$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa File: 4853b05d-283a-3a7a-8089-1c972ae20611.roa (raw, json) Hash identifier: qXvt0iY+bH53bO5J85lyBcTq6Gw+UpaZkCFRinL9xek= Subject key identifier: 22:0C:66:54:10:95:D4:BC:8A:56:2A:3D:6C:7B:16:64:4F:11:41:70 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A90A0AADDD1DA2CFAB2B1E800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 3360 IP address blocks: 130.174.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:aa:dd:d1:da:2c:fa:b2:b1:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=a643c42a-9eea-4ff3-bd8d-949ce390c7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:56:03:c1:16:e1:17:07:04:d6:54:5c:21: 9b:ed:14:ef:94:b6:a9:f2:b7:1d:84:7f:ac:c1:93: 12:00:6e:d3:00:35:94:73:90:18:e2:75:f8:a6:02: 48:6b:25:13:a9:72:44:e9:15:cd:51:f9:ca:d7:cc: 47:35:41:9c:ad:00:c7:0d:39:5b:8d:28:eb:49:76: 25:e8:cf:21:b9:8b:fb:e8:a7:02:47:f8:50:3f:45: 01:b0:f8:98:71:f9:9a:cc:21:e5:a2:ab:61:ea:cb: 2a:92:27:e1:5f:55:ab:97:b9:36:ac:9c:c7:25:d4: 6f:d7:80:ac:1e:a6:db:b7:04:b0:58:2b:b5:ad:fa: 90:3e:7a:34:3e:30:9e:a8:75:59:50:3a:59:a2:62: d4:72:1c:e7:44:e4:bf:29:7e:7c:45:5c:aa:80:94: 44:0f:56:2e:80:b7:14:47:d9:b5:40:81:94:65:3f: 4e:4d:0a:17:69:b9:97:bc:87:33:ad:62:0c:58:45: 41:26:e6:41:22:f1:a1:f7:d6:99:9d:33:d8:c9:f0: 26:36:ca:5e:25:05:a0:54:59:5b:f0:2b:54:8f:24: 81:d6:89:bf:89:44:dd:ea:c5:40:44:57:2d:89:c0: c7:b1:46:19:b2:12:2a:29:46:f1:8e:fb:8a:d1:10: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0C:66:54:10:95:D4:BC:8A:56:2A:3D:6C:7B:16:64:4F:11:41:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f3:2a:50:03:65:d0:af:00:bc:21:6c:00:a7:a3:de:39:02: 16:64:da:a9:b2:e5:25:7c:cc:5a:f3:48:84:f1:e3:e5:f9:2b: 4b:c0:7b:d8:c5:58:ac:f0:32:3b:f1:29:f2:84:52:e5:db:76: b5:f0:96:30:3a:c7:f4:59:17:14:51:f7:e6:c0:a3:ba:98:ac: 7b:b3:69:d5:d6:92:f3:9c:cb:3a:a0:d0:4c:f4:a0:68:d6:fd: 17:1f:f4:dd:a7:b5:70:02:c3:c0:5e:40:c6:8e:f5:25:fe:66: f9:78:06:42:4a:cb:22:5f:76:e1:48:26:a8:96:da:6f:c5:ee: 30:18:ce:e3:98:88:0d:5e:5e:db:9c:c7:6f:e8:e5:ae:cf:c6: 8b:e2:a0:b1:03:de:fd:40:b8:45:5f:1a:42:db:5e:0d:d5:cb: 29:77:b6:8b:5d:eb:96:b7:24:61:ed:e5:74:8d:cb:e9:81:a4: e7:65:05:5b:2a:8a:4d:36:8e:cd:4b:aa:03:99:d4:94:29:81: b1:d5:65:03:5a:f0:4c:14:84:bd:cd:0b:f9:ce:d0:51:9f:5e: 22:ca:67:28:6d:3e:22:f4:eb:c8:d0:6c:5b:2d:a6:41:67:ee: 4f:9d:70:bd:30:95:32:7a:be:99:72:ad:19:89:8e:f1:57:05: 01:33:d6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoKrd0dos+rKx6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk YTY0M2M0MmEtOWVlYS00ZmYzLWJkOGQtOTQ5Y2UzOTBjN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9VWA8EW4RcHBNZUXCGb7RTvlLap8rcdhH+s wZMSAG7TADWUc5AY4nX4pgJIayUTqXJE6RXNUfnK18xHNUGcrQDHDTlbjSjrSXYl 6M8huYv76KcCR/hQP0UBsPiYcfmazCHloqth6ssqkifhX1Wrl7k2rJzHJdRv14Cs HqbbtwSwWCu1rfqQPno0PjCeqHVZUDpZomLUchznROS/KX58RVyqgJRED1YugLcU R9m1QIGUZT9OTQoXabmXvIczrWIMWEVBJuZBIvGh99aZnTPYyfAmNspeJQWgVFlb 8CtUjySB1om/iUTd6sVARFcticDHsUYZshIqKUbxjvuK0RDahQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIMZlQQldS8ilYqPWx7FmRPEUFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1M2IwNWQtMjgzYS0z YTdhLTgwODktMWM5NzJhZTIwNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDzKlADZdCvALwhbACno945AhZk2qmy5SV8zFrzSITx4+X5K0vAe9jF WKzwMjvxKfKEUuXbdrXwljA6x/RZFxRR9+bAo7qYrHuzadXWkvOcyzqg0Ez0oGjW /Rcf9N2ntXACw8BeQMaO9SX+Zvl4BkJKyyJfduFIJqiW2m/F7jAYzuOYiA1eXtuc x2/o5a7PxovioLED3v1AuEVfGkLbXg3Vyyl3totd65a3JGHt5XSNy+mBpOdlBVsq ik02js1LqgOZ1JQpgbHVZQNa8EwUhL3NC/nO0FGfXiLKZyhtPiL068jQbFstpkFn 7k+dcL0wlTJ6vplyrRmJjvFXBQEz1vQ= -----END CERTIFICATE-----Generated at Sun Jul 27 01:45:08 2025 by rpki-client