w0uk87LrTIAl2m Tspg1soP5Fge2ADWtbQDF6cxNtHJRpwbbNhMJXbx5MvtrdnM2mOj8YrUlJQcDyxf +2fiD8EnSI0k9VK2iXE9TqrsoEy3Okhxn1UdzLnpVIP6m9ENwya7QW8VlvCmjdo9 XVDuCzchXaV+/b39Dhnax39WN0sR6PGOVxfM9JL871JQLBcm+OZnzyHScOBEu+L2 /qrQGA38Ifhhv9+NcSv0PzCUVaK7cGA= -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:20 2026 by rpki-client