$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa File: 939344cc-2583-384f-989a-b044342d604e.roa (raw, json) Hash identifier: kjaEpUSnotmm5XSQn3jfORZNzHaIkopZQsT0b6T7r6o= Subject key identifier: 4B:44:CB:BE:44:5C:B5:F3:8D:5C:A4:00:C5:A8:91:F4:E2:7C:40:E3 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584BA0D26541BF794AB55C049C00 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 834 IP address blocks: 67.43.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:65:41:bf:79:4a:b5:5c:04:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=a7548749-fbde-4199-92dc-30137f8713c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:0a:0c:f2:2a:b6:16:fb:ab:0f:59:0e:b3: 07:73:69:a2:4e:71:be:bd:2f:6d:bc:2a:23:20:82: dc:45:cb:97:62:e6:00:63:d2:29:20:78:71:f4:ee: 64:f3:57:f0:83:e0:9d:cd:29:fd:19:c3:c4:88:97: 1a:68:62:8a:16:67:e7:4a:45:ed:3a:2f:e4:12:4e: 0c:ee:96:d4:f6:18:3d:05:37:f8:4f:7f:d5:25:af: aa:d5:52:15:8e:b5:0a:1c:4a:72:c6:c5:10:27:79: 77:a0:97:8b:3c:dd:95:20:3e:7c:ec:13:8a:64:e6: d8:fc:c7:5d:27:d4:ba:e1:b3:d0:89:f4:e4:23:b8: 14:8f:05:e3:3e:88:a9:e1:ed:f3:56:45:28:52:49: 91:0d:fe:5a:de:5e:93:20:46:1d:20:f4:f1:b1:5d: 80:8a:0d:1d:a5:14:6b:e0:3a:64:e0:39:c7:4e:35: 58:33:c9:d0:be:d3:f4:0e:d0:f9:82:67:a3:f6:e1: d4:26:85:9f:b2:bf:d6:2c:15:fc:a2:22:f0:01:8b: 09:5c:e8:7e:23:ff:4b:2c:59:25:17:27:81:89:b4: bf:26:3c:7d:b5:fb:4c:d8:6d:bd:99:36:3b:6e:1d: b2:8d:18:e7:59:1d:a6:8b:88:1a:aa:37:30:3e:5f: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:CB:BE:44:5C:B5:F3:8D:5C:A4:00:C5:A8:91:F4:E2:7C:40:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/939344cc-2583-384f-989a-b044342d604e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f4:23:59:0e:bf:4f:37:86:17:e5:f6:3a:ed:8f:62:c4:d8: 33:b1:d8:54:84:77:ca:f4:9e:6b:61:1a:a1:f6:70:0c:f2:00: 0c:78:f8:d6:c6:cc:d4:e1:4c:4b:9c:40:aa:7f:de:f7:12:5b: fc:0e:86:7a:71:af:b6:4c:df:f1:71:7d:10:eb:01:ce:53:35: 2b:c6:50:32:5d:1d:ba:05:5e:bb:b7:b1:1e:99:d2:1c:c5:41: b1:4a:8e:ab:61:56:b2:37:6f:3f:33:3d:26:1a:14:75:2b:b1: 13:70:18:66:dc:2b:23:af:5e:6a:7a:b5:c6:e8:db:29:f6:ad: db:b4:50:6c:e2:46:1c:8b:fc:5a:72:8b:7e:88:6e:29:60:c4: 24:80:46:8d:93:c6:c4:69:3b:d5:23:59:2f:2c:1c:17:e2:f4: a7:8a:21:7a:88:79:45:fe:7f:ad:e4:f8:ee:50:23:2f:83:84: ea:e2:49:92:e9:42:65:4e:16:c3:37:0c:9c:29:92:12:8a:72: fe:93:9f:ec:ea:22:27:c1:b9:ae:33:26:0b:c4:a3:a2:30:21: cf:14:68:de:a6:92:73:51:98:57:20:0b:61:d5:0f:4c:96:8a: 9e:35:f5:13:95:37:ed:c1:4e:a1:42:90:ba:e3:ae:74:79:bc: b0:a5:e7:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mVBv3lKtVwEnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YTc1NDg3NDktZmJkZS00MTk5LTkyZGMtMzAxMzdmODcxM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYKDPIqthb7qw9ZDrMHc2miTnG+vS9tvCoj IILcRcuXYuYAY9IpIHhx9O5k81fwg+CdzSn9GcPEiJcaaGKKFmfnSkXtOi/kEk4M 7pbU9hg9BTf4T3/VJa+q1VIVjrUKHEpyxsUQJ3l3oJeLPN2VID587BOKZObY/Mdd J9S64bPQifTkI7gUjwXjPoip4e3zVkUoUkmRDf5a3l6TIEYdIPTxsV2Aig0dpRRr 4Dpk4DnHTjVYM8nQvtP0DtD5gmej9uHUJoWfsr/WLBX8oiLwAYsJXOh+I/9LLFkl FyeBibS/Jjx9tftM2G29mTY7bh2yjRjnWR2mi4gaqjcwPl9f7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtEy75EXLXzjVykAMWokfTifEDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvOTM5MzQ0Y2MtMjU4My0z ODRmLTk4OWEtYjA0NDM0MmQ2MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM30I1kOv083hhfl9jrtj2LE2DOx2FSEd8r0nmthGqH2cAzyAAx4+NbG zNThTEucQKp/3vcSW/wOhnpxr7ZM3/FxfRDrAc5TNSvGUDJdHboFXru3sR6Z0hzF QbFKjqthVrI3bz8zPSYaFHUrsRNwGGbcKyOvXmp6tcbo2yn2rdu0UGziRhyL/Fpy i36IbilgxCSARo2TxsRpO9UjWS8sHBfi9KeKIXqIeUX+f63k+O5QIy+DhOriSZLp QmVOFsM3DJwpkhKKcv6Tn+zqIifBua4zJgvEo6IwIc8UaN6mknNRmFcgC2HVD0yW ip419ROVN+3BTqFCkLrjrnR5vLCl52o= -----END CERTIFICATE-----Generated at Wed Nov 5 08:27:23 2025 by rpki-client