$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3270a737-e8eb-3546-bba8-66dfe2a6ff8e.roa File: 3270a737-e8eb-3546-bba8-66dfe2a6ff8e.roa (raw, json) Hash identifier: IGJljAWCbQX2+Clus+LmlRBtFLk6GOJncmvIZuM7aHI= Subject key identifier: 6C:E5:ED:6E:08:76:1F:1C:6B:48:B0:68:D8:B8:13:39:86:47:8A:AC Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584E360188E2DA778463B4146C80 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3270a737-e8eb-3546-bba8-66dfe2a6ff8e.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 14618 IP address blocks: 67.43.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:01:88:e2:da:77:84:63:b4:14:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=1d338f49-7ca0-4464-be80-beb6e42eaadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:c1:b2:4a:7a:69:2f:98:cb:20:e6:a1:01: ab:58:e7:3f:91:d4:fa:48:53:d9:4d:44:f5:9e:75: e2:91:2d:ff:35:59:ba:aa:cc:25:49:b1:e5:6f:95: ca:c9:62:50:52:63:57:8b:e2:2e:2f:dd:b2:a2:02: 56:d3:da:4f:0f:a6:4f:b1:66:e0:8a:87:2e:59:34: b5:6b:b5:3a:a5:88:42:a1:18:09:3c:37:77:40:84: fa:12:ba:62:a9:60:95:0d:af:41:69:15:91:f4:6e: 2a:1f:9c:4c:0d:47:86:99:0a:52:53:73:4c:a3:84: 14:cc:ea:2b:19:a7:c0:45:6c:2b:01:0a:3b:77:c5: 95:ab:f9:0e:f6:15:57:0a:26:21:4c:7c:cb:c2:17: 3d:c3:fb:0f:58:ee:1a:81:53:a5:02:82:91:d7:99: 4f:8a:f1:41:87:be:da:9f:c1:75:8f:71:62:04:8c: 2c:6b:26:6a:63:9b:5c:13:36:24:9d:7c:2d:6e:c1: 3a:38:73:d0:a9:df:2d:f8:4f:28:60:0f:f0:cd:82: d5:9f:da:33:63:4a:ca:44:08:84:f0:27:f3:2d:f7: e0:e5:07:97:e3:8d:28:c3:ad:cb:2d:2f:ca:8f:67: 5c:6e:be:0b:74:24:66:a8:65:14:b5:d1:5e:af:22: e5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E5:ED:6E:08:76:1F:1C:6B:48:B0:68:D8:B8:13:39:86:47:8A:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/3270a737-e8eb-3546-bba8-66dfe2a6ff8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1d:13:fd:34:73:12:fb:4e:07:f3:8b:c0:4d:5c:c0:d4:45: ca:92:fa:d3:ff:b2:29:4d:97:3f:b8:39:4e:a9:aa:93:f1:0b: 6c:fa:c1:b4:39:3a:2e:42:06:11:1e:a9:d2:44:62:b4:75:a8: 52:32:23:80:2e:d4:86:bf:49:4e:2c:0a:cf:0e:7e:c7:36:45: 7a:73:07:47:c4:1f:8e:fb:fb:bc:5a:db:94:da:1b:f3:cb:42: 45:43:69:bf:b2:c2:3d:21:42:6d:d3:d6:fc:e5:0d:91:70:11: e0:f5:a4:63:95:fc:15:45:3c:68:a3:4e:3e:71:5e:83:e0:f6: 3f:90:90:d6:33:b8:aa:07:7a:dd:3a:9b:c1:cf:94:ff:6b:a4: 6f:82:52:bd:53:82:94:f5:59:1f:f6:a8:43:c9:09:28:87:e2: 93:83:0b:cf:ac:f9:41:ed:df:34:30:73:01:d4:46:42:17:9f: 3c:65:e6:a1:72:9d:a8:a8:a7:f8:d2:7e:e0:f1:41:67:a9:13: 9f:5a:2d:c2:c8:de:7e:d0:0d:97:21:fa:7c:5c:7f:a4:d5:e0: 39:27:ad:9b:cf:5e:3d:2f:c8:1d:1d:56:53:cf:01:dc:0d:e9: 79:d4:c0:0d:0a:7a:27:53:c5:cb:72:32:db:03:f1:79:22:3d: 19:3b:b7:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AYji2neEY7QUbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MWQzMzhmNDktN2NhMC00NDY0LWJlODAtYmViNmU0MmVhYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQLBskp6aS+YyyDmoQGrWOc/kdT6SFPZTUT1 nnXikS3/NVm6qswlSbHlb5XKyWJQUmNXi+IuL92yogJW09pPD6ZPsWbgiocuWTS1 a7U6pYhCoRgJPDd3QIT6ErpiqWCVDa9BaRWR9G4qH5xMDUeGmQpSU3NMo4QUzOor GafARWwrAQo7d8WVq/kO9hVXCiYhTHzLwhc9w/sPWO4agVOlAoKR15lPivFBh77a n8F1j3FiBIwsayZqY5tcEzYknXwtbsE6OHPQqd8t+E8oYA/wzYLVn9ozY0rKRAiE 8CfzLffg5QeX440ow63LLS/Kj2dcbr4LdCRmqGUUtdFeryLlSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzl7W4Idh8ca0iwaNi4EzmGR4qsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMzI3MGE3MzctZThlYi0z NTQ2LWJiYTgtNjZkZmUyYTZmZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwdE/00cxL7Tgfzi8BNXMDURcqS+tP/silNlz+4OU6pqpPxC2z6wbQ5 Oi5CBhEeqdJEYrR1qFIyI4Au1Ia/SU4sCs8Ofsc2RXpzB0fEH477+7xa25TaG/PL QkVDab+ywj0hQm3T1vzlDZFwEeD1pGOV/BVFPGijTj5xXoPg9j+QkNYzuKoHet06 m8HPlP9rpG+CUr1TgpT1WR/2qEPJCSiH4pODC8+s+UHt3zQwcwHURkIXnzxl5qFy naiop/jSfuDxQWepE59aLcLI3n7QDZch+nxcf6TV4DknrZvPXj0vyB0dVlPPAdwN 6XnUwA0KeidTxctyMtsD8XkiPRk7t50= -----END CERTIFICATE-----Generated at Wed Jun 24 20:15:33 2026 by rpki-client