$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa File: 960b2a40-7100-31d4-af76-abe26ceff996.roa (raw, json) Hash identifier: /MIiEkUHACwqdGp+LkNOWGftCVOa6Qqa9daSGcVYEQI= Subject key identifier: 44:86:64:11:95:01:40:F9:6D:5E:4A:74:93:7D:2F:3C:21:5F:6F:76 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BCAA85DB5C859E40F9500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 130.174.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ca:a8:5d:b5:c8:59:e4:0f:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=8a3b658d-3035-4a81-979d-8d951bf8f473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:98:f6:d6:5d:75:ae:22:6f:24:39:74:a9: 95:7e:73:37:cc:69:1b:96:6a:c1:86:96:18:85:58: 07:cb:0f:3c:c7:fe:21:0c:57:5c:20:84:ea:61:51: b8:44:0b:6a:ad:ce:4b:35:2f:1a:38:81:54:a1:23: d7:76:8c:45:18:ff:fa:ee:14:91:3c:dc:b2:5d:fd: 1f:4c:0a:67:fd:54:ea:87:67:ad:cf:1a:16:d4:eb: 57:29:19:77:aa:57:a7:e1:5a:b2:2b:91:9d:ba:6d: cd:cb:7a:30:ae:48:d2:1f:22:70:0e:89:5e:58:ca: 8d:1c:5d:4d:de:07:2d:6b:46:c9:d2:62:cb:0c:f7: d6:65:51:8b:ff:0e:58:03:17:fe:99:48:74:57:58: 44:9c:d9:21:e8:5a:1b:c0:ed:67:eb:aa:15:e9:27: 33:de:18:6d:cc:75:0b:c2:7c:37:6e:fa:45:15:36: 30:92:74:c5:77:72:de:99:34:23:4e:9d:63:bf:5f: 51:ec:37:25:de:f5:e8:9f:d3:8a:7b:f1:36:14:61: f3:2c:c3:d1:2f:e0:a5:e6:62:9a:0b:8d:4e:b2:fe: 3c:7f:1e:8a:02:c9:f6:2b:f7:c0:84:be:af:61:a5: 38:4a:d6:59:b1:15:c4:62:3d:ed:b2:47:94:07:12: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:86:64:11:95:01:40:F9:6D:5E:4A:74:93:7D:2F:3C:21:5F:6F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/960b2a40-7100-31d4-af76-abe26ceff996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:56:f9:1f:e3:b5:3a:c5:48:04:a7:92:12:0c:f5:70:dc:2e: a8:fc:d7:f9:70:67:76:e4:c1:4e:41:c3:ae:29:a6:25:55:16: b3:c8:d6:c7:c4:0a:f5:60:8a:e1:db:c1:a0:dd:ed:da:7b:bc: 4e:4d:93:42:de:3f:79:a7:52:4f:ca:87:b2:d0:b3:1d:2d:cd: 9b:2d:b6:2a:2b:07:eb:51:c2:0b:09:43:aa:08:9a:08:72:e5: 2a:b3:8a:7c:8d:b2:39:7d:ea:c9:fd:9e:82:2d:3c:c4:c5:06: e9:ac:3d:8c:be:6f:5c:b3:21:14:d4:11:1b:93:5d:c8:95:f0: df:ed:b5:ba:a3:33:e1:46:7c:27:af:5d:7e:0c:53:55:ef:8e: 14:16:bf:97:ab:9e:d7:26:03:98:7b:c5:7f:c5:ae:1e:9a:ab: c3:28:d9:34:7f:0b:86:be:34:c2:a1:32:91:7a:c7:aa:c8:55: 04:ea:6e:94:78:dd:9f:54:a7:1a:19:1c:cc:a4:c4:62:50:f9: 48:fd:99:39:2d:02:21:ff:dd:fb:6c:05:99:ed:66:41:41:2a: ec:56:46:7d:64:b7:6f:1f:c8:ef:0f:27:f6:29:bb:63:0c:38: a8:d4:d7:9f:68:f6:0d:f1:11:1d:f0:0e:f9:f3:c0:9b:6e:1c: e5:b1:50:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8qoXbXIWeQPlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OGEzYjY1OGQtMzAzNS00YTgxLTk3OWQtOGQ5NTFiZjhmNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6KY9tZdda4ibyQ5dKmVfnM3zGkblmrBhpYY hVgHyw88x/4hDFdcIITqYVG4RAtqrc5LNS8aOIFUoSPXdoxFGP/67hSRPNyyXf0f TApn/VTqh2etzxoW1OtXKRl3qlen4VqyK5Gdum3Ny3owrkjSHyJwDoleWMqNHF1N 3gcta0bJ0mLLDPfWZVGL/w5YAxf+mUh0V1hEnNkh6FobwO1n66oV6Scz3hhtzHUL wnw3bvpFFTYwknTFd3LemTQjTp1jv19R7Dcl3vXon9OKe/E2FGHzLMPRL+Cl5mKa C41Osv48fx6KAsn2K/fAhL6vYaU4StZZsRXEYj3tskeUBxIHJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESGZBGVAUD5bV5KdJN9LzwhX292MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTYwYjJhNDAtNzEwMC0z MWQ0LWFmNzYtYWJlMjZjZWZmOTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBW+R/jtTrFSASnkhIM9XDcLqj81/lwZ3bkwU5Bw64ppiVVFrPI1sfE CvVgiuHbwaDd7dp7vE5Nk0LeP3mnUk/Kh7LQsx0tzZsttiorB+tRwgsJQ6oImghy 5SqzinyNsjl96sn9noItPMTFBumsPYy+b1yzIRTUERuTXciV8N/ttbqjM+FGfCev XX4MU1XvjhQWv5erntcmA5h7xX/Frh6aq8Mo2TR/C4a+NMKhMpF6x6rIVQTqbpR4 3Z9UpxoZHMykxGJQ+Uj9mTktAiH/3ftsBZntZkFBKuxWRn1kt28fyO8PJ/Ypu2MM OKjU159o9g3xER3wDvnzwJtuHOWxUJg= -----END CERTIFICATE-----Generated at Wed Oct 22 13:04:30 2025 by rpki-client