$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa File: 8c18f710-a9c8-3050-9253-87cbecc3b40a.roa (raw, json) Hash identifier: vjrlvq47iDVHaEIxzT8lb/3TgltFmK6uiiMYn8YJ7hw= Subject key identifier: 80:27:59:3D:91:38:9F:34:1F:3F:C7:81:22:AF:2E:8F:21:BD:4D:BE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C30DF8434DE074E3FBE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c3:0d:f8:43:4d:e0:74:e3:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=d2a26f3b-d437-474f-b122-115614ebd0c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d2:9a:4c:8e:72:ae:1f:3b:9d:23:f5:40:1f: a7:35:2d:f9:dc:93:69:b8:39:c7:30:c8:f9:96:c2: 5c:23:99:f4:85:d4:55:9d:45:44:35:fd:6b:97:bb: eb:cb:1a:a8:90:d8:39:72:a4:a3:ca:77:b0:2e:ed: ca:b9:84:72:86:f8:ec:07:df:fb:63:a0:af:70:ca: 52:2c:6e:66:90:b6:b0:0f:18:b0:3b:c9:15:95:a4: 03:3c:c7:03:4a:f5:b4:c6:1d:95:2a:e9:29:3b:7a: 75:56:76:5c:16:16:e2:33:bf:d8:76:75:05:a2:38: 65:87:d2:7a:c6:36:e4:b4:84:54:57:84:bf:5a:b7: 5d:d9:94:c5:3d:9e:81:f0:e1:da:99:a1:5d:e1:7c: 31:37:6a:88:cf:2e:1b:8c:04:94:a2:20:79:81:ba: 20:a6:1e:e7:6c:4f:31:c2:c8:67:0b:7a:81:b3:44: 94:ea:23:33:73:9c:b2:f9:f0:f8:43:51:dc:0b:4d: bf:2e:da:7a:18:ad:00:9a:78:48:ca:8d:e8:0f:9e: da:79:79:38:58:9c:c0:ca:cb:7b:5e:f7:ab:0a:10: 57:5a:fb:f8:ee:94:6d:2c:08:5c:15:c7:0f:82:57: 15:80:d0:ad:23:9c:d5:1f:bd:14:80:19:5b:cc:6c: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:59:3D:91:38:9F:34:1F:3F:C7:81:22:AF:2E:8F:21:BD:4D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:17:19:41:39:be:38:de:b0:5b:43:0d:bd:7a:8e:0d:b9:a2: 7b:36:d1:88:62:0d:72:f9:a5:69:b1:d5:84:cf:57:3a:12:a4: 1c:ef:02:e1:5e:14:ed:db:51:29:47:21:46:a0:89:9b:db:61: 24:4a:62:15:c6:9a:7f:4e:2c:b6:bd:db:7f:5e:eb:0d:b0:27: af:80:e9:dc:7c:40:c1:0f:20:0d:5e:d5:0a:32:06:e1:3a:0a: 67:5a:d9:2b:6f:31:c7:c1:a5:62:aa:32:a3:70:28:26:e4:7a: ca:fe:eb:51:9f:18:cb:fd:b6:64:de:a1:bb:0d:e0:fd:5c:12: 2e:94:d6:0d:9b:10:a0:7f:fa:73:ed:d7:c9:a4:24:ea:29:4a: 2f:f4:b9:db:e3:51:51:47:e4:4a:e1:a3:e2:c7:b9:16:7e:aa: 47:e9:c9:70:61:d5:66:f9:3b:d1:d8:89:0b:9a:a7:13:62:63: 95:fb:87:81:e3:5a:37:af:39:a3:e5:dc:55:d4:45:82:31:e3: ea:70:67:0a:31:83:6e:aa:74:15:7d:0d:ad:cc:40:b1:62:54: 3e:69:4a:ff:02:e4:a9:05:7d:eb:a5:ba:30:4b:65:86:fa:db: 98:6f:bc:cd:66:81:c6:3f:68:49:1f:55:f3:02:81:a2:2a:d3: ff:4a:4a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98MN+ENN4HTj++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZDJhMjZmM2ItZDQzNy00NzRmLWIxMjItMTE1NjE0ZWJkMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dKaTI5yrh87nSP1QB+nNS353JNpuDnHMMj5 lsJcI5n0hdRVnUVENf1rl7vryxqokNg5cqSjynewLu3KuYRyhvjsB9/7Y6CvcMpS LG5mkLawDxiwO8kVlaQDPMcDSvW0xh2VKukpO3p1VnZcFhbiM7/YdnUFojhlh9J6 xjbktIRUV4S/Wrdd2ZTFPZ6B8OHamaFd4XwxN2qIzy4bjASUoiB5gbogph7nbE8x wshnC3qBs0SU6iMzc5yy+fD4Q1HcC02/Ltp6GK0AmnhIyo3oD57aeXk4WJzAyst7 XverChBXWvv47pRtLAhcFccPglcVgNCtI5zVH70UgBlbzGyEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAnWT2ROJ80Hz/HgSKvLo8hvU2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGMxOGY3MTAtYTljOC0z MDUwLTkyNTMtODdjYmVjYzNiNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAXGUE5vjjesFtDDb16jg25ons20YhiDXL5pWmx1YTPVzoSpBzvAuFe FO3bUSlHIUagiZvbYSRKYhXGmn9OLLa9239e6w2wJ6+A6dx8QMEPIA1e1QoyBuE6 Cmda2StvMcfBpWKqMqNwKCbkesr+61GfGMv9tmTeobsN4P1cEi6U1g2bEKB/+nPt 18mkJOopSi/0udvjUVFH5Erho+LHuRZ+qkfpyXBh1Wb5O9HYiQuapxNiY5X7h4Hj WjevOaPl3FXURYIx4+pwZwoxg26qdBV9Da3MQLFiVD5pSv8C5KkFfeulujBLZYb6 25hvvM1mgcY/aEkfVfMCgaIq0/9KStM= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:12 2025 by rpki-client