$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa File: 03ff1029-a792-36da-bce0-fa792d81e2b2.roa (raw, json) Hash identifier: rLoWabGPcusBzCQ8VOlNIWJ51p30cIpFbduYXlc+Er0= Subject key identifier: DA:EF:EB:93:86:88:71:3C:B3:77:40:63:3E:22:23:C0:54:98:51:F0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CC6DC70E0694F908D2080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 130.174.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c6:dc:70:e0:69:4f:90:8d:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=5850d37c-0d15-407e-8ab2-0a2695d469e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:df:06:9e:e6:88:35:72:33:a7:fc:4b:04: 55:b0:0b:a8:ab:19:c4:09:c9:64:a2:0a:78:41:a9: 9d:9f:95:ca:03:e1:e0:42:5f:af:84:d1:b2:bd:98: 5a:94:cb:a0:96:fd:f5:27:ce:4a:91:58:e7:5a:ac: c4:f0:f5:3c:07:60:8d:89:53:aa:81:a7:7b:64:4f: 2f:5c:18:83:d6:02:09:d0:e1:6b:77:63:a3:58:b3: 87:22:c8:41:0f:4a:ef:5e:7a:48:2d:59:5d:1e:06: 0b:d4:1b:74:20:f6:1b:97:12:9e:4b:90:ea:29:cd: 4c:3b:41:5c:85:02:de:75:fe:32:06:2b:11:15:11: 18:39:83:23:0a:c1:f5:22:77:a7:94:25:8d:24:4d: 96:aa:50:68:80:4e:4f:0a:e1:bb:f9:38:0b:81:ff: 57:31:d4:29:27:1c:1e:ae:8e:26:c7:23:61:a1:b5: 2a:e9:e3:44:d3:30:af:ec:1e:30:15:aa:e2:07:d1: 5c:66:2e:02:f4:01:4c:d6:84:45:8e:98:8e:74:5d: 3b:96:6f:df:df:4d:cf:5d:f3:ad:a8:84:a7:45:6c: b3:da:a9:86:50:08:91:85:26:b4:ec:bd:b7:9f:a1: a2:cb:2c:14:31:5a:ec:8c:b2:66:0f:4f:dd:ee:95: 0a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EF:EB:93:86:88:71:3C:B3:77:40:63:3E:22:23:C0:54:98:51:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/03ff1029-a792-36da-bce0-fa792d81e2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b9:fd:31:37:b7:a4:7b:9f:f3:39:40:74:47:b8:37:7b:d1: bd:8f:7f:f0:1f:07:25:43:b8:9e:6f:8b:c2:71:27:b6:05:e2: 55:68:73:c7:1e:a4:1c:1e:6f:fd:a8:96:9e:30:0a:38:88:6f: c1:53:fc:b1:67:09:dc:d0:90:3a:55:9b:98:ef:4f:fb:9a:22: f5:ab:a4:84:a7:17:fd:4e:e1:4d:b8:f0:cb:76:4a:ae:b3:83: 1a:20:b2:7b:dc:d2:a2:d4:d1:b1:c7:c5:76:85:82:f2:19:07: 92:06:89:a2:b7:9a:c7:39:ba:e2:a2:7a:2e:e1:82:eb:09:0d: 31:3c:7d:0d:3f:52:a1:d3:b6:f3:45:14:92:85:6f:cb:b6:17: 21:30:e1:3d:fd:48:fd:a7:b9:f6:d2:68:3f:3e:ae:36:e7:88: b0:0c:b2:e0:36:b0:a3:ae:71:ad:cc:e8:40:ea:c7:1f:ff:f3: 68:af:ca:c4:16:23:f1:18:e9:c6:38:01:14:d1:7e:21:cd:30: 3c:f0:c6:13:f3:d6:41:45:70:d1:62:54:01:10:0a:f7:13:d8: 79:46:c4:de:ba:33:43:6d:56:49:96:f5:9e:ab:c0:89:a9:02: 24:31:26:e6:6b:c2:26:7f:68:f3:db:d9:c6:15:30:7a:b8:ba: 69:da:c4:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMbccOBpT5CNIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTg1MGQzN2MtMGQxNS00MDdlLThhYjItMGEyNjk1ZDQ2OWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVDfBp7miDVyM6f8SwRVsAuoqxnECclkogp4 Qamdn5XKA+HgQl+vhNGyvZhalMuglv31J85KkVjnWqzE8PU8B2CNiVOqgad7ZE8v XBiD1gIJ0OFrd2OjWLOHIshBD0rvXnpILVldHgYL1Bt0IPYblxKeS5DqKc1MO0Fc hQLedf4yBisRFREYOYMjCsH1InenlCWNJE2WqlBogE5PCuG7+TgLgf9XMdQpJxwe ro4mxyNhobUq6eNE0zCv7B4wFariB9FcZi4C9AFM1oRFjpiOdF07lm/f303PXfOt qISnRWyz2qmGUAiRhSa07L23n6GiyywUMVrsjLJmD0/d7pUKfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrv65OGiHE8s3dAYz4iI8BUmFHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDNmZjEwMjktYTc5Mi0z NmRhLWJjZTAtZmE3OTJkODFlMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK5/TE3t6R7n/M5QHRHuDd70b2Pf/AfByVDuJ5vi8JxJ7YF4lVoc8ce pBweb/2olp4wCjiIb8FT/LFnCdzQkDpVm5jvT/uaIvWrpISnF/1O4U248Mt2Sq6z gxogsnvc0qLU0bHHxXaFgvIZB5IGiaK3msc5uuKiei7hgusJDTE8fQ0/UqHTtvNF FJKFb8u2FyEw4T39SP2nufbSaD8+rjbniLAMsuA2sKOuca3M6EDqxx//82ivysQW I/EY6cY4ARTRfiHNMDzwxhPz1kFFcNFiVAEQCvcT2HlGxN66M0NtVkmW9Z6rwImp AiQxJuZrwiZ/aPPb2cYVMHq4umnaxE8= -----END CERTIFICATE-----Generated at Wed Sep 9 00:49:32 2026 by rpki-client