$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67ba20b5-186e-3ddf-8d48-e2c5c70ea8d4.roa File: 67ba20b5-186e-3ddf-8d48-e2c5c70ea8d4.roa (raw, json) Hash identifier: rWMsQGsafWxMXZquKe2PsK9hg+VIYB8TRkRSiCWYGC0= Subject key identifier: 0B:28:C7:CA:2A:54:AE:05:71:18:84:A3:8B:75:98:2F:CF:3A:4A:76 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CCAFFB6688E89A2429380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67ba20b5-186e-3ddf-8d48-e2c5c70ea8d4.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 130.174.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:ca:ff:b6:68:8e:89:a2:42:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=f1c6e578-afb2-4067-ae0c-71ec8f5ffa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e3:2f:7d:2a:0c:a4:49:18:e3:d0:34:53:23: 08:02:a1:48:b4:af:55:a8:61:a9:00:b5:ee:d6:c8: ec:a6:98:ef:95:70:d7:52:71:8a:ca:8d:3e:dd:ca: 6d:83:9e:94:28:0c:ac:ef:93:23:f5:40:44:8d:41: 79:5d:a4:be:9d:4f:7f:1e:86:95:eb:1c:90:89:1c: a5:05:ba:0e:8d:54:e9:db:b9:a5:f8:1b:a8:27:bb: b0:64:54:01:ec:b8:fc:ad:9d:61:b2:52:c7:07:70: 70:ca:10:9d:f8:fe:4b:9b:e8:77:5d:d6:c1:e0:0e: c4:ab:5f:d5:29:69:17:8c:a0:59:ff:91:a1:5c:c3: 6d:67:12:09:44:16:2d:09:86:17:1b:f0:64:9a:a5: 74:8d:bc:9d:8c:ac:d9:86:1a:0b:d7:6a:f2:45:0b: b8:a4:69:75:7b:75:6a:c3:47:66:f9:d1:7e:53:ec: b1:ae:c2:41:09:97:ee:9e:34:21:68:ee:51:52:e1: 64:01:66:f8:40:b3:61:a1:06:cb:b1:e6:07:f0:1c: b5:de:03:17:f0:59:9d:ed:b0:a8:51:3f:88:06:0e: 74:3f:e1:18:4c:c6:2c:b5:e4:9c:49:bc:8b:7c:6f: 46:b5:92:94:0d:73:93:08:87:8e:92:8b:4d:86:f4: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:28:C7:CA:2A:54:AE:05:71:18:84:A3:8B:75:98:2F:CF:3A:4A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/67ba20b5-186e-3ddf-8d48-e2c5c70ea8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b3:8f:4d:91:04:5b:ba:1f:6f:2a:82:41:2a:36:94:15:66: e7:7e:4f:8e:e9:61:c4:d2:e5:ad:d5:26:90:d5:32:50:a1:e2: 73:9d:0e:4d:3d:2f:8f:e5:c0:ac:45:0e:7a:d6:0d:21:d3:a9: f2:ec:1e:97:bb:bb:99:61:e7:a8:6f:b9:3f:b1:57:a9:d5:7c: 28:4b:8e:ee:27:d9:67:b9:2b:44:51:6e:91:3d:54:3f:04:05: ee:fc:45:ae:a7:b8:54:f6:d9:f0:67:e5:cf:2d:aa:0f:64:7e: b4:3d:ea:29:de:29:fc:4e:2f:fb:3e:02:3b:07:50:ee:07:12: d8:0d:a8:ea:51:e5:4a:ab:43:b0:49:12:9d:4f:ac:d6:5c:0a: 25:98:dc:87:1a:73:4e:ba:ac:cc:c7:18:7a:f7:e7:16:be:7a: 92:d2:79:07:5d:37:39:52:21:33:3b:a1:3b:5a:91:95:62:80: 3d:3c:ef:3c:3b:f4:80:a1:fe:40:75:f9:bf:65:0b:b2:ae:57: 6c:95:a1:fe:2c:df:b4:0d:70:76:03:e9:ea:56:1c:2c:07:42: e4:68:97:77:4e:60:d2:32:cf:16:59:18:f5:85:40:11:88:d3: 9a:69:d6:62:39:5a:f9:84:f7:be:82:d7:b8:b9:0f:aa:93:6a: 90:9a:bd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMr/tmiOiaJCk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjFjNmU1NzgtYWZiMi00MDY3LWFlMGMtNzFlYzhmNWZmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uMvfSoMpEkY49A0UyMIAqFItK9VqGGpALXu 1sjsppjvlXDXUnGKyo0+3cptg56UKAys75Mj9UBEjUF5XaS+nU9/HoaV6xyQiRyl BboOjVTp27ml+BuoJ7uwZFQB7Lj8rZ1hslLHB3BwyhCd+P5Lm+h3XdbB4A7Eq1/V KWkXjKBZ/5GhXMNtZxIJRBYtCYYXG/BkmqV0jbydjKzZhhoL12ryRQu4pGl1e3Vq w0dm+dF+U+yxrsJBCZfunjQhaO5RUuFkAWb4QLNhoQbLseYH8By13gMX8Fmd7bCo UT+IBg50P+EYTMYsteScSbyLfG9GtZKUDXOTCIeOkotNhvRFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsox8oqVK4FcRiEo4t1mC/POkp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjdiYTIwYjUtMTg2ZS0z ZGRmLThkNDgtZTJjNWM3MGVhOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEazj02RBFu6H28qgkEqNpQVZud+T47pYcTS5a3VJpDVMlCh4nOdDk09 L4/lwKxFDnrWDSHTqfLsHpe7u5lh56hvuT+xV6nVfChLju4n2We5K0RRbpE9VD8E Be78Ra6nuFT22fBn5c8tqg9kfrQ96ineKfxOL/s+AjsHUO4HEtgNqOpR5UqrQ7BJ Ep1PrNZcCiWY3Icac066rMzHGHr35xa+epLSeQddNzlSITM7oTtakZVigD087zw7 9ICh/kB1+b9lC7KuV2yVof4s37QNcHYD6epWHCwHQuRol3dOYNIyzxZZGPWFQBGI 05pp1mI5WvmE976C17i5D6qTapCavdI= -----END CERTIFICATE-----Generated at Tue Sep 22 13:40:37 2026 by rpki-client