$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36075ad5-a87e-32d6-958e-d945a460faa2.roa File: 36075ad5-a87e-32d6-958e-d945a460faa2.roa (raw, json) Hash identifier: gR4wrkEO62QnyqsPXc89vwbK2vbTCyOJgtwxwHKAuW0= Subject key identifier: F3:8B:05:DA:75:78:E5:0D:D3:D1:F5:8B:D0:93:F4:C1:83:8C:32:0B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CC7B6EE58F6DACC7A1600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36075ad5-a87e-32d6-958e-d945a460faa2.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 130.174.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c7:b6:ee:58:f6:da:cc:7a:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=8d85f497-5759-4fc0-b897-2ea5421e2910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:45:8f:e6:1d:7c:12:74:f9:79:57:44:69: ec:99:46:84:2c:88:a6:1e:c6:b2:a5:e3:00:11:8c: 51:37:0c:78:2d:23:1d:d9:5e:f4:e7:70:05:af:e2: b1:98:58:4a:46:b1:09:80:d8:11:a6:ed:bb:1e:8d: 53:84:91:2c:f9:22:6f:8c:0a:15:e8:7c:86:8b:1f: 47:f9:2c:26:be:48:1d:0f:fd:d1:fe:b4:73:03:90: 03:2a:bc:b2:94:ad:53:0f:5e:29:a7:43:52:18:2a: 1e:a0:1b:35:f2:02:5a:7d:51:14:14:e9:24:f8:45: 73:0c:c0:34:fc:0b:e2:f4:41:e7:4e:13:08:86:43: dc:44:ba:59:08:b2:8a:b8:5b:8f:53:fe:0e:53:0f: 42:bd:43:4d:a7:b3:4c:32:23:5a:4e:07:2c:44:c5: f2:79:c1:c0:05:8a:99:3e:ee:87:60:51:ca:76:77: 39:df:5b:3b:98:d4:6f:e8:63:b7:3d:96:18:0f:e7: 20:94:56:18:c7:bb:28:71:48:c3:82:bf:b5:24:00: 9a:c8:f0:c7:02:6b:a3:37:e1:f9:8b:b0:cf:64:24: fa:4f:69:ff:d8:ff:c0:3e:63:26:9c:1d:fd:3e:de: 00:30:42:5e:b8:59:c1:28:41:3b:e9:b3:bb:80:b2: 14:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:05:DA:75:78:E5:0D:D3:D1:F5:8B:D0:93:F4:C1:83:8C:32:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/36075ad5-a87e-32d6-958e-d945a460faa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:93:d5:9d:a0:1b:47:d4:ed:30:6c:fd:ca:cc:9b:23:0c:30: 26:4f:e8:7c:fd:70:55:5d:9f:64:4e:88:71:ff:23:32:a5:13: f9:88:e1:5d:e1:b8:78:aa:c6:48:ff:2b:a6:f5:ed:d4:25:f9: f2:c0:62:dd:cb:b5:d8:7c:59:03:0a:fa:5a:7c:00:a8:63:69: 40:ac:97:1c:4d:4e:d6:77:07:20:4b:63:09:7d:5f:50:e9:02: 31:ce:8b:b1:3f:5a:05:69:62:1a:55:8d:e6:d8:e9:46:a1:24: 75:75:47:7e:50:34:46:2b:46:5c:4d:08:51:ae:14:df:7e:51: 32:4e:6d:de:0d:8e:f8:ff:9f:15:2c:4b:d3:19:87:21:f7:2d: bb:8b:c0:4f:0b:f0:a0:94:9e:e6:83:50:83:8f:5d:e1:35:31: 5f:85:7e:27:44:3b:3c:2c:f4:d5:a4:f5:ff:b1:9c:ac:44:63: 34:f2:08:93:af:82:82:3a:25:ab:54:49:39:d6:7d:d8:0c:35: 82:fb:ce:30:a0:30:72:bc:47:d5:3b:a9:81:7f:96:13:1a:db: 78:4c:1e:26:f1:c6:94:46:e8:14:2d:08:84:f4:f8:5b:33:38: 52:40:cc:d1:71:53:b6:89:9f:67:00:c4:a0:46:d6:42:4c:db: ce:63:9c:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMe27lj22sx6FgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OGQ4NWY0OTctNTc1OS00ZmMwLWI4OTctMmVhNTQyMWUyOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1xFj+YdfBJ0+XlXRGnsmUaELIimHsaypeMA EYxRNwx4LSMd2V7053AFr+KxmFhKRrEJgNgRpu27Ho1ThJEs+SJvjAoV6HyGix9H +SwmvkgdD/3R/rRzA5ADKryylK1TD14pp0NSGCoeoBs18gJafVEUFOkk+EVzDMA0 /Avi9EHnThMIhkPcRLpZCLKKuFuPU/4OUw9CvUNNp7NMMiNaTgcsRMXyecHABYqZ Pu6HYFHKdnc531s7mNRv6GO3PZYYD+cglFYYx7socUjDgr+1JACayPDHAmujN+H5 i7DPZCT6T2n/2P/APmMmnB39Pt4AMEJeuFnBKEE76bO7gLIUqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOLBdp1eOUN09H1i9CT9MGDjDILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzYwNzVhZDUtYTg3ZS0z MmQ2LTk1OGUtZDk0NWE0NjBmYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqT1Z2gG0fU7TBs/crMmyMMMCZP6Hz9cFVdn2ROiHH/IzKlE/mI4V3h uHiqxkj/K6b17dQl+fLAYt3Ltdh8WQMK+lp8AKhjaUCslxxNTtZ3ByBLYwl9X1Dp AjHOi7E/WgVpYhpVjebY6UahJHV1R35QNEYrRlxNCFGuFN9+UTJObd4Njvj/nxUs S9MZhyH3LbuLwE8L8KCUnuaDUIOPXeE1MV+FfidEOzws9NWk9f+xnKxEYzTyCJOv goI6JatUSTnWfdgMNYL7zjCgMHK8R9U7qYF/lhMa23hMHibxxpRG6BQtCIT0+Fsz OFJAzNFxU7aJn2cAxKBG1kJM285jnAk= -----END CERTIFICATE-----Generated at Wed Sep 9 00:50:29 2026 by rpki-client