$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa File: 2afb0ad9-4f76-3231-9716-3c8199667252.roa (raw, json) Hash identifier: DylCKFXxPFuHBF+R6HQFoTaeXFLGOjrxYMU8d7d7vbQ= Subject key identifier: 2F:73:01:6D:AC:ED:EC:52:33:49:5B:39:AE:FE:E7:BE:C7:F9:2E:F0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6878D4561119BA5144F400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 202 IP address blocks: 130.174.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:78:d4:56:11:19:ba:51:44:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=3d793503-c2c8-4f75-82b8-2809f7f5d410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:69:a1:bf:f3:fe:b9:47:28:8a:1a:5a:5e: 9c:0e:e6:99:3b:5e:f9:aa:3d:fa:cf:ef:3f:56:d2: a3:82:fc:19:19:b4:8e:19:ff:cf:95:65:d5:b9:f2: 16:4e:2a:5f:19:62:65:f7:5f:bf:53:05:7b:ef:4e: cb:e9:e5:2e:99:5f:2c:1d:0a:75:c6:bb:45:65:61: 4e:67:bc:83:86:39:f9:97:5e:57:fa:04:c6:c4:98: cc:29:73:de:6d:85:09:d7:32:64:3c:61:c2:1c:24: b4:55:6b:91:3c:1e:0d:11:a2:f1:7b:46:92:8c:a7: 14:7d:cf:e0:8e:bf:a8:a2:e1:ca:a1:b5:34:62:b6: 82:de:ae:ff:6a:8c:79:0e:43:f8:4e:b0:d3:93:c0: 50:2f:fc:68:d6:6a:58:da:3d:21:0a:3a:12:15:6c: 82:27:ca:2d:3f:27:19:f4:86:e2:b3:c9:34:be:aa: 67:ef:1f:6e:df:71:77:6a:5f:ec:62:fd:33:de:76: 85:93:42:61:fd:8a:0a:a1:35:37:00:e4:7b:35:15: 9a:2f:a6:21:38:62:25:b0:29:77:d8:ff:b9:6d:82: 12:4a:9d:63:b7:40:d2:df:48:d6:10:88:75:3b:98: fa:22:c0:f8:f0:2a:82:ac:ac:cf:10:83:02:04:8d: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:73:01:6D:AC:ED:EC:52:33:49:5B:39:AE:FE:E7:BE:C7:F9:2E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2afb0ad9-4f76-3231-9716-3c8199667252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:4c:cc:90:1b:ab:33:6c:13:7e:38:ce:ba:69:d4:79:85: e9:d8:c0:7e:b9:7c:a3:64:33:b6:9c:fb:50:02:b0:23:e8:9f: 01:4e:95:f7:f1:35:b2:63:72:31:a0:18:a4:ab:a5:79:63:1b: 6e:e1:9f:f7:d0:94:1b:29:d1:e3:58:b5:bc:d0:21:b9:5b:a3: c4:90:7c:5b:79:56:d3:e6:cb:b7:56:3e:c5:5c:1b:8e:0b:54: f0:71:54:0f:2a:39:31:97:f3:5b:2b:49:74:cb:58:89:cf:e8: 2f:f0:c8:5b:d4:04:fd:11:b6:fe:6f:d8:3a:f6:8b:ff:2c:8b: b5:f4:3c:7f:0a:e4:ef:30:d4:2b:22:e7:09:37:1d:55:d5:3b: 03:08:94:2b:0a:b7:93:b4:4d:4c:dc:32:98:30:c1:dd:1d:dd: 0b:54:d6:29:48:dd:55:e5:3a:28:50:71:12:14:91:a5:0c:df: 8d:5f:b4:74:0f:85:14:e5:53:41:b3:00:2c:b4:99:ac:62:a7: af:31:1d:01:01:72:cc:25:df:47:f5:12:46:6c:f1:0d:03:59: 8c:df:35:f4:00:cc:9b:23:e5:67:e2:ce:77:f3:88:30:84:0f: 1a:91:a7:5f:23:83:20:b4:41:ee:08:14:a5:0e:41:c7:e6:5a: 45:f5:14:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHjUVhEZulFE9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2Q3OTM1MDMtYzJjOC00Zjc1LTgyYjgtMjgwOWY3ZjVkNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmORpob/z/rlHKIoaWl6cDuaZO175qj36z+8/ VtKjgvwZGbSOGf/PlWXVufIWTipfGWJl91+/UwV7707L6eUumV8sHQp1xrtFZWFO Z7yDhjn5l15X+gTGxJjMKXPebYUJ1zJkPGHCHCS0VWuRPB4NEaLxe0aSjKcUfc/g jr+oouHKobU0YraC3q7/aox5DkP4TrDTk8BQL/xo1mpY2j0hCjoSFWyCJ8otPycZ 9Ibis8k0vqpn7x9u33F3al/sYv0z3naFk0Jh/YoKoTU3AOR7NRWaL6YhOGIlsCl3 2P+5bYISSp1jt0DS30jWEIh1O5j6IsD48CqCrKzPEIMCBI2Y7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9zAW2s7exSM0lbOa7+577H+S7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmFmYjBhZDktNGY3Ni0z MjMxLTk3MTYtM2M4MTk5NjY3MjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzxTMyQG6szbBN+OM66adR5henYwH65fKNkM7ac+1ACsCPonwFOlffx NbJjcjGgGKSrpXljG27hn/fQlBsp0eNYtbzQIblbo8SQfFt5VtPmy7dWPsVcG44L VPBxVA8qOTGX81srSXTLWInP6C/wyFvUBP0Rtv5v2Dr2i/8si7X0PH8K5O8w1Csi 5wk3HVXVOwMIlCsKt5O0TUzcMpgwwd0d3QtU1ilI3VXlOihQcRIUkaUM341ftHQP hRTlU0GzACy0maxip68xHQEBcswl30f1EkZs8Q0DWYzfNfQAzJsj5WfiznfziDCE DxqRp18jgyC0Qe4IFKUOQcfmWkX1FIg= -----END CERTIFICATE-----Generated at Sun Oct 25 06:04:14 2026 by rpki-client