$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa File: 7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json) Hash identifier: J9L4iMeLEVm8dnciztcCvWYCKxqTuNGa04dFkA0jiHM= Subject key identifier: 22:B6:3D:88:E8:99:6C:F3:21:94:C3:08:22:98:D2:21:69:79:90:CF Certificate issuer: /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Certificate serial: 010D0C9F4328584AA160C80051C0173A7A894228 Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16385 IP address blocks: 67.43.86.0/24 maxlen: 24 67.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:c8:00:51:c0:17:3a:7a:89:42:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=ecf6b397-6f78-4c21-9d70-1025abfb6ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dd:fa:1b:de:ec:e3:1a:b8:80:f0:33:1b:df: 65:df:4f:52:84:05:36:9e:b0:7e:7c:d6:71:39:07: 23:c7:55:4e:9f:3b:1a:7b:6b:e0:ab:32:da:84:7d: 81:55:22:3a:28:ad:c9:5c:0e:7a:75:44:6d:dc:ed: c1:cd:4a:21:da:80:c0:b9:59:17:fd:12:7a:d4:77: 66:54:91:11:74:7e:20:33:f1:a1:36:3e:7c:0d:de: bd:33:2b:c3:07:e9:0e:94:7a:5e:e3:fb:fb:3e:9d: e8:6e:99:ca:f8:44:c9:0b:14:85:f5:e7:13:4c:05: 12:21:1b:c2:cb:ed:c6:e2:fd:27:9f:f3:b9:1e:95: 8f:30:9d:b5:6d:7d:38:c1:6b:7e:b2:45:48:b4:27: 02:ae:68:de:c4:93:cd:7b:86:75:42:e3:3b:b5:4b: 7c:bd:67:e8:56:4b:cb:bb:6d:f3:ff:c7:74:d1:a3: a5:31:ea:4e:57:84:e5:c4:18:62:7e:86:db:05:19: 0e:12:b3:7e:e6:8f:35:c3:97:94:05:cd:03:63:c7: c6:02:53:f1:2d:1d:d3:f4:d8:bc:07:07:f4:cc:63: d6:61:91:d3:38:46:a3:c5:2d:24:46:22:ed:19:fc: fe:ea:d7:67:57:8b:05:e3:bc:6a:47:42:d4:01:ad: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:3D:88:E8:99:6C:F3:21:94:C3:08:22:98:D2:21:69:79:90:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl X509v3 Authority Key Identifier: keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer sbgp-ipAddrBlock: critical IPv4: 67.43.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:41:6c:c7:ec:8f:e3:79:75:43:8c:b7:c1:20:4b:14:13:9c: 02:78:05:1a:82:f2:20:bb:3e:3a:98:51:7e:e6:f2:25:d3:51: 97:2e:e8:54:a3:0a:9a:3a:d3:f3:76:41:1a:66:21:32:12:36: c7:8f:80:99:07:aa:aa:33:01:ac:c6:a1:54:7f:10:83:d0:9b: d6:13:57:4a:30:a2:76:9d:c7:9b:ae:60:cf:9b:79:b1:9d:c2: d2:da:1a:77:4e:2c:9e:7d:7d:1d:a1:61:33:18:11:80:8c:97: aa:49:e7:d3:1d:ed:8f:fc:ee:d3:4d:2d:34:36:7f:dc:d3:0d: 96:83:ff:15:e6:79:d4:4d:5a:c2:52:b8:b6:60:44:79:c6:8e: 27:7b:64:87:88:b9:fa:cc:39:cd:39:0a:be:bc:dd:41:8f:ac: f3:6e:9a:81:3f:e5:c2:fe:bd:04:9c:cd:c0:1c:fb:4c:16:0f: 09:67:cb:07:e9:09:c8:ce:c8:fa:61:6f:27:14:50:4b:6f:01: 4e:54:eb:76:8e:b4:2f:33:a5:05:00:4f:94:b6:3d:a7:d2:d5: f1:a3:38:e7:8e:27:35:c2:8d:72:e0:ad:55:48:d3:d4:89:9a: 36:3f:cf:6a:3d:97:8d:a5:60:cb:63:99:4c:fe:19:bc:73:43: e3:02:23:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMgAUcAXOnqJQigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhMjgyNzYtZjQ5My00YTlmLTk4MjQtYzk3MTdjMWNm NmZkMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ZWNmNmIzOTctNmY3OC00YzIxLTlkNzAtMTAyNWFiZmI2YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t36G97s4xq4gPAzG99l309ShAU2nrB+fNZx OQcjx1VOnzsae2vgqzLahH2BVSI6KK3JXA56dURt3O3BzUoh2oDAuVkX/RJ61Hdm VJERdH4gM/GhNj58Dd69MyvDB+kOlHpe4/v7Pp3obpnK+ETJCxSF9ecTTAUSIRvC y+3G4v0nn/O5HpWPMJ21bX04wWt+skVItCcCrmjexJPNe4Z1QuM7tUt8vWfoVkvL u23z/8d00aOlMepOV4TlxBhifobbBRkOErN+5o81w5eUBc0DY8fGAlPxLR3T9Ni8 Bwf0zGPWYZHTOEajxS0kRiLtGfz+6tdnV4sF47xqR0LUAa3QTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCK2PYjomWzzIZTDCCKY0iFpeZDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEy ODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcxN2MxY2Y2ZmQvNzk1N2FmMjMtY2JiNC0z NmVkLTgwNWYtNzgwNmYyNmU0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjVhMjgyNzYtZjQ5My00YTlmLTk4 MjQtYzk3MTdjMWNmNmZkLzY1YTI4Mjc2LWY0OTMtNGE5Zi05ODI0LWM5NzE3YzFj ZjZmZC5jcmwwHwYDVR0jBBgwFoAUD2fY2H/CdCcfkm21Lnih2pcDNR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEyODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcx N2MxY2Y2ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQytWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhBbMfsj+N5dUOMt8EgSxQTnAJ4BRqC8iC7PjqYUX7m8iXTUZcu6FSj Cpo60/N2QRpmITISNsePgJkHqqozAazGoVR/EIPQm9YTV0owonadx5uuYM+bebGd wtLaGndOLJ59fR2hYTMYEYCMl6pJ59Md7Y/87tNNLTQ2f9zTDZaD/xXmedRNWsJS uLZgRHnGjid7ZIeIufrMOc05Cr683UGPrPNumoE/5cL+vQSczcAc+0wWDwlnywfp CcjOyPphbycUUEtvAU5U63aOtC8zpQUAT5S2PafS1fGjOOeOJzXCjXLgrVVI09SJ mjY/z2o9l42lYMtjmUz+GbxzQ+MCI1M= -----END CERTIFICATE-----Generated at Thu Aug 7 20:11:46 2025 by rpki-client