$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa File: 3c184705-67ad-30da-934d-a10dc3813f2d.roa (raw, json) Hash identifier: ocYBq+7w6sFVRhzcBnbTzHjBPS+sOoRgRpYXLTx0SPc= Subject key identifier: 44:5E:DE:AA:E1:E2:DD:14:39:D4:15:0D:26:3A:92:11:E2:D5:41:02 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDC919E079E65C31C0ED80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 130.174.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c9:19:e0:79:e6:5c:31:c0:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=eac95d9e-a810-4e05-b64d-7ff54c71d2e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:58:9b:c5:93:f1:1a:7a:dc:b0:1e:52:b7: a3:e7:e4:2b:e6:07:af:8b:b1:2f:4b:bb:0e:ed:7a: a9:5b:5a:dd:6a:85:a0:6e:13:12:f9:56:04:f6:c6: ab:df:6f:a2:b1:e1:b5:8f:22:c7:0a:21:29:80:f1: 63:45:40:97:a6:62:18:6f:db:f9:9e:44:f4:1b:bc: 5c:98:a0:b7:21:ae:69:5c:c3:44:1e:5a:bd:dc:89: ca:fc:7c:47:23:85:27:ba:66:97:22:0b:ed:95:25: c5:3e:41:74:79:97:76:bb:63:84:ec:7e:19:96:40: c7:f6:50:73:15:63:aa:3d:08:c2:fb:89:4a:01:b6: db:f3:e4:f0:59:13:7f:79:f5:a3:2a:d7:a4:01:e5: 55:5a:2f:d5:71:20:1f:a4:9c:af:ab:41:d2:d8:98: 36:16:80:22:16:69:5e:be:cc:03:c9:4d:f2:fa:c0: b3:58:db:f6:35:c7:5e:49:10:7c:20:40:3a:c2:9d: 97:ed:13:26:8a:fc:70:3a:09:49:f1:5c:fa:e6:66: 94:10:74:2d:e6:d0:a3:14:6c:70:04:15:36:5c:74: 52:e2:af:ac:56:95:47:a9:3d:76:bb:1e:c3:b1:65: ca:34:27:1f:19:24:59:0c:34:32:b1:a1:ad:15:d1: ce:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5E:DE:AA:E1:E2:DD:14:39:D4:15:0D:26:3A:92:11:E2:D5:41:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3c184705-67ad-30da-934d-a10dc3813f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:51:b5:5f:5f:70:01:b2:39:11:84:6d:62:71:dc:71:10:49: 28:4b:a9:f7:e7:83:59:33:28:0f:6e:7e:42:52:af:f1:62:cc: c3:ee:be:fa:9e:5b:af:74:f0:82:67:7f:3f:ec:04:61:84:4f: aa:cd:14:47:8f:88:1e:7c:67:70:f2:0b:9e:f2:fd:a7:71:18: fb:c6:0b:15:46:6a:3d:77:ba:ed:a2:7c:e1:dc:9f:4e:e2:aa: fa:04:e9:55:b4:0a:96:bc:ee:0a:8b:f1:20:d6:6c:a7:88:b4: 8f:88:ea:e6:ff:09:ee:50:72:fb:cd:f0:60:49:92:75:78:ac: 21:a9:b9:c8:a3:ce:2e:3b:82:9c:cd:13:23:4b:4d:2b:8a:cc: ea:ce:07:a1:4c:60:5e:cc:de:cc:83:a5:03:74:54:0c:9b:af: bd:06:d6:dd:b9:59:a2:25:bd:7f:39:e5:0f:75:34:51:65:4a: 82:1c:0d:a7:b4:03:8a:c7:bb:a3:64:cc:fa:3a:d7:9a:38:42: 36:a1:f0:6a:b3:70:a6:4d:e0:98:17:bf:d1:25:1b:d0:80:06: e6:3f:76:1f:13:82:be:00:af:a2:0d:6e:83:fd:9f:e4:61:13: e5:f5:6a:d9:89:f8:69:b9:49:96:59:54:27:7f:c6:21:16:6e: c2:f8:a6:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzckZ4HnmXDHA7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZWFjOTVkOWUtYTgxMC00ZTA1LWI2NGQtN2ZmNTRjNzFkMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH5Ym8WT8Rp63LAeUrej5+Qr5gevi7EvS7sO 7XqpW1rdaoWgbhMS+VYE9sar32+iseG1jyLHCiEpgPFjRUCXpmIYb9v5nkT0G7xc mKC3Ia5pXMNEHlq93InK/HxHI4UnumaXIgvtlSXFPkF0eZd2u2OE7H4ZlkDH9lBz FWOqPQjC+4lKAbbb8+TwWRN/efWjKtekAeVVWi/VcSAfpJyvq0HS2Jg2FoAiFmle vswDyU3y+sCzWNv2NcdeSRB8IEA6wp2X7RMmivxwOglJ8Vz65maUEHQt5tCjFGxw BBU2XHRS4q+sVpVHqT12ux7DsWXKNCcfGSRZDDQysaGtFdHOywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERe3qrh4t0UOdQVDSY6khHi1UECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2MxODQ3MDUtNjdhZC0z MGRhLTkzNGQtYTEwZGMzODEzZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERRtV9fcAGyORGEbWJx3HEQSShLqffng1kzKA9ufkJSr/FizMPuvvqe W6908IJnfz/sBGGET6rNFEePiB58Z3DyC57y/adxGPvGCxVGaj13uu2ifOHcn07i qvoE6VW0Cpa87gqL8SDWbKeItI+I6ub/Ce5QcvvN8GBJknV4rCGpucijzi47gpzN EyNLTSuKzOrOB6FMYF7M3syDpQN0VAybr70G1t25WaIlvX855Q91NFFlSoIcDae0 A4rHu6NkzPo615o4Qjah8GqzcKZN4JgXv9ElG9CABuY/dh8Tgr4Ar6INboP9n+Rh E+X1atmJ+Gm5SZZZVCd/xiEWbsL4ptY= -----END CERTIFICATE-----Generated at Wed Oct 28 10:08:57 2026 by rpki-client