$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa File: 3d36052d-40ea-30a5-8713-93136b44d55b.roa (raw, json) Hash identifier: iBjet8a701HvWX1fdEPXzVa6J6q0zQ6Tx6Xx5+E3eMk= Subject key identifier: CA:98:BD:0F:F6:EB:40:83:12:26:6A:4B:0D:43:8C:FC:CF:8B:FC:43 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E5619F68D7CDBF909B0979620 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 3360 IP address blocks: 130.174.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 01 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f6:8d:7c:db:f9:09:b0:97:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=0e565074-47b8-4a24-ba14-2f286243e8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:ad:c1:bd:87:62:a8:1b:27:4c:1d:87:16: 15:73:20:16:4c:5a:4b:5e:4f:ee:de:42:58:76:b0: 94:1b:4f:24:f6:7e:c0:1f:49:36:68:ec:de:58:1d: 69:3e:19:c0:27:86:68:a8:43:8e:3b:15:a3:d7:61: 94:dc:51:ff:e6:0d:18:a3:ab:3c:73:a1:11:3d:a9: 51:fa:81:25:f5:b7:b9:e4:4c:3d:4f:b4:ae:79:a2: 5e:e1:06:40:b1:bf:5e:ab:36:47:da:dd:3d:c7:d8: 70:a3:a9:e3:cf:7a:76:c0:f2:ca:63:e0:c1:f6:72: 8e:f6:2e:ef:10:f2:81:6e:a0:c8:83:49:4a:5b:a9: a1:e3:79:c8:90:7c:79:5e:0b:03:5e:f0:21:3b:67: b6:d5:f3:1e:84:b8:1f:d9:5c:26:dc:d5:f4:c7:40: 0a:b2:0d:49:34:47:31:3e:11:5f:e0:96:da:d8:ca: 30:86:59:7d:f9:b6:1a:20:58:98:55:d4:ea:c0:13: b0:39:13:5a:a3:50:45:6f:9e:13:a6:00:45:43:57: bc:51:cd:39:de:77:e2:d3:c6:0d:5b:8d:62:1f:aa: e1:1b:5a:e5:2d:5a:28:a8:c0:df:fe:f2:6f:ff:6a: 9e:00:c0:95:ca:bc:79:e8:e7:a7:cb:f8:d0:cd:c6: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:98:BD:0F:F6:EB:40:83:12:26:6A:4B:0D:43:8C:FC:CF:8B:FC:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3d36052d-40ea-30a5-8713-93136b44d55b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c9:e2:82:65:f5:90:f6:c6:58:6c:c1:bb:c9:c0:f7:8d:36: 4e:e8:c7:c9:59:51:0b:a1:07:75:b7:29:9f:dc:da:5e:2a:d1: 74:4c:1b:c2:71:0b:11:d4:12:7b:1d:45:07:e7:26:27:ed:2d: a0:ed:72:97:77:e8:7b:19:84:42:26:30:7a:0e:4b:5b:00:de: 17:57:66:78:09:dc:b8:60:de:36:78:41:0e:58:1a:45:e9:b7: c8:78:51:de:b3:94:68:a7:8c:e8:7e:47:cf:a9:ff:73:d1:c6: 8c:25:c1:50:9e:41:d1:f5:ab:e0:79:e4:29:cf:2b:1e:32:f0: db:65:8f:dd:08:59:b9:f6:22:5a:c0:a6:5f:2c:d4:ba:43:83: 3a:f9:b9:14:7a:d5:67:38:9a:69:c1:3a:3a:4b:66:17:b7:86: d2:f5:39:28:6e:b6:2d:98:29:e2:a4:c9:ed:ac:15:2d:04:d6: 71:da:db:63:55:6e:38:69:04:e0:c7:77:70:6c:8b:bd:6c:e3: 21:9a:59:53:7c:b6:45:29:c1:8d:55:fb:33:59:41:15:4c:81: ad:bf:d0:81:e2:fa:01:40:7e:b9:2c:6d:dd:71:f2:b4:38:eb: 2a:b9:d8:59:37:89:7a:64:76:d8:34:32:61:f3:b7:dc:1e:b2: 0e:ea:6f:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfaNfNv5CbCXliAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk MGU1NjUwNzQtNDdiOC00YTI0LWJhMTQtMmYyODYyNDNlOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOytwb2HYqgbJ0wdhxYVcyAWTFpLXk/u3kJY drCUG08k9n7AH0k2aOzeWB1pPhnAJ4ZoqEOOOxWj12GU3FH/5g0Yo6s8c6ERPalR +oEl9be55Ew9T7SueaJe4QZAsb9eqzZH2t09x9hwo6njz3p2wPLKY+DB9nKO9i7v EPKBbqDIg0lKW6mh43nIkHx5XgsDXvAhO2e21fMehLgf2Vwm3NX0x0AKsg1JNEcx PhFf4Jba2Mowhll9+bYaIFiYVdTqwBOwORNao1BFb54TpgBFQ1e8Uc053nfi08YN W41iH6rhG1rlLVooqMDf/vJv/2qeAMCVyrx56Oeny/jQzcbfuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqYvQ/260CDEiZqSw1DjPzPi/xDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2QzNjA1MmQtNDBlYS0z MGE1LTg3MTMtOTMxMzZiNDRkNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArJ4oJl9ZD2xlhswbvJwPeNNk7ox8lZUQuhB3W3KZ/c2l4q0XRMG8Jx CxHUEnsdRQfnJiftLaDtcpd36HsZhEImMHoOS1sA3hdXZngJ3Lhg3jZ4QQ5YGkXp t8h4Ud6zlGinjOh+R8+p/3PRxowlwVCeQdH1q+B55CnPKx4y8Ntlj90IWbn2IlrA pl8s1LpDgzr5uRR61Wc4mmnBOjpLZhe3htL1OShuti2YKeKkye2sFS0E1nHa22NV bjhpBODHd3Bsi71s4yGaWVN8tkUpwY1V+zNZQRVMga2/0IHi+gFAfrksbd1x8rQ4 6yq52Fk3iXpkdtg0MmHzt9wesg7qb0U= -----END CERTIFICATE-----Generated at Tue Jun 30 07:04:02 2026 by rpki-client