$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa File: 223954b1-65ee-3d7d-95c5-183cd5e169ed.roa (raw, json) Hash identifier: /4+1/HvTtZvjkKYqQeS2OoD6wUTDMj/AiOWz1OG7YP8= Subject key identifier: BD:73:B6:16:95:7E:62:5C:A1:DE:AC:29:C5:EB:99:94:5C:49:C7:57 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7B867C11EA8FA15A30000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b8:67:c1:1e:a8:fa:15:a3:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=feaeee3b-a178-4511-bdf6-e00e8719a267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:7b:ac:2f:22:48:a4:25:8b:61:d1:c2:aa: 87:c3:76:41:a3:cd:96:27:c3:e8:ea:e5:76:47:ad: 7c:4e:fa:22:4b:36:80:04:f5:e9:c2:0d:7c:db:39: ad:20:d0:a8:48:af:1b:eb:f0:11:a5:38:42:ab:04: a7:8b:40:4b:61:6f:d2:3e:c9:e8:1d:38:03:95:b3: a1:1c:43:ab:24:e3:0c:b2:93:83:8f:e1:36:62:57: cb:52:8b:12:86:07:63:d1:0a:1c:00:c7:a9:2c:1b: a9:3d:ab:ce:f1:c1:96:14:35:2f:17:2e:22:88:a0: d8:2e:e8:7c:7c:cc:77:77:95:72:d6:f7:58:08:53: 7d:b5:ac:69:b3:17:0a:0a:89:f3:72:f6:db:71:08: e1:9c:cd:ef:94:10:02:0e:6d:a1:b3:e0:7d:82:70: 2d:54:98:23:47:c0:c6:bf:0c:70:06:c9:d6:96:f2: 4a:09:f3:00:f2:32:e2:1c:8f:eb:87:8d:ee:97:1d: 21:c2:6d:f1:55:25:4d:72:03:61:c0:95:bf:51:b0: 1b:39:27:4e:6d:35:37:70:45:06:9a:f0:78:b4:1c: 26:5d:bb:c1:ad:5b:7e:d1:02:fc:8b:0d:7f:83:fe: 90:a7:3a:f0:4a:d9:55:92:7d:dd:73:95:11:ec:af: 02:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:73:B6:16:95:7E:62:5C:A1:DE:AC:29:C5:EB:99:94:5C:49:C7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/223954b1-65ee-3d7d-95c5-183cd5e169ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0d:69:e6:bd:84:87:0f:17:f9:be:9e:b6:b5:12:3d:58:56: 35:5f:68:f4:4e:a6:16:84:b2:03:e0:56:68:81:75:d8:ef:08: 11:b0:ca:78:64:0e:32:ea:5b:32:23:3e:cf:2d:eb:fd:e8:eb: 36:ca:58:43:79:3b:df:bb:4d:51:53:c5:52:7f:cf:5e:01:61: f4:50:9b:20:43:1d:7c:48:64:ba:13:8f:e2:af:1e:27:7f:68: ee:cd:56:00:97:13:b3:b7:93:cf:f9:8d:b2:a8:6f:09:cb:52: 30:a8:67:36:dd:1c:d2:00:5a:1e:5e:c5:90:b1:a5:a7:3e:3f: 76:25:08:6f:d6:a1:68:45:1f:84:93:5c:5b:d8:10:d4:ce:38: 1c:c7:7f:6e:43:ec:fd:73:50:a3:6c:09:ef:12:3e:8f:7d:05: 2f:1e:5b:1a:b9:a1:42:22:20:f9:29:c7:e0:44:6a:fc:f0:42: 4f:4d:a8:ce:7c:7f:be:fc:e6:ea:2a:78:ca:ff:38:0d:e2:8d: 33:54:c0:9e:a0:14:cf:a6:23:e0:e0:20:8c:73:d6:38:bf:be: e8:b0:c5:83:57:4c:b6:80:99:d9:2f:5f:b2:36:bf:96:83:5b: fa:0f:2d:ab:e5:1d:c7:27:9a:27:f7:02:d0:85:3b:70:06:63: 12:4c:9f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97hnwR6o+hWjAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmVhZWVlM2ItYTE3OC00NTExLWJkZjYtZTAwZTg3MTlhMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnZ7rC8iSKQli2HRwqqHw3ZBo82WJ8Po6uV2 R618TvoiSzaABPXpwg182zmtINCoSK8b6/ARpThCqwSni0BLYW/SPsnoHTgDlbOh HEOrJOMMspODj+E2YlfLUosShgdj0QocAMepLBupPavO8cGWFDUvFy4iiKDYLuh8 fMx3d5Vy1vdYCFN9taxpsxcKConzcvbbcQjhnM3vlBACDm2hs+B9gnAtVJgjR8DG vwxwBsnWlvJKCfMA8jLiHI/rh43ulx0hwm3xVSVNcgNhwJW/UbAbOSdObTU3cEUG mvB4tBwmXbvBrVt+0QL8iw1/g/6QpzrwStlVkn3dc5UR7K8CXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1zthaVfmJcod6sKcXrmZRcScdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjIzOTU0YjEtNjVlZS0z ZDdkLTk1YzUtMTgzY2Q1ZTE2OWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgNaea9hIcPF/m+nra1Ej1YVjVfaPROphaEsgPgVmiBddjvCBGwynhk DjLqWzIjPs8t6/3o6zbKWEN5O9+7TVFTxVJ/z14BYfRQmyBDHXxIZLoTj+KvHid/ aO7NVgCXE7O3k8/5jbKobwnLUjCoZzbdHNIAWh5exZCxpac+P3YlCG/WoWhFH4ST XFvYENTOOBzHf25D7P1zUKNsCe8SPo99BS8eWxq5oUIiIPkpx+BEavzwQk9NqM58 f7785uoqeMr/OA3ijTNUwJ6gFM+mI+DgIIxz1ji/vuiwxYNXTLaAmdkvX7I2v5aD W/oPLavlHccnmif3AtCFO3AGYxJMn7E= -----END CERTIFICATE-----Generated at Tue Nov 4 03:23:39 2025 by rpki-client