$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/345e5378-7080-308e-a91a-a770b6ecf762.roa File: 345e5378-7080-308e-a91a-a770b6ecf762.roa (raw, json) Hash identifier: AvNXnWgfNnydrxPEKd7FVv+i85MzhVv/iLZTsJzImgk= Subject key identifier: 3E:41:8B:AD:D4:53:44:82:91:20:20:E0:9C:B0:D3:7B:04:0A:49:16 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177722BC658745C13EA970 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/345e5378-7080-308e-a91a-a770b6ecf762.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 130.174.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:77:22:bc:65:87:45:c1:3e:a9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=b7e2c61c-5360-4a75-a842-b09b74e2e1bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:48:c1:53:08:c8:00:e6:b0:e7:28:11:1b: cc:a2:40:3f:f8:de:cf:cf:9e:bc:7b:72:17:0d:c7: 42:73:f4:39:2c:96:7d:fb:3c:a1:fd:95:11:b4:5e: 64:97:b1:67:a6:40:ed:64:25:36:2c:56:41:ab:93: 58:54:c6:57:b9:54:41:26:bc:7f:7f:17:4f:14:fa: f5:23:77:80:c4:8b:5e:56:27:1d:60:a3:79:40:ac: 78:e8:01:f4:c8:24:29:3a:75:9f:7b:ec:04:ac:bb: 4f:ed:0f:41:04:3c:a2:d3:ca:b3:6c:01:2c:0d:80: cc:55:3a:c3:89:79:85:16:3c:0e:8e:24:41:85:82: 78:b3:be:37:8d:74:d8:cc:19:7d:84:16:2e:e9:78: 2a:30:0e:4d:1e:eb:b3:b9:af:c6:47:5a:bc:dd:db: b3:e8:6b:49:2c:84:44:9d:93:1c:1c:60:fb:f0:6c: 6e:07:22:47:56:fc:17:f3:ab:c7:5a:00:a5:2c:d9: 1c:5e:27:55:eb:be:20:a8:92:21:22:43:a4:1a:38: 04:46:a5:61:c4:74:80:fd:cb:bd:a8:82:cb:64:8d: b5:7c:71:59:46:03:b1:84:a4:d7:37:be:0b:02:86: 76:82:b2:88:1f:b9:1b:72:fc:8c:e7:90:d1:04:e9: 00:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:41:8B:AD:D4:53:44:82:91:20:20:E0:9C:B0:D3:7B:04:0A:49:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/345e5378-7080-308e-a91a-a770b6ecf762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fa:7e:b1:6d:d0:c0:02:5d:e3:19:ec:b1:bd:9e:f6:e2:05: f0:56:74:d3:9c:9a:5f:e7:34:05:8d:d3:7a:c4:61:17:79:ba: ce:75:e9:cd:b3:77:88:b5:0e:4c:ab:96:41:49:7e:2b:b4:7c: 4d:1d:e2:a3:c8:33:07:a3:39:d9:01:99:d0:e0:a1:d9:2d:c6: 2b:e6:c3:e6:1e:7d:63:df:89:ca:b9:5a:af:87:47:96:6c:1e: 6a:e7:06:e0:ff:06:b4:f9:b9:d8:67:8e:05:9a:bd:7e:ec:23: ec:56:09:0f:6e:11:17:5f:7d:2b:da:39:fd:6a:08:3d:66:af: 1d:13:6e:c4:5b:f0:3d:48:df:29:1b:cd:7b:ba:0e:89:e0:0d: ff:11:8d:1c:34:05:9e:fc:99:58:5f:3b:ce:72:5a:e1:f5:52: 6b:47:d4:67:d3:b5:44:be:12:2e:a3:bc:33:b4:f2:cb:e3:2b: 90:f5:fd:60:b2:b4:53:87:49:43:ad:05:2e:15:18:1f:b6:b7: 60:3e:d6:c3:10:fd:2d:f7:e3:c7:23:01:9b:6a:d0:5f:09:d9: 4b:de:c7:71:13:7c:b0:cb:fa:08:0f:82:6d:09:37:10:15:cf: 3d:32:e8:a1:b9:45:da:5f:5c:75:b6:c5:bb:78:ae:a2:44:7d: 6a:93:16:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3civGWHRcE+qXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YjdlMmM2MWMtNTM2MC00YTc1LWE4NDItYjA5Yjc0ZTJlMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl45IwVMIyADmsOcoERvMokA/+N7Pz568e3IX DcdCc/Q5LJZ9+zyh/ZURtF5kl7FnpkDtZCU2LFZBq5NYVMZXuVRBJrx/fxdPFPr1 I3eAxIteVicdYKN5QKx46AH0yCQpOnWfe+wErLtP7Q9BBDyi08qzbAEsDYDMVTrD iXmFFjwOjiRBhYJ4s743jXTYzBl9hBYu6XgqMA5NHuuzua/GR1q83duz6GtJLIRE nZMcHGD78GxuByJHVvwX86vHWgClLNkcXidV674gqJIhIkOkGjgERqVhxHSA/cu9 qILLZI21fHFZRgOxhKTXN74LAoZ2grKIH7kbcvyM55DRBOkAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5Bi63UU0SCkSAg4Jyw03sECkkWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ1ZTUzNzgtNzA4MC0z MDhlLWE5MWEtYTc3MGI2ZWNmNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT6frFt0MACXeMZ7LG9nvbiBfBWdNOcml/nNAWN03rEYRd5us516c2z d4i1DkyrlkFJfiu0fE0d4qPIMwejOdkBmdDgodktxivmw+YefWPficq5Wq+HR5Zs HmrnBuD/BrT5udhnjgWavX7sI+xWCQ9uERdffSvaOf1qCD1mrx0TbsRb8D1I3ykb zXu6DongDf8RjRw0BZ78mVhfO85yWuH1UmtH1GfTtUS+Ei6jvDO08svjK5D1/WCy tFOHSUOtBS4VGB+2t2A+1sMQ/S3348cjAZtq0F8J2Uvex3ETfLDL+ggPgm0JNxAV zz0y6KG5RdpfXHW2xbt4rqJEfWqTFjg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:40:35 2026 by rpki-client