$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa File: 67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa (raw, json) Hash identifier: bqBkY+Sb58qD7KSgIwDzauuDUi9ognUvGK+gjlOJ1hs= Subject key identifier: FB:53:DE:92:A7:2C:0C:CC:90:49:1B:D4:15:F1:0F:D0:CA:15:49:EB Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BB2F7A9D3F818BE1526E74A80 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 67.43.36.0/23 maxlen: 24 67.43.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:d3:f8:18:be:15:26:e7:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=fbe8decf-776d-4e32-9cf0-a256e35afd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:a1:42:d7:35:7f:59:ec:61:f6:52:f8:a2: b7:09:bc:9e:75:23:c1:da:f0:f6:94:fb:d3:a1:19: 1c:8e:d4:b4:88:ae:e9:a2:fa:4f:ad:7c:35:8d:58: 5b:5b:49:8f:15:bc:9f:59:2a:4c:df:c9:87:04:6a: 88:5f:e1:96:1a:05:4c:34:05:9c:92:e8:f3:9b:e2: d7:b5:d6:98:d2:f2:8e:dd:35:ca:ad:9b:4b:dd:b0: 5a:a7:77:9c:3c:1e:69:95:27:e0:bf:fb:00:4a:3b: 4d:30:df:1e:24:aa:5a:d7:30:3c:2a:4c:5a:d7:5a: 8d:8e:56:c8:f1:15:9a:c4:38:cd:f3:34:02:d6:03: 4a:e1:dc:8b:21:48:8a:35:39:fd:8a:7e:4c:e2:a3: 5c:15:ba:60:2b:da:6f:fe:dd:58:e5:9c:f8:5e:f9: 08:c1:a1:ad:08:a2:42:40:65:9a:9d:d4:5a:3f:7f: b4:a6:75:30:36:96:16:fa:f2:2b:6b:3b:d5:b5:fa: 40:56:24:19:9c:76:5b:42:da:13:56:21:de:2d:7d: 39:bf:13:37:a2:b7:f1:25:be:f1:8b:ee:ca:5c:03: 84:0a:80:de:b2:22:ec:5c:ab:18:a8:c4:48:3e:5c: 83:9e:bc:be:4f:34:45:34:14:3d:5c:b4:fb:fe:f7: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:53:DE:92:A7:2C:0C:CC:90:49:1B:D4:15:F1:0F:D0:CA:15:49:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.36.0/23 67.43.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ea:89:5a:78:6b:64:4f:09:c8:f8:48:e7:5b:6c:fa:fe:c1: 5c:5f:25:84:8c:9d:88:e4:a3:6e:df:37:15:04:bc:27:b9:5c: ad:9b:2b:17:23:80:1b:cb:5b:57:0e:2e:c6:1d:ed:8d:86:9c: 74:5e:53:bb:82:f5:59:54:1c:e1:05:33:fc:4b:a6:94:36:9f: d1:80:8f:05:07:99:44:1a:6c:a3:52:d9:42:3d:a2:10:29:77: 6e:c8:8f:7c:a8:53:d6:57:03:97:39:d9:d5:54:29:18:a0:ad: 6a:fa:0d:6e:f2:d3:ef:ee:93:94:b3:c2:33:b2:1c:bb:56:de: d8:90:9a:eb:2d:d6:b6:b1:b1:65:a7:51:5d:c0:ca:7a:f9:f6: 3f:a1:2b:7c:e4:6d:86:6e:ba:9a:1c:d6:f1:1e:b1:9b:1f:fb: 08:11:50:20:4f:3f:7e:34:44:69:a1:4b:b5:53:2b:d5:b8:67: ff:5f:7f:45:a4:16:cf:41:75:b5:4c:91:fe:02:cc:da:b0:20: f8:e3:13:8c:35:02:87:01:2b:a6:33:92:2e:60:15:1a:c2:05: bd:d5:70:e3:8b:17:28:84:49:b2:ae:15:f3:c7:7f:3d:74:07: c0:20:89:6a:93:6f:4f:f2:6a:53:ba:da:c3:98:23:f0:24:8e: 57:ee:b1:5e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuy96nT+Bi+FSbnSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmJlOGRlY2YtNzc2ZC00ZTMyLTljZjAtYTI1NmUzNWFmZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/WhQtc1f1nsYfZS+KK3CbyedSPB2vD2lPvT oRkcjtS0iK7povpPrXw1jVhbW0mPFbyfWSpM38mHBGqIX+GWGgVMNAWckujzm+LX tdaY0vKO3TXKrZtL3bBap3ecPB5plSfgv/sASjtNMN8eJKpa1zA8Kkxa11qNjlbI 8RWaxDjN8zQC1gNK4dyLIUiKNTn9in5M4qNcFbpgK9pv/t1Y5Zz4XvkIwaGtCKJC QGWandRaP3+0pnUwNpYW+vIrazvVtfpAViQZnHZbQtoTViHeLX05vxM3orfxJb7x i+7KXAOECoDesiLsXKsYqMRIPlyDnry+TzRFNBQ9XLT7/vfgUwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPtT3pKnLAzMkEkb1BXxD9DKFUnrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNjdhYjcwM2MtZTdlYy0z OGZlLThhZDItMjRhZmM3ODZmMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBQyskAwQC QyssMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABfqiVp4a2RPCcj4SOdbbPr+wVxfJYSMnYjko27fNxUEvCe5 XK2bKxcjgBvLW1cOLsYd7Y2GnHReU7uC9VlUHOEFM/xLppQ2n9GAjwUHmUQabKNS 2UI9ohApd27Ij3yoU9ZXA5c52dVUKRigrWr6DW7y0+/uk5SzwjOyHLtW3tiQmust 1raxsWWnUV3Aynr59j+hK3zkbYZuupoc1vEesZsf+wgRUCBPP340RGmhS7VTK9W4 Z/9ff0WkFs9BdbVMkf4CzNqwIPjjE4w1AocBK6Yzki5gFRrCBb3VcOOLFyiESbKu FfPHfz10B8AgiWqTb0/yalO62sOYI/AkjlfusV4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:23 2025 by rpki-client