$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa File: 7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json) Hash identifier: sZo/o7zDc9NWK5O5bzHsamgBnfwjaGaLHHFeIG0n2ek= Subject key identifier: 59:43:13:C5:1E:EB:1F:C8:84:96:17:A7:6C:77:DB:A7:9A:53:EC:7F Certificate issuer: /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Certificate serial: 010D0C9F4328584D40CA3B27BF3088D15FDD6C00 Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16385 IP address blocks: 67.43.86.0/24 maxlen: 24 67.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:3b:27:bf:30:88:d1:5f:dd:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=622cf56a-1c93-45f6-8403-25bfe626e54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:b6:17:f3:87:4a:b5:ab:9b:a9:57:81:52: 1c:f0:94:b9:f4:c8:a3:c5:af:1e:d3:0b:d2:b7:54: 08:8e:c2:12:8e:59:22:0f:03:e4:75:c7:c7:fc:ef: 5e:19:d0:31:20:3b:0d:d5:a5:43:c5:7c:14:d3:cf: d7:22:9d:06:80:0c:dd:d8:d2:08:c8:e5:3e:f0:c8: 1b:73:b1:fb:9a:70:93:df:ef:12:21:60:86:ec:76: 71:b1:e6:8b:30:f1:e1:f2:a4:72:26:57:96:5e:d5: 9e:b6:db:db:e3:26:9b:44:a4:d3:7b:ed:98:23:41: 7f:05:ea:bb:ce:f8:7b:a7:1a:72:f6:fe:5b:79:d9: 51:5a:6f:10:f3:10:da:5a:05:8d:ec:0d:e7:a1:bf: a2:c7:12:cb:dc:e7:e1:e6:91:c9:b4:ac:ff:f5:26: ee:d9:b7:bd:9a:fd:3c:26:26:e9:1c:f2:3a:61:3f: d7:e1:d1:70:fb:88:99:c4:90:4d:75:2d:ad:43:28: 76:9e:a5:5e:7c:43:89:e5:55:9f:c8:f0:45:87:e9: c5:2e:23:a0:e5:80:a0:f2:a9:8a:59:9e:26:ba:fd: 85:3a:d1:39:e3:a2:09:19:d0:be:a3:16:62:7d:93: 35:09:77:9f:ce:26:9f:4e:3f:6a:19:63:2f:46:f7: c2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:43:13:C5:1E:EB:1F:C8:84:96:17:A7:6C:77:DB:A7:9A:53:EC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl X509v3 Authority Key Identifier: keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer sbgp-ipAddrBlock: critical IPv4: 67.43.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:1d:60:1b:c8:f0:5d:23:8c:74:ce:5c:7c:e9:a7:5a:ac:74: 29:7e:a8:e6:34:19:82:a6:4a:92:e6:02:e5:e4:fd:79:e2:35: 16:f8:8b:ea:d6:bd:d3:08:24:c5:16:59:36:1e:2a:0e:aa:42: 60:09:32:4e:e7:67:f5:6d:f1:c6:ec:9c:67:0f:f1:02:42:cd: af:e9:18:be:f1:c9:4e:a7:c1:30:d4:ad:cc:6a:8b:c3:20:bd: 96:23:f5:7d:6f:d5:ec:a2:fa:84:dc:1d:c7:90:91:44:a5:d5: 7e:83:34:93:b3:a9:b5:fa:44:a8:44:7e:cf:08:bc:1a:02:09: cb:af:dd:6e:33:e8:31:37:0f:dc:b8:8f:cb:4a:a6:a4:0b:1e: 02:8b:6d:5e:8f:1a:a9:8b:78:d7:27:9a:62:04:89:77:ea:1d: d4:b5:4b:fe:8b:44:55:33:54:23:26:b0:5b:12:30:a5:60:31: 83:a3:b4:29:db:67:23:83:07:72:6d:28:19:f9:4d:00:35:73: c4:60:40:cb:e0:3a:7a:53:19:1e:a9:1e:fa:8a:1e:0d:07:e6: 77:00:c1:08:f2:87:a8:d4:76:79:81:0e:6d:e0:6a:94:2f:b5: bc:c9:68:13:d7:54:c8:df:de:35:4a:dc:7e:38:a6:a1:d1:d5: 53:9b:78:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjsnvzCI0V/dbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhMjgyNzYtZjQ5My00YTlmLTk4MjQtYzk3MTdjMWNm NmZkMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjIyY2Y1NmEtMWM5My00NWY2LTg0MDMtMjViZmU2MjZlNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4O2F/OHSrWrm6lXgVIc8JS59Mijxa8e0wvS t1QIjsISjlkiDwPkdcfH/O9eGdAxIDsN1aVDxXwU08/XIp0GgAzd2NIIyOU+8Mgb c7H7mnCT3+8SIWCG7HZxseaLMPHh8qRyJleWXtWettvb4yabRKTTe+2YI0F/Beq7 zvh7pxpy9v5bedlRWm8Q8xDaWgWN7A3nob+ixxLL3Ofh5pHJtKz/9Sbu2be9mv08 JibpHPI6YT/X4dFw+4iZxJBNdS2tQyh2nqVefEOJ5VWfyPBFh+nFLiOg5YCg8qmK WZ4muv2FOtE546IJGdC+oxZifZM1CXefziafTj9qGWMvRvfCIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlDE8Ue6x/IhJYXp2x326eaU+x/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEy ODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcxN2MxY2Y2ZmQvNzk1N2FmMjMtY2JiNC0z NmVkLTgwNWYtNzgwNmYyNmU0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjVhMjgyNzYtZjQ5My00YTlmLTk4 MjQtYzk3MTdjMWNmNmZkLzY1YTI4Mjc2LWY0OTMtNGE5Zi05ODI0LWM5NzE3YzFj ZjZmZC5jcmwwHwYDVR0jBBgwFoAUD2fY2H/CdCcfkm21Lnih2pcDNR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEyODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcx N2MxY2Y2ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQytWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUdYBvI8F0jjHTOXHzpp1qsdCl+qOY0GYKmSpLmAuXk/XniNRb4i+rW vdMIJMUWWTYeKg6qQmAJMk7nZ/Vt8cbsnGcP8QJCza/pGL7xyU6nwTDUrcxqi8Mg vZYj9X1v1eyi+oTcHceQkUSl1X6DNJOzqbX6RKhEfs8IvBoCCcuv3W4z6DE3D9y4 j8tKpqQLHgKLbV6PGqmLeNcnmmIEiXfqHdS1S/6LRFUzVCMmsFsSMKVgMYOjtCnb ZyODB3JtKBn5TQA1c8RgQMvgOnpTGR6pHvqKHg0H5ncAwQjyh6jUdnmBDm3gapQv tbzJaBPXVMjf3jVK3H44pqHR1VObeIg= -----END CERTIFICATE-----Generated at Fri Mar 27 02:04:09 2026 by rpki-client