$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa File: 28025e21-3943-3e2b-973d-489d5dab5dc0.roa (raw, json) Hash identifier: 8h1dJ6IfsH2qZQ6KD6AIKpaFX+Jm2Vms6hgRIrUaUug= Subject key identifier: CF:4A:66:D2:EE:A8:63:B6:38:3A:A9:C3:7A:DB:A1:D1:82:B8:91:14 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CCA38337F3D258AC7FB20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 130.174.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:ca:38:33:7f:3d:25:8a:c7:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c3cfbd6e-0ed5-4942-b208-f215ffc5c6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:20:a1:45:22:73:ea:7b:f7:55:f1:25:51: 96:8c:34:84:ed:af:5a:d8:cc:f8:19:e3:f4:93:a2: 48:c0:42:c2:36:2b:de:00:bf:4a:6f:15:83:e1:74: 86:d4:9b:65:39:e0:c2:38:19:06:64:79:96:a3:d5: 96:ac:ff:77:9e:85:c3:e9:04:92:fc:3a:d8:f0:ea: 90:95:40:d7:28:ee:14:ee:bf:8d:8a:87:d8:29:51: 4b:0c:94:b6:7d:13:00:26:19:19:8d:77:fb:6f:42: 5b:9b:6f:8c:8f:a9:2b:d4:2e:75:77:fb:0d:ff:94: 24:c6:45:a4:2f:af:29:5c:83:74:8e:5b:cb:3d:3e: 2b:07:8c:46:7f:05:fa:89:1e:85:bd:4d:74:e8:60: 70:f5:bc:2f:2a:d6:71:32:07:b7:86:c6:1a:52:74: 28:cf:ee:ff:d6:0d:1c:72:b5:0f:67:46:9d:8f:fc: f7:8b:14:b9:7a:44:35:e5:5d:a8:4f:61:61:1d:04: 49:b4:f0:bc:66:1f:e3:33:d1:e0:21:d5:2f:b3:87: b4:52:64:95:85:bf:63:39:11:62:48:e2:2f:c7:5b: 60:fe:c3:26:a5:0d:10:0d:29:0d:a1:e1:c1:5c:4f: 0d:93:4e:23:d4:32:9c:1e:17:53:31:d4:70:f3:e6: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4A:66:D2:EE:A8:63:B6:38:3A:A9:C3:7A:DB:A1:D1:82:B8:91:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:84:cb:c9:b1:fe:6c:60:2f:4a:c6:ab:66:34:97:57:1d:56: d8:a5:60:86:f7:b0:8e:60:3c:2b:83:35:05:e9:65:56:dd:0e: 80:86:e0:6c:e1:3b:52:b0:2b:a0:03:97:d1:9d:c2:54:59:bb: 26:61:4b:bc:72:a2:c4:f1:5a:1d:3b:f1:73:19:ba:10:9c:69: b9:1e:bc:cb:95:be:33:68:28:d4:aa:b7:fb:64:d8:af:f0:a6: 0c:a5:49:28:e0:27:1f:5c:54:b9:d8:3c:84:8f:8a:ec:96:67: 62:07:4a:a8:e5:9f:ea:27:bf:5d:b1:eb:e9:b2:00:6b:d5:6d: 40:6b:ef:fc:f6:ff:dd:db:a9:0e:ee:a4:39:d1:56:6d:64:7d: 20:c8:38:e1:45:ce:f9:50:a7:6c:f3:44:89:71:9f:35:ad:db: f0:b3:53:55:1b:fb:ec:b4:1c:b6:90:68:f8:2a:b6:ae:07:1c: 35:97:06:cf:5e:e7:01:ec:80:30:83:c0:11:06:68:7a:64:81: 17:f5:55:6c:c9:53:10:2f:05:3a:78:31:18:43:79:d6:c9:63: c7:14:59:ff:f9:65:dc:ba:7a:12:66:0a:30:02:a9:cd:9b:2e: a2:b5:9a:e2:ad:d2:7c:3c:ef:4a:f9:e8:37:90:e7:69:fa:1b: 77:69:3f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMo4M389JYrH+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YzNjZmJkNmUtMGVkNS00OTQyLWIyMDgtZjIxNWZmYzVjNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocUgoUUic+p791XxJVGWjDSE7a9a2Mz4GeP0 k6JIwELCNiveAL9KbxWD4XSG1JtlOeDCOBkGZHmWo9WWrP93noXD6QSS/DrY8OqQ lUDXKO4U7r+NiofYKVFLDJS2fRMAJhkZjXf7b0Jbm2+Mj6kr1C51d/sN/5QkxkWk L68pXIN0jlvLPT4rB4xGfwX6iR6FvU106GBw9bwvKtZxMge3hsYaUnQoz+7/1g0c crUPZ0adj/z3ixS5ekQ15V2oT2FhHQRJtPC8Zh/jM9HgIdUvs4e0UmSVhb9jORFi SOIvx1tg/sMmpQ0QDSkNoeHBXE8Nk04j1DKcHhdTMdRw8+YeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9KZtLuqGO2ODqpw3rbodGCuJEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjgwMjVlMjEtMzk0My0z ZTJiLTk3M2QtNDg5ZDVkYWI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACEy8mx/mxgL0rGq2Y0l1cdVtilYIb3sI5gPCuDNQXpZVbdDoCG4Gzh O1KwK6ADl9GdwlRZuyZhS7xyosTxWh078XMZuhCcabkevMuVvjNoKNSqt/tk2K/w pgylSSjgJx9cVLnYPISPiuyWZ2IHSqjln+onv12x6+myAGvVbUBr7/z2/93bqQ7u pDnRVm1kfSDIOOFFzvlQp2zzRIlxnzWt2/CzU1Ub++y0HLaQaPgqtq4HHDWXBs9e 5wHsgDCDwBEGaHpkgRf1VWzJUxAvBTp4MRhDedbJY8cUWf/5Zdy6ehJmCjACqc2b LqK1muKt0nw870r56DeQ52n6G3dpP2M= -----END CERTIFICATE-----Generated at Tue Sep 22 18:10:38 2026 by rpki-client