$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9280a535-659d-3702-8184-22808d69c177.roa File: 9280a535-659d-3702-8184-22808d69c177.roa (raw, json) Hash identifier: yg39ZL9Y5294OBYqjcv/hXE8hVe70gszEkZR7Q/TNQM= Subject key identifier: 17:A4:ED:4D:8F:46:4D:6F:7A:98:89:D1:2C:1E:4D:11:E7:30:35:8C Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F4328584F1467925C01F3ADA1DF898680 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9280a535-659d-3702-8184-22808d69c177.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 35913 IP address blocks: 67.43.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:92:5c:01:f3:ad:a1:df:89:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=48e386cd-02d7-44f1-9d44-430549fdc2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:c5:0d:b1:02:fd:93:8b:15:82:f4:b3:c4: 5d:80:8c:e1:23:6b:56:fd:48:b3:b1:e0:92:6d:84: 34:2f:70:ec:87:6a:23:df:b7:62:80:dd:45:c9:a2: b6:4e:27:3f:33:7c:89:47:1b:ae:1b:58:01:c1:0f: d2:0d:8f:ae:4f:80:40:60:05:d0:92:84:f7:72:d5: da:54:b4:1f:4e:64:1a:c7:d7:06:c9:06:90:51:78: 2b:52:df:d0:77:39:e3:56:ce:13:4a:21:e1:d2:5b: 30:f5:de:0a:7d:3c:b9:af:0d:09:9c:c6:d2:b1:bb: f1:e2:e0:61:2f:22:29:f4:b4:dd:e7:54:9f:3b:e6: 1d:c6:76:00:22:4d:82:42:dc:95:f1:dd:fb:eb:bf: 3b:2d:0f:0e:1d:fe:a1:fd:fb:16:23:4d:05:63:15: 0e:58:c2:93:c0:75:3f:2e:26:d3:cf:fc:d8:1b:31: 6f:1a:e6:c1:9c:65:3a:67:ab:0b:80:72:bd:2e:10: b8:e3:22:f2:89:8a:e2:75:83:92:d4:8b:cb:58:35: 84:04:fd:ac:df:bc:30:de:b9:39:99:09:32:9d:72: b3:98:95:51:90:d5:23:80:11:9a:0e:9c:f3:9c:79: 35:c2:73:f1:5a:3e:aa:56:ad:57:fd:49:ba:de:1d: e9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A4:ED:4D:8F:46:4D:6F:7A:98:89:D1:2C:1E:4D:11:E7:30:35:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/9280a535-659d-3702-8184-22808d69c177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:44:17:50:c9:d1:69:d1:b5:85:21:5c:5d:61:67:22:c0:b3: 78:c2:0b:b2:6a:fa:f8:4f:e7:9e:71:57:d3:92:7a:df:c9:52: 3e:ec:16:87:02:c8:dd:f9:81:3e:ab:5e:0f:2d:08:61:01:b2: 04:77:21:08:84:9b:a2:f5:06:30:90:b3:f9:b7:ed:4e:e1:13: ed:af:53:8e:85:4b:46:49:4e:16:16:4d:2b:98:89:69:1f:2e: c9:90:8b:f1:13:40:30:0c:4d:d1:a5:72:9a:6a:63:d5:35:80: 0c:ba:e1:84:e8:84:7c:32:59:a1:c3:92:b7:1c:e3:af:f6:77: 18:d6:95:95:9c:8b:b3:42:e4:e2:14:cb:53:36:b6:50:51:08: ba:11:d0:0f:f6:e6:1e:07:ae:a8:b4:39:9f:97:bf:f5:94:b9: bf:e4:03:50:66:c2:09:ab:32:c8:aa:fa:d3:99:b1:c5:a2:b7: 78:f2:80:1d:a8:5b:ed:f5:48:95:c8:1a:e9:14:9a:c8:df:d2: bd:f5:57:26:e5:9a:14:ec:3d:4b:c8:44:b2:82:28:53:aa:19: 49:45:10:b9:d1:e6:e1:8d:30:77:4f:9f:70:0a:32:e7:7d:9b: 69:27:a3:05:ec:53:b9:54:fd:95:a4:f7:32:47:98:28:33:04: 8b:96:52:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5JcAfOtod+JhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NDhlMzg2Y2QtMDJkNy00NGYxLTlkNDQtNDMwNTQ5ZmRjMmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKvFDbEC/ZOLFYL0s8RdgIzhI2tW/UizseCS bYQ0L3Dsh2oj37digN1FyaK2Tic/M3yJRxuuG1gBwQ/SDY+uT4BAYAXQkoT3ctXa VLQfTmQax9cGyQaQUXgrUt/QdznjVs4TSiHh0lsw9d4KfTy5rw0JnMbSsbvx4uBh LyIp9LTd51SfO+YdxnYAIk2CQtyV8d376787LQ8OHf6h/fsWI00FYxUOWMKTwHU/ LibTz/zYGzFvGubBnGU6Z6sLgHK9LhC44yLyiYridYOS1IvLWDWEBP2s37ww3rk5 mQkynXKzmJVRkNUjgBGaDpzznHk1wnPxWj6qVq1X/Um63h3p/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBek7U2PRk1vepiJ0SweTRHnMDWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvOTI4MGE1MzUtNjU5ZC0z NzAyLTgxODQtMjI4MDhkNjljMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQysmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBEF1DJ0WnRtYUhXF1hZyLAs3jCC7Jq+vhP555xV9OSet/JUj7sFocC yN35gT6rXg8tCGEBsgR3IQiEm6L1BjCQs/m37U7hE+2vU46FS0ZJThYWTSuYiWkf LsmQi/ETQDAMTdGlcppqY9U1gAy64YTohHwyWaHDkrcc46/2dxjWlZWci7NC5OIU y1M2tlBRCLoR0A/25h4Hrqi0OZ+Xv/WUub/kA1BmwgmrMsiq+tOZscWit3jygB2o W+31SJXIGukUmsjf0r31VyblmhTsPUvIRLKCKFOqGUlFELnR5uGNMHdPn3AKMud9 m2knowXsU7lU/ZWk9zJHmCgzBIuWUiU= -----END CERTIFICATE-----Generated at Thu Sep 24 23:14:06 2026 by rpki-client