$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa File: 9f138643-4773-3122-a73a-90c3df5a47d6.roa (raw, json) Hash identifier: ovZd2dNUGFdVE94VVvAtG11T1H9khCWCGy9M4wV8Jyw= Subject key identifier: 2B:FA:B7:70:0B:38:EB:F8:21:29:7F:BF:12:9F:70:C2:D1:C9:FB:C9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDCB2952C9427AB6409B60 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 130.174.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:cb:29:52:c9:42:7a:b6:40:9b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=5a2fc834-b084-4c1d-9d05-9fc69777d08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:32:2b:4e:6c:e9:2d:27:cf:2c:17:e8:ae:2d: 47:d3:6f:7c:fa:fe:a3:fa:84:77:bf:f0:02:32:a7: fa:6d:e6:7d:a6:1d:eb:c6:dc:29:29:ff:c6:19:2c: b3:c2:4d:36:42:42:14:a1:9f:cd:65:27:39:ac:89: 2f:5c:7f:aa:6e:db:03:c3:cf:b9:5c:ba:44:10:71: 3d:46:0b:4d:ed:13:77:f6:f9:00:16:41:70:07:28: 10:22:39:fe:61:e2:85:93:47:9f:2a:31:cf:3d:1b: fd:32:4a:c8:6e:89:09:8a:b6:16:48:9e:c0:7a:de: 55:9f:8b:ec:be:3f:61:6d:00:01:6e:2a:60:4b:33: 73:98:59:89:2c:85:91:22:a6:87:95:fc:27:1f:e6: 70:c3:84:31:88:ba:55:76:81:81:8e:ae:5f:31:5f: 7c:ca:00:62:5c:99:69:bf:8c:f0:84:c8:72:8c:d4: a8:e2:1a:2c:b4:1a:de:88:e4:7c:a0:76:0f:e4:ff: 91:21:1f:1c:15:35:bd:02:72:66:f6:62:2f:d5:1b: 1e:05:55:5a:9f:2d:f5:14:07:94:35:84:2a:20:48: 69:2e:ea:79:29:33:01:32:3a:94:dd:f9:94:f0:a7: cd:2f:be:d5:9b:07:dc:16:83:06:bc:10:d6:e5:93: 15:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FA:B7:70:0B:38:EB:F8:21:29:7F:BF:12:9F:70:C2:D1:C9:FB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e8:99:5d:70:68:91:70:18:9b:55:18:f3:ff:1a:d8:4b:34: 4e:29:cf:38:83:cd:ca:63:82:57:e3:d3:d7:76:83:6b:db:ec: 53:06:8b:17:c9:1d:0c:15:e8:7f:20:3d:cc:91:e7:e5:50:ff: 9f:9c:b0:fa:e4:9c:6c:90:e6:ca:d9:1f:d8:51:6a:57:e6:cb: d1:ae:1b:ab:53:e0:14:81:8e:80:09:05:99:57:70:51:c5:c3: de:86:5f:70:05:c7:42:54:9e:99:8d:8b:a4:0d:8c:b2:6a:aa: 4d:74:75:70:21:26:65:ec:b7:cb:98:65:17:4b:a4:66:e5:bc: 84:ff:e2:79:0f:7b:b8:82:df:d1:bd:78:6b:d2:67:4a:3d:20: 1b:76:94:8c:77:6e:4d:ef:89:eb:59:06:4b:37:9b:3c:c2:1b: 31:35:62:80:5f:3d:1f:21:bf:37:6b:e7:33:f0:0a:08:06:3f: 1b:20:66:00:cc:fe:7e:14:c8:b4:33:fd:86:41:0f:71:e5:96: 1e:33:bd:21:a1:fd:9f:8a:81:fc:2d:95:86:c8:ce:c2:3a:dc: 88:42:3c:e5:6e:17:7a:08:01:81:6e:0f:ff:15:78:b8:7c:62: 84:6a:32:63:83:28:49:96:c9:0a:91:46:81:ce:4a:0e:ba:8f: 73:dd:af:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcspUslCerZAm2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NWEyZmM4MzQtYjA4NC00YzFkLTlkMDUtOWZjNjk3NzdkMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljIrTmzpLSfPLBfori1H0298+v6j+oR3v/AC Mqf6beZ9ph3rxtwpKf/GGSyzwk02QkIUoZ/NZSc5rIkvXH+qbtsDw8+5XLpEEHE9 RgtN7RN39vkAFkFwBygQIjn+YeKFk0efKjHPPRv9MkrIbokJirYWSJ7Aet5Vn4vs vj9hbQABbipgSzNzmFmJLIWRIqaHlfwnH+Zww4QxiLpVdoGBjq5fMV98ygBiXJlp v4zwhMhyjNSo4hostBreiOR8oHYP5P+RIR8cFTW9AnJm9mIv1RseBVVany31FAeU NYQqIEhpLup5KTMBMjqU3fmU8KfNL77VmwfcFoMGvBDW5ZMVewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCv6t3ALOOv4ISl/vxKfcMLRyfvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWYxMzg2NDMtNDc3My0z MTIyLWE3M2EtOTBjM2RmNWE0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnomV1waJFwGJtVGPP/GthLNE4pzziDzcpjglfj09d2g2vb7FMGixfJ HQwV6H8gPcyR5+VQ/5+csPrknGyQ5srZH9hRalfmy9GuG6tT4BSBjoAJBZlXcFHF w96GX3AFx0JUnpmNi6QNjLJqqk10dXAhJmXst8uYZRdLpGblvIT/4nkPe7iC39G9 eGvSZ0o9IBt2lIx3bk3vietZBks3mzzCGzE1YoBfPR8hvzdr5zPwCggGPxsgZgDM /n4UyLQz/YZBD3Hllh4zvSGh/Z+KgfwtlYbIzsI63IhCPOVuF3oIAYFuD/8VeLh8 YoRqMmODKEmWyQqRRoHOSg66j3Pdr0o= -----END CERTIFICATE-----Generated at Thu Oct 29 00:49:49 2026 by rpki-client