$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa File: 8c18f710-a9c8-3050-9253-87cbecc3b40a.roa (raw, json) Hash identifier: 6krqT+qOHM9446toP1H8XjY4NYwlyOhJXGrYFfGcRUQ= Subject key identifier: 4E:19:05:16:28:9F:A4:DE:9F:92:56:12:8B:B5:6C:53:02:D1:7D:3D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177097A3A8E441EC18CD94 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 130.174.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:70:97:a3:a8:e4:41:ec:18:cd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=f2940bdb-26dd-495a-8bdd-3f9729a94c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:23:7d:85:bf:21:89:cc:b6:52:a4:27:47:03: fa:2c:b9:a0:50:a4:ce:db:14:cc:03:96:80:c0:da: 70:52:7b:32:d9:e8:da:9d:1b:b6:b5:bc:2b:c6:3c: 31:b9:9c:2c:59:44:c8:3b:b0:ed:84:35:d8:37:d9: f5:f6:50:ff:71:8f:ee:81:2f:9a:a3:a9:16:f4:44: 7a:e0:13:9b:68:e4:69:2b:f7:9c:ec:4e:cf:7e:d3: 2a:52:13:a1:59:b5:06:30:ce:e8:22:3f:d7:94:cf: 3b:96:ea:4a:88:f7:97:12:92:99:43:fa:97:bc:3a: 6b:c2:e6:bf:1c:39:74:ea:de:bd:93:a3:19:91:8c: 6e:42:6a:30:a2:b0:13:11:14:f8:e9:d4:a0:07:85: 86:6e:77:1f:f3:66:af:5b:e6:73:00:63:a4:ab:86: a8:9d:b6:4a:63:42:3d:da:52:4f:23:55:e0:02:27: 03:2b:da:1d:f2:c7:a3:4f:0e:bb:46:86:84:65:2b: 43:b9:73:63:6d:ad:9b:9e:13:c2:e2:20:dc:93:50: 6d:75:d7:79:49:c2:c9:70:f5:00:c1:ac:94:68:e6: 8d:73:35:3d:c8:da:39:1d:95:41:9a:0c:99:ad:e2: 67:56:2d:47:f2:28:22:07:64:ef:30:39:45:62:0b: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:05:16:28:9F:A4:DE:9F:92:56:12:8B:B5:6C:53:02:D1:7D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c18f710-a9c8-3050-9253-87cbecc3b40a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:90:2a:59:d2:0f:b8:7b:2c:84:15:1c:80:3b:db:cc:b5:33: 27:90:0e:e7:eb:0f:04:65:f0:3c:7b:ef:e4:cb:a3:ec:2b:7c: 71:1a:2f:82:06:a1:71:e2:ab:c8:1c:45:0a:89:b3:bd:c9:49: 8a:66:0f:ca:fe:5c:fd:10:d6:dd:8c:0c:6f:de:82:af:d4:c7: cc:5f:9a:25:2c:d4:8a:06:b0:93:4a:e6:f4:a6:9a:0b:d6:d4: 33:85:be:78:ee:f5:0a:03:69:7f:31:4b:da:cf:90:6d:92:4d: ce:32:d8:81:c7:70:a1:05:a1:11:22:52:ba:06:11:57:5f:8b: 6f:37:d4:11:70:38:b7:73:27:2e:91:96:d2:3f:63:38:53:87: 73:cd:c9:54:59:f4:44:3f:9c:68:4b:97:ca:1a:36:76:c4:48: e2:a3:89:91:f0:42:ec:2b:cf:9f:62:e6:7f:39:e7:92:35:8c: 81:53:34:e7:36:0d:f1:29:37:45:0b:a0:11:c0:cd:db:62:c5: c3:98:b4:e8:e7:79:0a:65:4b:a5:7f:55:4d:64:e4:b7:54:84: 7c:f9:5c:38:1b:a5:42:0e:e1:20:e4:f9:60:cc:31:62:af:a0: 02:10:eb:34:4a:71:79:19:06:43:49:17:77:fa:59:1e:44:d4: 99:6e:a1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3CXo6jkQewYzZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZjI5NDBiZGItMjZkZC00OTVhLThiZGQtM2Y5NzI5YTk0YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SN9hb8hicy2UqQnRwP6LLmgUKTO2xTMA5aA wNpwUnsy2ejanRu2tbwrxjwxuZwsWUTIO7DthDXYN9n19lD/cY/ugS+ao6kW9ER6 4BObaORpK/ec7E7PftMqUhOhWbUGMM7oIj/XlM87lupKiPeXEpKZQ/qXvDprwua/ HDl06t69k6MZkYxuQmoworATERT46dSgB4WGbncf82avW+ZzAGOkq4aonbZKY0I9 2lJPI1XgAicDK9od8sejTw67RoaEZStDuXNjba2bnhPC4iDck1Btddd5ScLJcPUA wayUaOaNczU9yNo5HZVBmgyZreJnVi1H8igiB2TvMDlFYgsozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4ZBRYon6Ten5JWEou1bFMC0X09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGMxOGY3MTAtYTljOC0z MDUwLTkyNTMtODdjYmVjYzNiNDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOQKlnSD7h7LIQVHIA728y1MyeQDufrDwRl8Dx77+TLo+wrfHEaL4IG oXHiq8gcRQqJs73JSYpmD8r+XP0Q1t2MDG/egq/Ux8xfmiUs1IoGsJNK5vSmmgvW 1DOFvnju9QoDaX8xS9rPkG2STc4y2IHHcKEFoREiUroGEVdfi2831BFwOLdzJy6R ltI/YzhTh3PNyVRZ9EQ/nGhLl8oaNnbESOKjiZHwQuwrz59i5n8555I1jIFTNOc2 DfEpN0ULoBHAzdtixcOYtOjneQplS6V/VU1k5LdUhHz5XDgbpUIO4SDk+WDMMWKv oAIQ6zRKcXkZBkNJF3f6WR5E1JluoSw= -----END CERTIFICATE-----Generated at Tue Sep 22 14:12:22 2026 by rpki-client