$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/658d9fc7-77e9-3eef-8e08-2949be391012.roa File: 658d9fc7-77e9-3eef-8e08-2949be391012.roa (raw, json) Hash identifier: 9VOVTNR9y2km9x/0GBu8IqtPhoMbS2ev3aWl8P8U6nw= Subject key identifier: 4C:0E:45:84:8F:59:60:7F:4B:96:6A:14:C1:93:E3:E0:FC:CB:84:1A Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584DA81589A702F8BBAACE4D8680 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/658d9fc7-77e9-3eef-8e08-2949be391012.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 834 IP address blocks: 67.43.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:89:a7:02:f8:bb:aa:ce:4d:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=d7254f54-46e8-424a-bd17-6fc12ff463ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6f:83:c0:94:48:9b:5e:0a:47:b1:bd:3e:95: 4d:53:61:17:fc:87:f5:9d:12:76:3e:60:ea:1d:79: 89:9c:f7:f6:f8:c1:ed:64:04:cc:c8:ee:3f:2d:81: 4d:90:76:f3:ee:b0:5f:eb:05:a2:e6:f3:ec:79:88: f8:1d:cd:dd:e0:a9:43:10:8d:90:b1:f2:21:99:c0: bf:f3:b8:1e:a7:2a:f9:64:70:bc:d4:a8:2c:04:2a: 14:c6:0b:2e:c8:11:92:aa:77:83:f9:a2:a1:07:b3: 54:13:37:a2:68:93:45:87:d5:f4:fb:5c:2f:73:5d: 20:27:f2:2d:6b:a0:6e:88:30:0e:fd:4f:12:86:80: 12:10:6d:af:c2:5f:e4:0b:a9:90:26:b4:b7:37:c4: 14:66:40:da:83:c9:4c:41:ea:fe:e8:4a:66:b7:8f: 56:6b:31:38:da:a9:35:7a:62:14:a2:a1:c7:6c:d4: 90:c5:1b:a6:05:37:2c:dd:21:a1:70:94:07:0b:c7: 71:3f:c4:b5:49:00:cb:26:22:14:29:ec:f9:3e:12: d2:be:78:1c:bb:4c:e1:3c:ed:58:1b:7c:5e:ae:d8: 89:6d:51:63:9d:bd:04:c1:f6:02:ac:7c:a4:c0:93: 92:39:7e:fc:18:c4:ad:de:4d:ad:f1:57:3b:b2:5a: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0E:45:84:8F:59:60:7F:4B:96:6A:14:C1:93:E3:E0:FC:CB:84:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/658d9fc7-77e9-3eef-8e08-2949be391012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a3:61:bf:e1:3a:f3:4d:e9:21:49:04:e8:45:35:b5:84:75: b1:89:de:d6:7e:01:7b:57:50:e3:19:8f:ce:16:ed:cd:86:78: e7:49:d6:16:46:b4:9d:95:9e:8a:fe:0e:3b:4b:c6:ac:c8:9f: 47:c0:3c:19:d0:4e:02:61:81:b5:33:d9:ad:9a:e5:65:3f:45: 98:e9:4c:20:18:8f:a7:ba:5f:64:ab:58:ed:ac:5e:6f:b4:88: f8:fd:5c:fb:8d:25:10:2d:8f:90:61:a9:d8:11:c2:7a:99:b7: 8f:47:9a:30:cc:c5:99:c2:58:22:39:47:ad:39:8f:79:31:64: 77:ec:af:62:74:be:ff:cf:6c:80:93:5a:cb:f1:ca:ea:32:d8: bb:3f:5d:9e:a0:00:87:20:32:b7:7e:84:e7:5f:0a:de:76:78: c0:f5:2d:84:cd:d4:85:38:6d:5a:7a:de:9d:ff:08:5f:13:28: 76:3e:58:75:e9:1b:c6:ca:11:14:b4:c2:ab:25:e6:9d:56:5c: 41:29:09:e1:69:f8:98:72:f6:7c:fd:f4:34:fd:b0:63:75:79: a6:fb:bf:6c:86:4a:be:5f:bc:35:cb:e0:09:cb:c1:c5:b3:9c: ea:51:c3:8b:17:36:97:b3:aa:1b:3b:13:e8:ef:da:7d:f5:c3: 3e:dc:d2:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFYmnAvi7qs5NhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZDcyNTRmNTQtNDZlOC00MjRhLWJkMTctNmZjMTJmZjQ2M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2+DwJRIm14KR7G9PpVNU2EX/If1nRJ2PmDq HXmJnPf2+MHtZATMyO4/LYFNkHbz7rBf6wWi5vPseYj4Hc3d4KlDEI2QsfIhmcC/ 87gepyr5ZHC81KgsBCoUxgsuyBGSqneD+aKhB7NUEzeiaJNFh9X0+1wvc10gJ/It a6BuiDAO/U8ShoASEG2vwl/kC6mQJrS3N8QUZkDag8lMQer+6Epmt49WazE42qk1 emIUoqHHbNSQxRumBTcs3SGhcJQHC8dxP8S1SQDLJiIUKez5PhLSvngcu0zhPO1Y G3xertiJbVFjnb0EwfYCrHykwJOSOX78GMSt3k2t8Vc7slqzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwORYSPWWB/S5ZqFMGT4+D8y4QaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNjU4ZDlmYzctNzdlOS0z ZWVmLThlMDgtMjk0OWJlMzkxMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGajYb/hOvNN6SFJBOhFNbWEdbGJ3tZ+AXtXUOMZj84W7c2GeOdJ1hZG tJ2Vnor+DjtLxqzIn0fAPBnQTgJhgbUz2a2a5WU/RZjpTCAYj6e6X2SrWO2sXm+0 iPj9XPuNJRAtj5BhqdgRwnqZt49HmjDMxZnCWCI5R605j3kxZHfsr2J0vv/PbICT Wsvxyuoy2Ls/XZ6gAIcgMrd+hOdfCt52eMD1LYTN1IU4bVp63p3/CF8TKHY+WHXp G8bKERS0wqsl5p1WXEEpCeFp+Jhy9nz99DT9sGN1eab7v2yGSr5fvDXL4AnLwcWz nOpRw4sXNpezqhs7E+jv2n31wz7c0hI= -----END CERTIFICATE-----Generated at Sat May 9 08:54:51 2026 by rpki-client