$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa File: 14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa (raw, json) Hash identifier: U5uiA6+9T4LtELZtsFM73pLVrpICX2ogYEhQnRkrywY= Subject key identifier: 71:E8:64:3F:EA:06:DD:F3:3D:A9:9C:10:77:80:EF:16:A2:82:E8:25 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDCBA7A5D01CE39C950AC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 130.174.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:cb:a7:a5:d0:1c:e3:9c:95:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=99b200cd-207f-4b06-95a2-43c288ca3cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:bb:41:48:9c:1e:b9:d9:71:4e:20:b2:dc: 45:21:63:b5:54:68:92:ac:bd:62:29:f8:b9:70:6b: c4:7e:02:0c:76:2e:70:0b:73:ca:f0:17:1d:c1:61: 4a:99:d8:f7:b9:e0:3a:8d:32:d5:bc:1e:02:6b:85: 98:da:fc:d4:06:f4:9a:48:94:33:a2:fd:9e:53:d6: 5e:70:5e:c4:9a:72:e6:8e:f8:47:b3:e6:3b:b4:b3: 9c:dc:93:ec:73:6d:e5:1e:14:37:ea:e5:94:9b:e4: 6b:12:5b:4a:e4:3f:90:b0:3e:59:26:3e:6c:4f:c4: 4d:b8:0f:f5:35:d2:1c:8e:6d:5c:8a:dd:82:7f:70: 4f:de:c9:f3:6d:0d:dc:32:d7:bf:68:55:08:4c:c7: f5:81:0e:68:13:10:45:c4:da:fb:19:69:87:c4:ca: 5d:37:3a:a2:82:1e:dd:a0:26:af:61:be:f9:49:f7: 33:35:b7:17:73:9f:57:08:3f:86:60:d1:fa:9d:36: fa:9a:5e:9b:81:dd:21:cc:8e:cc:dd:48:1a:fe:3c: 35:1c:0f:1a:80:d5:56:b3:ef:35:52:af:f2:74:c3: ba:f4:42:71:ec:17:1a:69:ac:1f:9b:08:9a:db:ad: 4d:06:eb:d8:f4:76:49:e4:0c:bc:65:b5:ba:35:1b: c0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E8:64:3F:EA:06:DD:F3:3D:A9:9C:10:77:80:EF:16:A2:82:E8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e4:a0:d4:2c:5e:9a:de:fd:1d:a5:90:0d:c4:63:a2:06:a7: 7d:e7:f6:ac:99:da:ac:18:cc:1b:73:4d:21:d2:4c:13:06:68: 37:1c:8a:59:43:03:44:5f:52:d6:80:7c:cc:04:e4:03:34:b3: eb:9b:eb:65:a3:d7:c1:6e:60:ec:e4:b8:69:c8:09:c3:54:c5: 98:d3:01:6a:49:ea:f1:83:02:62:bb:17:08:1d:19:36:44:3d: a2:11:aa:da:e1:1e:14:ed:bf:e5:da:f2:22:03:83:1c:79:b6: 20:05:55:80:bc:4a:85:af:0d:e6:75:e5:f1:20:e2:2a:e6:8d: 36:da:fd:40:53:97:d5:ca:c0:b6:58:42:2b:54:e3:47:d2:45: bf:20:00:0d:51:4f:c7:7f:18:b0:98:22:0b:94:14:f5:72:b7: 50:04:95:89:8c:93:09:8a:3d:9c:49:27:14:cb:44:81:a8:46: cc:51:78:36:31:bd:2b:64:83:57:ce:7a:08:26:4d:c7:03:55: e5:26:36:86:46:4a:2e:92:08:f0:59:54:14:39:cd:8c:4a:7c: 65:5f:d2:fe:e8:25:16:30:53:cc:ae:06:17:9b:7c:91:75:a6: 8d:64:8e:9c:4d:d3:56:44:41:84:b3:cc:03:6d:83:dd:51:e6: ac:ab:c1:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcunpdAc45yVCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OTliMjAwY2QtMjA3Zi00YjA2LTk1YTItNDNjMjg4Y2EzY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSW7QUicHrnZcU4gstxFIWO1VGiSrL1iKfi5 cGvEfgIMdi5wC3PK8BcdwWFKmdj3ueA6jTLVvB4Ca4WY2vzUBvSaSJQzov2eU9Ze cF7EmnLmjvhHs+Y7tLOc3JPsc23lHhQ36uWUm+RrEltK5D+QsD5ZJj5sT8RNuA/1 NdIcjm1cit2Cf3BP3snzbQ3cMte/aFUITMf1gQ5oExBFxNr7GWmHxMpdNzqigh7d oCavYb75SfczNbcXc59XCD+GYNH6nTb6ml6bgd0hzI7M3Uga/jw1HA8agNVWs+81 Uq/ydMO69EJx7Bcaaawfmwia261NBuvY9HZJ5Ay8ZbW6NRvAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHoZD/qBt3zPamcEHeA7xaiguglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTRlN2Y4NDQtZmI2ZS0z MzkyLWE3ZGItOWIyOGU3NDk5YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbkoNQsXpre/R2lkA3EY6IGp33n9qyZ2qwYzBtzTSHSTBMGaDccillD A0RfUtaAfMwE5AM0s+ub62Wj18FuYOzkuGnICcNUxZjTAWpJ6vGDAmK7FwgdGTZE PaIRqtrhHhTtv+Xa8iIDgxx5tiAFVYC8SoWvDeZ15fEg4irmjTba/UBTl9XKwLZY QitU40fSRb8gAA1RT8d/GLCYIguUFPVyt1AElYmMkwmKPZxJJxTLRIGoRsxReDYx vStkg1fOeggmTccDVeUmNoZGSi6SCPBZVBQ5zYxKfGVf0v7oJRYwU8yuBhebfJF1 po1kjpxN01ZEQYSzzANtg91R5qyrwas= -----END CERTIFICATE-----Generated at Mon Oct 26 23:19:27 2026 by rpki-client