$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7d10ce09-c8e3-3831-af85-01ef0e769688.roa File: 7d10ce09-c8e3-3831-af85-01ef0e769688.roa (raw, json) Hash identifier: IZpQIIJpw//qbuWCJI8/u3CIn6dLyC+T8tY6RXbggkQ= Subject key identifier: C6:C9:B2:01:3F:7E:AF:6B:89:52:51:74:A9:2D:17:81:17:F3:E5:54 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BB5C267B80AA8AFC6C7E8F100 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7d10ce09-c8e3-3831-af85-01ef0e769688.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 24669 IP address blocks: 67.43.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:67:b8:0a:a8:af:c6:c7:e8:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d49c9a61-3c71-4f2c-9d10-4d0d30a5c929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:4e:00:40:25:07:1a:e7:ee:18:63:6b:31: 34:b6:c3:c6:d2:64:4c:f7:06:e6:cb:a6:8c:f0:e7: 04:03:c7:31:c7:05:d8:84:3e:ab:f8:c3:95:19:1a: c4:6b:9d:14:16:a4:b7:a1:c6:54:e1:f5:e1:aa:3a: 15:9f:30:8d:f0:cc:02:88:21:98:4d:74:77:e8:3c: 9d:9c:2f:ce:4c:39:7a:d8:1d:15:29:f9:bb:c6:d9: 3c:03:eb:3e:aa:97:8f:7e:32:49:5c:dd:1e:75:79: a0:cc:54:b5:ab:be:df:ef:a1:80:e5:30:b9:f7:fe: b9:53:f1:83:ba:98:cf:6f:14:b6:b8:94:e9:88:60: 4b:d9:60:4e:38:b3:b2:67:97:0f:73:dd:6e:4d:31: ca:2f:33:01:54:ca:11:fa:88:0d:84:a8:7a:8b:28: bc:49:08:8b:51:e8:67:dc:8e:3d:58:eb:b8:c9:1f: e3:bf:72:3d:23:b6:33:80:4b:32:0b:da:13:97:63: 9c:9e:06:48:3f:cb:03:6f:4b:64:12:af:5c:a9:9b: 2e:d3:10:4a:37:f1:cc:fe:42:78:ab:87:9c:74:7c: 24:99:58:88:df:6d:87:d6:55:1a:b3:78:49:d5:4b: 3f:e2:06:98:65:3d:f9:d7:bc:22:ab:0b:85:0f:37: 48:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:B2:01:3F:7E:AF:6B:89:52:51:74:A9:2D:17:81:17:F3:E5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7d10ce09-c8e3-3831-af85-01ef0e769688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f2:3e:7d:11:c4:99:3a:72:9b:aa:7f:a9:fa:cb:a5:9b:99: d1:15:1e:8a:5a:8a:17:43:80:a2:2f:b7:5b:aa:97:b7:8a:5b: 29:18:f5:04:09:64:ce:25:71:1d:c4:94:2b:49:a0:23:f4:f8: c4:1f:8a:30:43:c6:45:6d:0e:15:67:4e:ef:43:c6:ec:e9:a3: 27:89:f3:47:f3:76:a3:ea:e8:b4:4a:9d:df:ac:c3:b6:4a:5a: 0f:5b:59:36:af:d9:bd:6c:8f:b2:3d:37:22:ed:e3:d2:a2:2f: 34:f6:d3:49:7a:35:57:2c:3a:46:2d:e8:49:44:e7:7f:62:d9: 72:d4:bc:d7:d8:fd:8d:db:ed:6d:35:88:98:ac:38:47:c4:fc: bf:cd:83:74:ee:bd:e8:40:65:3e:01:b4:89:8e:c7:ff:c7:ce: a7:fe:24:2a:6a:2e:a5:a3:e7:85:65:1c:2a:5b:96:73:1d:64: b5:29:b7:1f:04:75:8d:82:02:1b:a9:19:f1:3e:79:cb:e9:14: 2d:e5:f5:bf:79:56:94:5a:8e:04:9a:b0:24:8d:e8:79:ea:1a: c2:0d:14:df:5e:45:33:e4:97:0d:cb:2d:64:c2:3b:3d:e4:46: 5f:3a:3e:7a:96:b4:dc:c3:0a:e9:c8:26:e7:ee:f0:49:ca:93: 25:ce:cf:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wme4Cqivxsfo8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDQ5YzlhNjEtM2M3MS00ZjJjLTlkMTAtNGQwZDMwYTVjOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuelOAEAlBxrn7hhjazE0tsPG0mRM9wbmy6aM 8OcEA8cxxwXYhD6r+MOVGRrEa50UFqS3ocZU4fXhqjoVnzCN8MwCiCGYTXR36Dyd nC/OTDl62B0VKfm7xtk8A+s+qpePfjJJXN0edXmgzFS1q77f76GA5TC59/65U/GD upjPbxS2uJTpiGBL2WBOOLOyZ5cPc91uTTHKLzMBVMoR+ogNhKh6iyi8SQiLUehn 3I49WOu4yR/jv3I9I7YzgEsyC9oTl2OcngZIP8sDb0tkEq9cqZsu0xBKN/HM/kJ4 q4ecdHwkmViI322H1lUas3hJ1Us/4gaYZT3517wiqwuFDzdIkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbJsgE/fq9riVJRdKktF4EX8+VUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvN2QxMGNlMDktYzhlMy0z ODMxLWFmODUtMDFlZjBlNzY5Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfyPn0RxJk6cpuqf6n6y6WbmdEVHopaihdDgKIvt1uql7eKWykY9QQJ ZM4lcR3ElCtJoCP0+MQfijBDxkVtDhVnTu9DxuzpoyeJ80fzdqPq6LRKnd+sw7ZK Wg9bWTav2b1sj7I9NyLt49KiLzT200l6NVcsOkYt6ElE539i2XLUvNfY/Y3b7W01 iJisOEfE/L/Ng3TuvehAZT4BtImOx//Hzqf+JCpqLqWj54VlHCpblnMdZLUptx8E dY2CAhupGfE+ecvpFC3l9b95VpRajgSasCSN6HnqGsINFN9eRTPklw3LLWTCOz3k Rl86PnqWtNzDCunIJufu8EnKkyXOz+Q= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:00 2025 by rpki-client