$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa File: 5d9bac24-42c5-32f4-89cc-d256e7767bce.roa (raw, json) Hash identifier: yM/YxWUGD3x4LQU790LGpbu3EylF6uLReGP2iMJmr7M= Subject key identifier: C0:61:88:BF:83:A7:EB:33:44:15:EB:D7:74:8A:04:A4:A8:50:7C:E3 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584B2CF6E93B1C5212E799DDDE00 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 834 IP address blocks: 67.43.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e9:3b:1c:52:12:e7:99:dd:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=de341a52-ac99-4d9e-bf2d-0cba13f29cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:bb:bb:3f:2e:4d:88:e8:86:8a:f0:49:c6: dc:23:2b:49:4b:5c:a3:92:c9:11:c7:78:43:37:8d: f5:b9:c1:a4:6f:f5:4c:be:81:05:ef:6f:cc:3a:c6: d1:57:45:ea:42:2d:de:84:42:23:fe:64:19:58:38: f8:e3:d6:55:1f:aa:66:39:04:2d:02:b9:89:53:71: a2:ba:68:08:15:cd:61:49:89:9c:a2:06:08:4d:49: 14:47:9f:d3:ce:68:78:b7:34:0d:e7:ce:cb:a6:6b: a5:bf:d2:09:bc:8c:1a:70:45:f1:5c:0b:82:28:a5: 36:8f:71:9b:ae:1c:0b:6d:3c:03:c2:ff:21:2d:21: 84:45:86:1a:41:f1:57:33:53:d4:77:07:d9:73:da: e0:17:df:ff:cc:73:88:45:c3:a1:8b:a3:e7:93:33: d5:32:56:bb:3b:2d:c1:b7:46:bb:b4:4c:79:fe:ae: ef:00:73:de:a1:2f:d6:74:58:fe:0d:12:e8:d9:ef: 59:6f:71:f6:87:c5:9d:f5:5a:5f:69:49:59:85:c5: 87:e4:11:a9:ab:46:26:76:47:7b:43:3c:c3:69:90: 9f:d6:2f:24:96:94:42:5e:fe:a4:6e:da:72:9d:49: ac:76:16:92:16:ab:16:30:e6:d8:12:b9:ef:d8:24: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:61:88:BF:83:A7:EB:33:44:15:EB:D7:74:8A:04:A4:A8:50:7C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5d9bac24-42c5-32f4-89cc-d256e7767bce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ca:9d:d0:72:0d:50:0e:6e:5d:d4:e4:fb:26:bc:f3:68:0e: e3:bf:8c:33:cc:57:80:5d:f3:49:74:45:63:4e:50:97:47:84: 7c:e8:41:21:5f:7f:03:8f:24:99:2d:1f:99:00:b3:da:f8:be: aa:62:20:4e:6f:86:0e:52:2d:a5:cf:5d:b4:5d:dd:66:31:a4: e0:09:ab:1f:b9:d8:14:5e:c6:f0:35:c9:23:3b:d1:4f:d9:43: 57:88:32:44:3a:d0:b6:a5:4c:40:e3:64:17:2f:b5:fe:1a:7a: 31:84:6c:b9:1b:0e:5c:85:ec:77:28:2b:5a:be:f8:16:4f:91: 2d:61:58:e9:b8:26:bb:7a:0c:7b:46:4c:3e:e2:33:7d:bc:55: 30:0d:06:8d:f3:1a:69:cb:d2:64:9d:3b:80:3e:d3:7c:a6:c8: 63:1b:de:d2:b1:0a:75:3f:ed:6b:f6:23:25:7d:2b:31:8f:12: 0c:42:2a:20:17:90:d5:2c:54:cd:f6:e8:2a:76:d6:af:da:14: 6a:d6:bb:ad:2c:db:e0:36:95:e9:35:3f:5c:21:77:4f:5c:fa: 81:0c:30:e2:b3:4c:3e:e6:ed:f6:96:98:73:20:ed:85:68:3b: 5c:8e:54:d6:98:5e:b8:96:5d:25:d9:20:e7:4e:a5:ce:c5:c0: 8e:8d:13:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uk7HFIS55nd3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGUzNDFhNTItYWM5OS00ZDllLWJmMmQtMGNiYTEzZjI5Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8a7uz8uTYjohorwScbcIytJS1yjkskRx3hD N431ucGkb/VMvoEF72/MOsbRV0XqQi3ehEIj/mQZWDj449ZVH6pmOQQtArmJU3Gi umgIFc1hSYmcogYITUkUR5/Tzmh4tzQN587Lpmulv9IJvIwacEXxXAuCKKU2j3Gb rhwLbTwDwv8hLSGERYYaQfFXM1PUdwfZc9rgF9//zHOIRcOhi6PnkzPVMla7Oy3B t0a7tEx5/q7vAHPeoS/WdFj+DRLo2e9Zb3H2h8Wd9VpfaUlZhcWH5BGpq0Ymdkd7 QzzDaZCf1i8klpRCXv6kbtpynUmsdhaSFqsWMObYErnv2CReuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBhiL+Dp+szRBXr13SKBKSoUHzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWQ5YmFjMjQtNDJjNS0z MmY0LTg5Y2MtZDI1NmU3NzY3YmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnKndByDVAObl3U5PsmvPNoDuO/jDPMV4Bd80l0RWNOUJdHhHzoQSFf fwOPJJktH5kAs9r4vqpiIE5vhg5SLaXPXbRd3WYxpOAJqx+52BRexvA1ySM70U/Z Q1eIMkQ60LalTEDjZBcvtf4aejGEbLkbDlyF7HcoK1q++BZPkS1hWOm4Jrt6DHtG TD7iM328VTANBo3zGmnL0mSdO4A+03ymyGMb3tKxCnU/7Wv2IyV9KzGPEgxCKiAX kNUsVM326Cp21q/aFGrWu60s2+A2lek1P1whd09c+oEMMOKzTD7m7faWmHMg7YVo O1yOVNaYXriWXSXZIOdOpc7FwI6NE1c= -----END CERTIFICATE-----Generated at Thu Sep 18 02:10:36 2025 by rpki-client