$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa File: ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa (raw, json) Hash identifier: QbIhmscYNphDF8HpdtXGlHghz3F1QW9eOVw9MGdxFRU= Subject key identifier: 0A:28:5C:01:E3:4E:58:93:1C:93:BE:35:D9:0E:CC:D1:6A:7F:D4:00 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584EF182301090A8B723AB30BF00 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 834 IP address blocks: 67.43.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:30:10:90:a8:b7:23:ab:30:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=5800a732-4349-4f9a-8f31-3b9d4b502675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:16:6d:05:9a:78:ad:08:b8:27:fe:64:b8: 6b:fe:cc:0b:7e:9f:05:65:96:5d:bf:cd:80:08:4a: f2:1e:6d:aa:b2:76:35:15:5a:e2:e7:ec:3c:f4:99: 33:c3:56:eb:6f:c4:6e:19:6c:e3:bb:07:81:06:5d: 0d:33:bd:33:92:69:a3:cd:91:22:f9:b9:ce:8d:62: 69:4d:13:ca:b9:77:03:fe:a7:c1:7f:e4:79:01:e4: 99:15:f0:c9:a9:d2:e0:10:3e:b6:61:2a:3a:2a:e2: 97:43:23:f7:ec:77:64:06:77:66:e6:b9:2c:fa:6d: dd:31:b7:3b:23:6b:da:d6:7e:4e:6e:f4:43:21:7b: 04:88:08:8e:29:73:46:5b:03:33:3d:1e:48:a0:96: 58:5b:fd:23:da:99:82:27:33:29:96:8a:83:77:8a: a1:9e:12:c5:55:11:89:e0:30:9b:c5:17:b3:9d:91: 2c:91:76:87:bb:32:33:dd:c9:8c:94:ec:89:b8:0d: 0c:26:b7:00:db:d9:ec:5c:d7:b1:a4:d6:8c:11:3b: df:4e:38:98:3f:20:44:a3:48:df:4b:de:84:16:78: 0b:29:ea:6c:c6:37:5a:4b:f1:82:f7:75:d0:c7:05: bd:6a:38:05:3c:a4:5f:e5:72:31:06:e1:8b:28:60: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:28:5C:01:E3:4E:58:93:1C:93:BE:35:D9:0E:CC:D1:6A:7F:D4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cc:6b:bc:a4:39:8c:2a:b0:53:1f:96:f6:70:c5:c6:bf:5a: 57:ac:bf:49:fc:02:43:1f:81:75:90:e9:6d:0f:af:d5:37:a0: dc:51:e0:92:0a:41:dc:47:ac:f2:fb:2a:41:14:86:5e:89:ce: 00:5a:ed:d1:9c:99:84:2b:1f:24:10:f7:23:0a:1a:07:be:ff: 8b:f5:c3:12:de:4f:7f:61:2d:f9:1f:33:23:31:a9:90:0f:36: 0c:f5:ba:d7:b1:27:1e:f2:56:27:b9:71:d8:ed:0e:41:cb:1f: ac:2c:87:a3:8e:79:09:0b:c9:52:17:96:88:a2:93:86:74:12: 0f:4a:03:01:e5:15:67:76:c8:9f:f9:cc:01:ae:54:22:85:53: f4:fc:66:73:9e:2f:9a:5c:b3:8b:49:51:3c:69:b9:95:39:5b: cb:4a:ab:7c:c2:85:9d:8e:d5:00:6d:4b:95:5f:17:14:fa:2a: 18:59:ea:f6:84:09:a9:02:6b:fe:f2:c7:af:4a:ec:a8:3e:2b: c8:7e:4e:71:3e:26:bf:7a:64:86:ac:88:d4:13:af:fa:cc:55: e8:b7:80:ca:f9:a0:46:5c:aa:93:c0:34:7b:1a:f1:a0:2a:a0: a5:45:f2:47:f0:3d:d4:df:c8:6b:40:ab:fd:4a:15:46:4c:92: 07:16:a1:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgjAQkKi3I6swvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NTgwMGE3MzItNDM0OS00ZjlhLThmMzEtM2I5ZDRiNTAyNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1oWbQWaeK0IuCf+ZLhr/swLfp8FZZZdv82A CEryHm2qsnY1FVri5+w89Jkzw1brb8RuGWzjuweBBl0NM70zkmmjzZEi+bnOjWJp TRPKuXcD/qfBf+R5AeSZFfDJqdLgED62YSo6KuKXQyP37HdkBndm5rks+m3dMbc7 I2va1n5ObvRDIXsEiAiOKXNGWwMzPR5IoJZYW/0j2pmCJzMploqDd4qhnhLFVRGJ 4DCbxReznZEskXaHuzIz3cmMlOyJuA0MJrcA29nsXNexpNaMETvfTjiYPyBEo0jf S96EFngLKepsxjdaS/GC93XQxwW9ajgFPKRf5XIxBuGLKGDsewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAooXAHjTliTHJO+NdkOzNFqf9QAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYWMzZmVjODktMDRlNy0z YTI1LTliMTMtOTc0ZjhmYzM4MTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbMa7ykOYwqsFMflvZwxca/Wlesv0n8AkMfgXWQ6W0Pr9U3oNxR4JIK QdxHrPL7KkEUhl6JzgBa7dGcmYQrHyQQ9yMKGge+/4v1wxLeT39hLfkfMyMxqZAP Ngz1utexJx7yVie5cdjtDkHLH6wsh6OOeQkLyVIXloiik4Z0Eg9KAwHlFWd2yJ/5 zAGuVCKFU/T8ZnOeL5pcs4tJUTxpuZU5W8tKq3zChZ2O1QBtS5VfFxT6KhhZ6vaE CakCa/7yx69K7Kg+K8h+TnE+Jr96ZIasiNQTr/rMVei3gMr5oEZcqpPANHsa8aAq oKVF8kfwPdTfyGtAq/1KFUZMkgcWoY8= -----END CERTIFICATE-----Generated at Mon Sep 21 08:07:44 2026 by rpki-client