$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa File: 2921d5a0-167c-34e7-ad92-c580bbdb9441.roa (raw, json) Hash identifier: E2V3AVjoKepBvXeeOlW3Fvi/oZjxUz2jOuZkhW52LVs= Subject key identifier: D2:14:29:4D:08:A1:CC:AA:9B:66:26:6A:93:01:40:98:04:98:3F:50 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C6915D53317A2D218900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c6:91:5d:53:31:7a:2d:21:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b1436294-f738-4628-8185-fa2d87832546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:b4:16:19:2f:c1:a5:85:cf:3f:58:0c:83: d1:64:28:ef:6b:83:2d:36:40:aa:ce:1b:45:1f:a5: 6f:9e:3f:0a:5f:c9:fd:32:69:c5:0a:8a:dd:3d:39: 1c:10:52:e8:d4:43:75:39:11:d5:8e:f5:6f:6a:54: 00:85:61:99:04:2c:f1:4e:7a:0e:62:88:c6:2c:6d: 51:32:c8:79:20:c9:85:d1:c5:5b:b9:bb:b8:11:cb: 6a:db:a1:f3:20:28:9a:30:07:28:a3:a5:65:d2:fc: 93:e9:14:36:6b:4b:35:6f:c4:35:a3:22:be:2c:97: 04:3a:b3:a4:61:a6:85:31:cb:73:6f:42:b8:a1:49: ea:06:0f:03:f1:d5:ff:03:4f:7d:01:78:cf:a7:4e: 41:f0:2a:6c:9c:4b:81:09:2a:c4:54:e6:7d:d3:79: 6e:56:bc:22:a7:25:58:64:5e:13:ae:5e:9e:77:bd: 44:05:a4:50:a9:00:f6:6e:46:3b:9c:9c:7b:fd:34: ea:f0:70:31:82:4a:37:7b:b9:d6:15:85:c1:d5:00: 09:40:39:ca:af:5f:ef:3e:1c:6e:48:d1:1f:60:78: 8b:ea:2d:5f:30:4e:05:fc:50:dd:dc:56:0c:a3:57: d3:e7:05:94:e4:5a:9e:c4:66:35:d4:5a:52:6d:d3: 98:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:14:29:4D:08:A1:CC:AA:9B:66:26:6A:93:01:40:98:04:98:3F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:38:b0:ad:b5:54:f3:91:23:68:8d:e0:34:90:08:42:12:fe: 67:37:fe:6e:97:04:80:46:3e:06:83:fd:56:75:1c:db:6a:52: 81:26:7e:c5:9d:ee:09:15:36:c6:58:7e:95:a2:c5:4a:1c:d8: d3:5b:96:02:ef:27:f7:04:3e:90:70:0a:03:cc:8c:36:01:d7: 42:be:ad:5d:22:d5:cc:da:4e:f7:12:43:2a:11:ff:46:33:7f: e5:ff:fb:70:b4:d8:ea:20:4c:32:d3:01:3d:02:22:81:42:39: c6:a6:2e:74:25:29:a0:00:9f:0f:78:8e:6e:69:ea:7d:35:e5: 85:20:b1:58:c6:37:3b:50:18:53:74:de:7a:fd:49:61:84:40: c0:3b:c2:e3:25:0f:d2:2a:71:98:50:28:04:01:c3:7f:03:0d: d8:90:f2:b9:23:a1:b1:f2:82:b7:a5:e2:72:da:c3:00:c2:d1: 85:60:10:13:7a:ff:50:07:9b:74:92:85:4e:92:33:56:ff:4f: 60:da:47:7e:3a:31:19:b2:41:bf:1d:19:7f:61:2f:c4:af:5d: f3:c3:c0:67:90:73:a2:8b:0c:05:5b:97:bf:6e:03:08:1f:2a: a8:15:5e:2a:65:a9:27:ef:58:ea:3b:d0:b3:f9:a3:bc:6b:75: 9c:ef:e9:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98aRXVMxei0hiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjE0MzYyOTQtZjczOC00NjI4LTgxODUtZmEyZDg3ODMyNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPS0FhkvwaWFzz9YDIPRZCjva4MtNkCqzhtF H6Vvnj8KX8n9MmnFCordPTkcEFLo1EN1ORHVjvVvalQAhWGZBCzxTnoOYojGLG1R Msh5IMmF0cVbubu4Ectq26HzICiaMAcoo6Vl0vyT6RQ2a0s1b8Q1oyK+LJcEOrOk YaaFMctzb0K4oUnqBg8D8dX/A099AXjPp05B8CpsnEuBCSrEVOZ903luVrwipyVY ZF4Trl6ed71EBaRQqQD2bkY7nJx7/TTq8HAxgko3e7nWFYXB1QAJQDnKr1/vPhxu SNEfYHiL6i1fME4F/FDd3FYMo1fT5wWU5FqexGY11FpSbdOYeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIUKU0Iocyqm2YmapMBQJgEmD9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjkyMWQ1YTAtMTY3Yy0z NGU3LWFkOTItYzU4MGJiZGI5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw4sK21VPORI2iN4DSQCEIS/mc3/m6XBIBGPgaD/VZ1HNtqUoEmfsWd 7gkVNsZYfpWixUoc2NNblgLvJ/cEPpBwCgPMjDYB10K+rV0i1czaTvcSQyoR/0Yz f+X/+3C02OogTDLTAT0CIoFCOcamLnQlKaAAnw94jm5p6n015YUgsVjGNztQGFN0 3nr9SWGEQMA7wuMlD9IqcZhQKAQBw38DDdiQ8rkjobHygrel4nLawwDC0YVgEBN6 /1AHm3SShU6SM1b/T2DaR346MRmyQb8dGX9hL8SvXfPDwGeQc6KLDAVbl79uAwgf KqgVXiplqSfvWOo70LP5o7xrdZzv6bQ= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:19 2025 by rpki-client