$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa File: 0fa828e8-585f-340f-8479-3265c9e2008a.roa (raw, json) Hash identifier: qhUjnIReJY0jVybfb26O5vZJDMCio0/ggV5Q/0B0d/U= Subject key identifier: 8A:BC:67:A0:AB:1C:BC:43:CC:7B:5A:80:25:14:D3:03:F4:6A:1C:B4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D1CFB8B5B162EF0DBC180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 130.174.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1c:fb:8b:5b:16:2e:f0:db:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=1d5409c5-b5ac-450d-a46e-f48861f90972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:57:05:a3:c1:91:12:db:e8:6a:cb:b9:63:bd: da:cd:1b:1d:73:c6:91:46:f9:96:e4:1f:c2:bb:7a: 8b:8f:cb:86:b4:21:7f:cc:ac:de:51:e6:c3:42:8c: ca:1f:c8:67:cc:2f:23:65:b3:9e:0c:e1:5a:dc:83: de:85:64:90:b8:f1:48:ef:3d:73:0b:f6:95:e9:66: 7e:21:31:9f:52:dd:a7:eb:bb:3d:69:a2:be:40:74: 66:d7:d0:5e:cc:df:b5:64:3a:10:dd:f5:97:94:6f: 6d:8e:c8:0e:9e:37:b8:d4:53:26:52:83:e9:65:26: 8d:5a:4f:12:c5:dc:f6:51:e9:dd:fb:f1:2f:c4:f3: 1e:5f:78:d9:48:0b:ae:b9:14:1b:6f:40:1d:63:91: 70:55:81:a7:a0:93:b0:54:d9:0a:7c:db:9e:ea:52: ed:55:24:d2:e3:0b:27:46:80:8d:92:3e:5d:6d:c0: 22:18:f4:a7:cd:47:57:47:26:d9:22:26:2d:6e:6f: 68:6e:06:d3:bb:d7:26:bc:1b:0c:02:60:6d:2e:e4: fd:2c:c0:8f:41:a0:80:d4:5b:44:6a:28:1a:e8:1c: d3:7c:6c:6a:5f:32:51:ee:55:fd:59:43:87:33:6c: 91:27:06:22:a5:5c:f7:6a:a0:49:3d:e7:fa:7b:a8: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BC:67:A0:AB:1C:BC:43:CC:7B:5A:80:25:14:D3:03:F4:6A:1C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b2:07:ca:a4:2b:82:ca:24:18:dd:f3:77:bc:20:c7:94:58: 7a:7b:9b:ef:a1:61:1e:fc:3c:5d:87:04:00:0f:7e:05:90:ed: 95:d5:62:61:71:c1:c1:7c:ae:ed:40:78:82:f1:b4:b0:d8:41: f5:fc:47:64:4e:6e:59:17:4f:cf:8d:e2:21:33:c5:1a:c6:6a: 9f:f7:9b:26:03:26:0d:c1:43:e2:5e:f9:89:b7:ed:9d:50:da: 08:dd:f8:25:0a:bd:be:08:15:54:ff:85:59:87:4d:f6:7d:71: 7f:73:11:21:40:86:be:94:33:f1:9d:da:a6:b2:1c:6a:22:49: 24:4c:11:8d:71:97:9b:46:ea:c7:55:59:5c:ca:8f:07:c1:13: af:0b:8d:2f:f4:ae:8f:be:15:a6:be:e1:12:d8:fa:ad:5c:44: ad:b8:4b:c5:e5:32:44:a5:d3:a1:2a:0d:7e:c7:cb:2e:1f:28: 3a:8b:17:91:65:36:cd:da:d8:7f:ef:43:37:75:c0:72:94:df: 4d:4d:17:67:9e:09:c3:d7:3d:4b:5e:c2:40:34:ca:24:e0:8e: 30:00:16:64:d2:73:36:94:e6:7f:73:05:b2:fb:ce:ad:86:06: ee:7d:24:67:67:0a:9f:97:08:42:b2:45:59:7b:6a:fc:91:73: 14:cc:7e:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRz7i1sWLvDbwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MWQ1NDA5YzUtYjVhYy00NTBkLWE0NmUtZjQ4ODYxZjkwOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVcFo8GREtvoasu5Y73azRsdc8aRRvmW5B/C u3qLj8uGtCF/zKzeUebDQozKH8hnzC8jZbOeDOFa3IPehWSQuPFI7z1zC/aV6WZ+ ITGfUt2n67s9aaK+QHRm19BezN+1ZDoQ3fWXlG9tjsgOnje41FMmUoPpZSaNWk8S xdz2Uend+/EvxPMeX3jZSAuuuRQbb0AdY5FwVYGnoJOwVNkKfNue6lLtVSTS4wsn RoCNkj5dbcAiGPSnzUdXRybZIiYtbm9obgbTu9cmvBsMAmBtLuT9LMCPQaCA1FtE aiga6BzTfGxqXzJR7lX9WUOHM2yRJwYipVz3aqBJPef6e6ivLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq8Z6CrHLxDzHtagCUU0wP0ahy0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGZhODI4ZTgtNTg1Zi0z NDBmLTg0NzktMzI2NWM5ZTIwMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKyB8qkK4LKJBjd83e8IMeUWHp7m++hYR78PF2HBAAPfgWQ7ZXVYmFx wcF8ru1AeILxtLDYQfX8R2ROblkXT8+N4iEzxRrGap/3myYDJg3BQ+Je+Ym37Z1Q 2gjd+CUKvb4IFVT/hVmHTfZ9cX9zESFAhr6UM/Gd2qayHGoiSSRMEY1xl5tG6sdV WVzKjwfBE68LjS/0ro++Faa+4RLY+q1cRK24S8XlMkSl06EqDX7Hyy4fKDqLF5Fl Ns3a2H/vQzd1wHKU301NF2eeCcPXPUtewkA0yiTgjjAAFmTSczaU5n9zBbL7zq2G Bu59JGdnCp+XCEKyRVl7avyRcxTMfko= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:11 2025 by rpki-client