$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa File: 011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa (raw, json) Hash identifier: NXcu0OYq+nbLCSCu2HpRv8Q+D8Ddwu4/L2yreEx+dLc= Subject key identifier: F2:C2:D5:5B:91:2E:37:E0:83:19:D2:FB:13:31:C3:32:94:E7:F1:EB Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BBE403C08F25BE81D690AFF00 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 1239 IP address blocks: 67.43.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3c:08:f2:5b:e8:1d:69:0a:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=66c56abf-f430-4bbb-bee6-a68d47b0ce0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:e4:36:8b:df:43:4b:be:38:fe:10:6a:36: bc:10:4b:2d:59:86:bb:05:57:4a:c4:18:ac:7f:f7: 33:21:6d:43:34:cd:26:41:ff:9c:da:9e:08:e4:50: b3:9e:6a:34:c1:5d:ae:e2:92:ef:1a:80:b8:83:b8: 28:66:11:f5:f9:b5:3e:88:79:33:ba:17:5d:11:b5: 39:70:ab:d9:e7:b5:70:e1:26:32:e8:a4:5d:bd:02: 6f:ac:b5:d8:91:7d:fc:ea:74:f2:50:7b:df:29:13: 5a:95:73:0e:28:88:69:8b:43:d7:b8:e6:c3:28:a7: 0e:74:33:05:01:f0:79:2c:0a:aa:a6:e7:64:36:5a: 1e:23:ae:c3:03:99:2a:f4:5e:dc:0c:5c:8f:6d:b5: f4:e2:de:f1:77:f8:47:85:e0:c3:bf:48:45:06:d4: 28:09:a1:32:82:5b:8e:53:1f:87:38:2e:72:38:8f: b4:9a:c7:50:5a:e2:60:cb:70:d1:52:35:e4:4e:ba: 54:99:67:3b:d7:a7:b4:0c:ba:6f:95:de:be:43:96: a9:70:d9:aa:2b:a6:6a:46:a6:e0:e7:ac:3b:f3:a1: 53:46:01:86:a1:51:9e:91:12:f4:49:7a:54:a5:fa: 1f:8f:a1:bb:f0:03:b1:b2:c3:72:8b:c0:95:75:49: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C2:D5:5B:91:2E:37:E0:83:19:D2:FB:13:31:C3:32:94:E7:F1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/011be0c2-599b-3860-bc74-e5c9e90ac6b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:03:ef:9a:52:da:15:56:2e:10:13:ec:b6:20:c5:2c:c9:05: d4:47:27:12:35:d2:97:ea:f4:6d:31:9d:49:5f:e4:fb:78:67: c7:c7:b9:bf:1f:3f:83:a7:fa:91:00:12:5c:7a:98:ed:75:12: c2:dd:fa:9a:34:1b:6c:fd:16:88:cb:5d:44:1a:cf:e2:16:9a: 4b:a0:39:f5:41:21:44:0c:a9:7a:8b:52:7d:2f:ba:d7:93:22: b8:8d:4e:b4:0e:6d:f4:0b:58:0d:32:73:a1:ec:46:e3:4d:9c: 43:e9:15:84:e4:96:57:e8:19:47:37:8a:9e:d4:58:0b:3a:23: 21:ba:b9:72:d4:0c:17:18:ab:29:6a:af:c0:30:29:f6:14:69: b9:1e:5d:d1:a9:47:6d:c2:04:56:45:3d:30:17:89:2e:05:8d: 14:ca:f1:8a:36:5f:5b:b7:e2:e5:c0:45:f2:05:02:fb:b4:d6: 61:59:37:03:75:3c:c8:91:9d:c7:d1:26:3c:4f:59:9a:27:42: 67:38:d0:c6:a6:9a:c6:22:51:88:d8:eb:a2:19:a7:cb:b1:4b: c0:3e:e6:a6:fa:65:0a:c4:50:7b:78:23:e2:fe:47:8a:86:93: 74:cb:af:b9:e0:25:a9:8f:70:65:4b:2d:57:c9:30:da:39:58: cb:85:f6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDwI8lvoHWkK/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NjZjNTZhYmYtZjQzMC00YmJiLWJlZTYtYTY4ZDQ3YjBjZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXrkNovfQ0u+OP4Qaja8EEstWYa7BVdKxBis f/czIW1DNM0mQf+c2p4I5FCznmo0wV2u4pLvGoC4g7goZhH1+bU+iHkzuhddEbU5 cKvZ57Vw4SYy6KRdvQJvrLXYkX386nTyUHvfKRNalXMOKIhpi0PXuObDKKcOdDMF AfB5LAqqpudkNloeI67DA5kq9F7cDFyPbbX04t7xd/hHheDDv0hFBtQoCaEygluO Ux+HOC5yOI+0msdQWuJgy3DRUjXkTrpUmWc716e0DLpvld6+Q5apcNmqK6ZqRqbg 56w786FTRgGGoVGekRL0SXpUpfofj6G78AOxssNyi8CVdUmH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLC1VuRLjfggxnS+xMxwzKU5/HrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMDExYmUwYzItNTk5Yi0z ODYwLWJjNzQtZTVjOWU5MGFjNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQysoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMwD75pS2hVWLhAT7LYgxSzJBdRHJxI10pfq9G0xnUlf5Pt4Z8fHub8f P4On+pEAElx6mO11EsLd+po0G2z9FojLXUQaz+IWmkugOfVBIUQMqXqLUn0vuteT IriNTrQObfQLWA0yc6HsRuNNnEPpFYTkllfoGUc3ip7UWAs6IyG6uXLUDBcYqylq r8AwKfYUabkeXdGpR23CBFZFPTAXiS4FjRTK8Yo2X1u34uXARfIFAvu01mFZNwN1 PMiRncfRJjxPWZonQmc40MammsYiUYjY66IZp8uxS8A+5qb6ZQrEUHt4I+L+R4qG k3TLr7ngJamPcGVLLVfJMNo5WMuF9mM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:41 2025 by rpki-client