$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/658dd7c7-3487-37ff-91a1-0786f9371a4b.roa File: 658dd7c7-3487-37ff-91a1-0786f9371a4b.roa (raw, json) Hash identifier: bIhGB+Zs1whrB71PFqviRvE3NUeKGvAzm3CWf0JOZcs= Subject key identifier: C1:06:7D:22:08:32:78:9F:10:67:BE:2D:B7:DF:CE:5B:1D:16:61:34 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B715C9DC1FFEC07017C23EC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/658dd7c7-3487-37ff-91a1-0786f9371a4b.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 3360 IP address blocks: 130.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:9d:c1:ff:ec:07:01:7c:23:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=d70995e6-f116-4b7b-8585-55e62961c1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:ac:f4:35:80:7e:54:76:f5:1b:9a:50:ea: 89:1b:e5:e2:1c:cb:ac:b7:ec:57:5c:b8:33:d1:4d: 80:61:a6:60:0a:aa:35:39:d3:8c:c7:ea:4c:f4:49: 37:ec:ac:36:4c:79:51:77:4f:9e:6d:f6:ad:7c:dd: bf:b5:81:28:e4:4a:52:70:18:01:27:17:4a:c6:bd: f8:69:bf:d1:13:02:b0:15:8e:ee:2d:d3:a9:36:40: 1e:69:6c:e9:fd:38:04:eb:7e:91:b3:0c:d1:ce:1f: 76:0c:6c:cc:a6:7b:a9:e4:63:82:30:7b:e9:22:a3: cb:2c:01:07:e2:2a:db:e0:06:ef:3c:ae:17:a1:f0: 79:7c:4b:13:eb:bd:53:17:ae:33:37:3d:55:a2:9a: 52:8c:71:51:2c:ac:d0:88:a9:ab:cb:ac:82:6e:f7: 5c:13:42:40:4a:a0:4b:04:06:cd:60:d9:97:77:60: 9e:e1:eb:69:e0:dc:0b:c4:15:32:d3:82:74:96:8d: 0e:a7:7e:c0:78:ae:50:3b:4b:1c:8f:ed:65:d7:91: e7:b4:cc:a1:4b:09:99:aa:db:2f:49:a9:e7:7d:a1: 6b:bd:35:4d:8f:db:e6:a1:f1:90:15:7e:be:a7:36: 85:79:a7:b5:9c:06:02:2b:4b:1f:c2:ed:f2:43:a1: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:06:7D:22:08:32:78:9F:10:67:BE:2D:B7:DF:CE:5B:1D:16:61:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/658dd7c7-3487-37ff-91a1-0786f9371a4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:68:00:c7:cd:e3:15:a7:d7:53:4a:74:1e:0c:e5:ff:eb:ca: ff:34:2e:43:a4:48:3f:7e:44:f0:b6:22:c6:15:2a:f6:5d:af: 90:9a:91:66:31:ba:3e:25:92:0e:78:ba:cd:3f:fb:43:81:15: c0:f9:27:fa:11:65:4e:d4:1d:28:58:bd:65:41:13:b8:e9:7a: ac:4b:9b:e1:87:34:94:e3:99:7c:85:95:76:60:01:ed:44:07: bf:ea:10:ba:8e:1b:46:bd:06:76:e2:a6:03:d6:62:0d:92:19: c4:48:1f:1e:ab:60:5d:35:ef:19:b5:22:98:1e:42:97:d6:52: 28:4b:35:2e:8b:9d:57:33:2a:3f:da:2c:02:29:91:6c:04:54: 9c:77:d6:8d:bf:b1:ec:2b:27:f6:96:27:50:8b:cc:46:46:01: 9a:ed:91:c0:b2:e4:af:eb:03:b2:9c:84:ae:a4:2c:6f:f3:2e: c4:c2:59:31:99:37:d1:29:c0:03:c2:ba:c4:3f:6a:0f:6e:c3: 8a:1d:8f:12:26:cd:a1:95:e3:f9:6c:5a:56:e4:b1:d8:1e:55: b8:3b:d4:dc:11:0b:9e:0d:5d:ac:54:87:b8:ec:e7:e8:8c:43: b4:67:04:c2:d7:23:f4:23:bc:55:79:b7:b4:26:b8:27:5a:e3: 58:e2:9a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXJ3B/+wHAXwj7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZDcwOTk1ZTYtZjExNi00YjdiLTg1ODUtNTVlNjI5NjFjMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8qs9DWAflR29RuaUOqJG+XiHMust+xXXLgz 0U2AYaZgCqo1OdOMx+pM9Ek37Kw2THlRd0+ebfatfN2/tYEo5EpScBgBJxdKxr34 ab/REwKwFY7uLdOpNkAeaWzp/TgE636RswzRzh92DGzMpnup5GOCMHvpIqPLLAEH 4irb4AbvPK4XofB5fEsT671TF64zNz1VoppSjHFRLKzQiKmry6yCbvdcE0JASqBL BAbNYNmXd2Ce4etp4NwLxBUy04J0lo0Op37AeK5QO0scj+1l15HntMyhSwmZqtsv SannfaFrvTVNj9vmofGQFX6+pzaFeae1nAYCK0sfwu3yQ6HH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEGfSIIMnifEGe+LbffzlsdFmE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjU4ZGQ3YzctMzQ4Ny0z N2ZmLTkxYTEtMDc4NmY5MzcxYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1oAMfN4xWn11NKdB4M5f/ryv80LkOkSD9+RPC2IsYVKvZdr5CakWYx uj4lkg54us0/+0OBFcD5J/oRZU7UHShYvWVBE7jpeqxLm+GHNJTjmXyFlXZgAe1E B7/qELqOG0a9BnbipgPWYg2SGcRIHx6rYF017xm1IpgeQpfWUihLNS6LnVczKj/a LAIpkWwEVJx31o2/sewrJ/aWJ1CLzEZGAZrtkcCy5K/rA7KchK6kLG/zLsTCWTGZ N9EpwAPCusQ/ag9uw4odjxImzaGV4/lsWlbksdgeVbg71NwRC54NXaxUh7js5+iM Q7RnBMLXI/QjvFV5t7QmuCda41jimr4= -----END CERTIFICATE-----Generated at Wed Oct 29 05:22:47 2025 by rpki-client