$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa File: 38d06ae0-9690-34fa-a93a-db5e0debc30a.roa (raw, json) Hash identifier: XQNhV/5F5ND4S0u7WQoFLiKoQpPnGuvITLDrBsQZwJM= Subject key identifier: A1:A0:F9:B7:9B:6D:61:B4:0B:6B:A7:8F:F9:77:DE:F7:CF:98:2A:DE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF717724612BC0D6BF3EB0C70 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:72:46:12:bc:0d:6b:f3:eb:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=cdfa6f9b-74be-4b6e-a745-8744c3dd0c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:38:9a:c0:5b:66:80:a8:bb:16:6e:ee:83: 3c:e3:e6:88:5f:44:8a:f7:84:7f:c2:e4:9d:74:a4: 0c:a6:f5:7f:58:fe:3b:72:6c:6d:be:b7:ae:7c:02: 69:17:f1:3c:29:a7:ac:cc:b2:fe:04:c2:c3:5d:a6: 82:ba:ec:15:41:a9:86:ae:31:45:52:4c:36:ce:76: 59:98:21:33:58:46:d5:c1:89:3a:9f:bc:82:12:1d: b0:0a:9b:55:52:89:16:d9:61:0d:68:d9:6b:dc:e5: d0:eb:ba:cf:1e:07:cf:cb:70:57:16:3c:40:a8:70: c8:5d:e4:3c:a0:b8:34:37:74:12:a7:6a:0a:60:95: b1:6a:cc:3b:a0:91:c2:cf:75:6e:90:07:6a:1b:54: 74:7d:2a:85:cf:69:05:cf:31:37:57:4d:99:7d:4e: 13:ee:7c:aa:7d:81:f6:80:c9:04:f6:6f:1a:2b:77: 16:d2:49:40:3e:95:ba:5b:63:7b:f1:75:0b:a7:22: 14:b4:0e:4c:a6:31:ca:5f:b4:e8:1e:c7:c0:4b:ba: c2:82:49:d4:79:03:56:95:1d:19:b4:11:c9:e2:a4: 16:61:65:1a:63:4a:45:ac:71:0b:0e:ff:68:a7:2a: 73:ad:ff:87:ba:22:b0:3a:d4:5d:8b:11:0d:4b:8b: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:F9:B7:9B:6D:61:B4:0B:6B:A7:8F:F9:77:DE:F7:CF:98:2A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c7:08:39:67:3a:7e:3b:96:71:1f:ef:98:0a:a2:82:2f:22: c6:f7:35:13:ef:47:30:6c:5d:aa:d0:9e:cb:6c:aa:79:4c:e3: fc:d1:ac:69:2f:79:f7:95:a7:e7:d2:e3:7b:a2:9f:14:8a:c0: 62:4e:1c:ba:fe:3d:3c:f8:81:23:14:bb:f7:7d:a7:7d:53:e6: e1:cc:85:77:1f:90:c7:a5:68:29:02:f6:1e:98:93:4e:a8:53: 22:6b:48:1f:ca:25:56:cd:fd:3a:7c:07:0b:b8:b5:02:72:98: f6:d5:57:00:f3:d3:ce:32:58:c7:54:1a:19:15:10:80:42:c1: 31:6e:21:6e:c6:6b:7a:31:fb:48:77:7c:05:0a:df:25:9c:e7: 03:30:35:d6:42:2c:1e:a6:ad:40:49:c4:91:c1:85:be:4d:e0: 40:69:aa:fe:72:0b:44:16:88:e2:67:a5:ec:15:7f:54:4a:f0: 90:b3:33:84:a8:85:d5:ac:cb:ec:5f:b4:01:e2:7b:2a:5a:82: 5d:24:bc:fe:2a:5b:7c:81:c7:cc:04:55:97:52:b7:1f:71:05: ec:a2:3d:f9:b8:56:89:2e:03:a0:ce:3c:b0:69:be:99:ef:4b: 32:63:12:75:77:9f:7b:62:7e:ad:e4:fe:62:2d:7a:a8:4d:5d: a8:d5:95:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3JGErwNa/PrDHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2RmYTZmOWItNzRiZS00YjZlLWE3NDUtODc0NGMzZGQwYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m44msBbZoCouxZu7oM84+aIX0SK94R/wuSd dKQMpvV/WP47cmxtvreufAJpF/E8KaeszLL+BMLDXaaCuuwVQamGrjFFUkw2znZZ mCEzWEbVwYk6n7yCEh2wCptVUokW2WENaNlr3OXQ67rPHgfPy3BXFjxAqHDIXeQ8 oLg0N3QSp2oKYJWxasw7oJHCz3VukAdqG1R0fSqFz2kFzzE3V02ZfU4T7nyqfYH2 gMkE9m8aK3cW0klAPpW6W2N78XULpyIUtA5MpjHKX7ToHsfAS7rCgknUeQNWlR0Z tBHJ4qQWYWUaY0pFrHELDv9opypzrf+HuiKwOtRdixENS4v6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGg+bebbWG0C2unj/l33vfPmCreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhkMDZhZTAtOTY5MC0z NGZhLWE5M2EtZGI1ZTBkZWJjMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnHCDlnOn47lnEf75gKooIvIsb3NRPvRzBsXarQnstsqnlM4/zRrGkv efeVp+fS43uinxSKwGJOHLr+PTz4gSMUu/d9p31T5uHMhXcfkMelaCkC9h6Yk06o UyJrSB/KJVbN/Tp8Bwu4tQJymPbVVwDz084yWMdUGhkVEIBCwTFuIW7Ga3ox+0h3 fAUK3yWc5wMwNdZCLB6mrUBJxJHBhb5N4EBpqv5yC0QWiOJnpewVf1RK8JCzM4So hdWsy+xftAHieypagl0kvP4qW3yBx8wEVZdStx9xBeyiPfm4VokuA6DOPLBpvpnv SzJjEnV3n3tifq3k/mIteqhNXajVlUI= -----END CERTIFICATE-----Generated at Tue Sep 22 18:20:57 2026 by rpki-client