$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa File: 28025e21-3943-3e2b-973d-489d5dab5dc0.roa (raw, json) Hash identifier: MZv5DK1dwg7lrlv+zVEbzsCgeQ0E8Xu0daF8+CqCVg4= Subject key identifier: F6:9A:CA:28:FF:D0:D8:7D:0A:91:27:90:5A:33:F2:5C:3B:44:D7:8A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D250CF2A3F693D0B15600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 130.174.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:25:0c:f2:a3:f6:93:d0:b1:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=b504d645-3d93-4273-8add-b0f063aa000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:6d:9f:75:e6:28:f2:59:12:c1:34:d2:8b: 2f:e8:a5:f6:de:d7:09:55:de:26:00:a4:1a:1e:65: 23:ed:60:ea:2c:70:0c:f8:6f:c1:99:32:3a:3d:98: 17:cd:d9:78:2e:0e:bb:9e:5b:8b:6d:ed:23:98:01: 62:72:d3:f7:56:bb:f5:3b:68:40:8a:ed:46:da:2d: 70:af:69:32:49:e2:a4:a1:59:e0:67:db:fd:e9:db: 17:81:f1:49:52:cd:1c:0a:78:66:6d:37:66:6e:c5: 60:65:33:86:ac:41:45:f5:54:6f:57:7b:f9:e1:0d: 1f:d6:7f:e4:f2:bc:64:aa:12:44:64:b0:97:e7:25: 66:ba:7e:81:56:67:fa:4f:7a:df:13:64:20:e3:2c: 8d:75:6a:ba:b1:cf:79:92:91:5f:59:1c:e2:da:74: fa:e4:1a:c9:90:10:19:5e:b8:8e:1b:c1:9b:76:48: fc:45:9e:ab:08:5a:c7:42:1e:47:ca:f4:4c:ba:1a: 3e:e0:d3:78:a2:fc:56:4a:2f:9c:a1:5a:52:25:f8: 02:7c:7d:46:b0:e7:c2:f1:4e:4c:08:57:04:38:6b: f8:54:9f:63:54:c6:0c:3c:3a:74:21:a6:a0:e5:c7: c5:4e:f0:f3:51:39:fb:40:df:ed:53:b9:6a:60:22: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9A:CA:28:FF:D0:D8:7D:0A:91:27:90:5A:33:F2:5C:3B:44:D7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:60:31:d3:7f:15:1a:86:43:58:69:80:7c:21:f3:ce:43: 0c:b2:50:f8:ed:71:a3:f3:c5:2f:d2:92:ff:2d:76:86:9f:30: 5e:ab:11:60:5f:02:0e:79:1d:83:61:0a:f1:b2:e7:97:92:09: f6:6a:16:e0:32:79:3e:e8:e3:7e:ae:75:00:c8:cb:b2:d4:3d: 61:73:e3:02:0f:ff:5f:c9:0f:ef:3a:1f:cf:d8:5a:51:41:d0: 4d:e4:44:6a:69:4c:91:d7:ef:04:4d:de:e1:32:45:2b:d9:2c: 9b:85:d5:f6:1a:6d:84:1f:85:98:91:ff:cf:2a:db:b6:53:4b: 1c:94:13:34:f2:70:52:12:24:4a:18:26:28:c5:7c:8f:fd:77: 1b:e4:72:90:f5:85:40:a0:34:b6:10:57:93:68:1f:94:b6:a3: da:a1:4c:fb:01:51:38:f8:58:7a:9c:30:71:2a:05:f7:4e:c3: f8:c0:d5:38:14:e5:9d:a4:99:ca:6e:f8:5c:db:86:03:c5:78: 90:41:88:e9:f1:bc:53:d0:2e:13:fe:23:bf:2e:fc:01:69:94: e4:b3:fd:4c:04:b6:48:92:f9:98:7b:1d:43:cd:02:17:cf:d2: 76:e0:fa:e5:99:16:25:64:c6:c8:bb:fb:9d:a7:a4:48:d3:2f: 14:19:49:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSUM8qP2k9CxVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YjUwNGQ2NDUtM2Q5My00MjczLThhZGQtYjBmMDYzYWEwMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL9tn3XmKPJZEsE00osv6KX23tcJVd4mAKQa HmUj7WDqLHAM+G/BmTI6PZgXzdl4Lg67nluLbe0jmAFictP3Vrv1O2hAiu1G2i1w r2kySeKkoVngZ9v96dsXgfFJUs0cCnhmbTdmbsVgZTOGrEFF9VRvV3v54Q0f1n/k 8rxkqhJEZLCX5yVmun6BVmf6T3rfE2Qg4yyNdWq6sc95kpFfWRzi2nT65BrJkBAZ XriOG8Gbdkj8RZ6rCFrHQh5HyvRMuho+4NN4ovxWSi+coVpSJfgCfH1GsOfC8U5M CFcEOGv4VJ9jVMYMPDp0Iaag5cfFTvDzUTn7QN/tU7lqYCJC9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaayij/0Nh9CpEnkFoz8lw7RNeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjgwMjVlMjEtMzk0My0z ZTJiLTk3M2QtNDg5ZDVkYWI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHYDHTfxUahkNYaYB8IfPOQwyyUPjtcaPzxS/Skv8tdoafMF6rEWBf Ag55HYNhCvGy55eSCfZqFuAyeT7o436udQDIy7LUPWFz4wIP/1/JD+86H8/YWlFB 0E3kRGppTJHX7wRN3uEyRSvZLJuF1fYabYQfhZiR/88q27ZTSxyUEzTycFISJEoY JijFfI/9dxvkcpD1hUCgNLYQV5NoH5S2o9qhTPsBUTj4WHqcMHEqBfdOw/jA1TgU 5Z2kmcpu+FzbhgPFeJBBiOnxvFPQLhP+I78u/AFplOSz/UwEtkiS+Zh7HUPNAhfP 0nbg+uWZFiVkxsi7+52npEjTLxQZSXU= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:15 2025 by rpki-client