$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa File: a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa (raw, json) Hash identifier: 4bYTD5PqA2SfvEU5Fn+YiwyxBLzT09jmwKfBRhKJv5c= Subject key identifier: E2:0D:4E:51:A1:10:36:B8:0B:C3:10:87:5B:B5:EC:88:F4:9B:7C:87 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CCAE74E9A57C5337AC240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 130.174.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:ca:e7:4e:9a:57:c5:33:7a:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=85044e43-47f4-47ef-9975-d765f957823d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:93:1f:a2:2c:bf:1e:01:68:5b:ba:29:7a: 99:80:f6:aa:7d:f0:e7:43:2e:ce:9f:31:27:00:ba: 28:7b:2d:35:aa:13:1e:29:d5:ab:43:1e:af:93:b3: fd:e9:8c:4b:cc:18:83:27:bd:d6:e3:33:ca:5a:3f: af:7b:89:ed:3c:58:c7:ce:e5:77:f6:73:d4:f1:63: 7e:34:5b:74:98:26:0f:a2:bd:fc:a3:c2:be:5a:8c: 7b:f2:76:a4:28:01:b6:53:b3:3e:02:cd:70:52:81: 2e:99:79:a1:47:18:ff:8b:eb:6e:2a:0b:e1:c1:38: 63:22:7a:f4:61:b6:25:96:f8:e9:2a:e9:77:ac:45: 29:0f:9f:59:b2:45:bf:3e:ac:ee:33:dd:f4:86:95: 72:c7:41:fa:3f:11:3a:4c:39:d6:e1:93:2f:93:ca: 00:40:cd:d6:93:c2:b1:9e:07:ca:da:b7:8f:1f:2a: 38:f0:07:8e:1a:82:35:e9:c8:20:d9:6d:b9:79:15: d5:68:3c:0c:85:ea:f2:08:a8:e9:f3:dc:70:86:26: 50:af:7d:d6:56:cf:7f:63:77:10:37:fc:7c:d7:15: 30:85:89:5f:32:90:87:a9:c3:21:c2:c4:4a:64:72: 2f:51:56:6b:74:79:f8:47:3b:22:ad:e8:f7:55:36: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0D:4E:51:A1:10:36:B8:0B:C3:10:87:5B:B5:EC:88:F4:9B:7C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a04d6b54-d309-322f-bbd5-9ed5f0ea5910.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8c:83:95:04:6a:27:af:5c:1a:4a:6c:da:34:94:a6:2f:f0: ed:1f:00:21:0f:61:e0:05:80:07:f8:fe:be:33:5a:b9:ad:d6: 5f:93:1c:07:ca:5d:ce:15:f2:dc:0b:bb:7f:d4:03:1e:65:3c: fd:12:c2:ed:54:03:b5:8a:48:62:66:af:11:cd:b7:56:30:79: 0a:53:d6:65:11:e6:38:9a:ba:88:e8:13:fd:e6:92:40:97:2f: a2:6d:ac:c5:dd:a4:51:54:91:79:2c:0e:26:ab:ef:57:cd:18: dd:d5:5f:86:5b:26:0f:a9:46:12:6a:87:11:b5:b6:2d:de:71: a9:60:30:06:db:b4:1e:85:a8:fb:e2:58:4b:22:86:6d:ff:b6: b3:e7:1d:80:bb:0e:26:29:d1:9b:f1:7f:56:a2:73:c4:f4:1a: 77:17:ff:e6:14:bc:d5:32:8c:b4:b5:73:22:fe:de:79:b8:56: e9:e1:5e:f0:ab:ca:e2:bb:ce:07:3f:32:35:37:c9:28:99:8c: 09:e4:66:df:81:51:ef:9a:7c:32:f8:bd:ee:38:2d:67:23:5d: 80:45:9f:97:c3:9c:9e:65:0a:3e:d7:14:41:56:26:05:55:1b: d4:98:b9:66:fe:27:97:82:6d:6d:65:d5:69:eb:a6:2a:bf:74: 59:a9:27:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMrnTppXxTN6wkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ODUwNDRlNDMtNDdmNC00N2VmLTk5NzUtZDc2NWY5NTc4MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk++TH6Isvx4BaFu6KXqZgPaqffDnQy7OnzEn ALooey01qhMeKdWrQx6vk7P96YxLzBiDJ73W4zPKWj+ve4ntPFjHzuV39nPU8WN+ NFt0mCYPor38o8K+Wox78nakKAG2U7M+As1wUoEumXmhRxj/i+tuKgvhwThjInr0 YbYllvjpKul3rEUpD59ZskW/PqzuM930hpVyx0H6PxE6TDnW4ZMvk8oAQM3Wk8Kx ngfK2rePHyo48AeOGoI16cgg2W25eRXVaDwMheryCKjp89xwhiZQr33WVs9/Y3cQ N/x81xUwhYlfMpCHqcMhwsRKZHIvUVZrdHn4Rzsirej3VTZsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOINTlGhEDa4C8MQh1u17Ij0m3yHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA0ZDZiNTQtZDMwOS0z MjJmLWJiZDUtOWVkNWYwZWE1OTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2Mg5UEaievXBpKbNo0lKYv8O0fACEPYeAFgAf4/r4zWrmt1l+THAfK Xc4V8twLu3/UAx5lPP0Swu1UA7WKSGJmrxHNt1YweQpT1mUR5jiauojoE/3mkkCX L6JtrMXdpFFUkXksDiar71fNGN3VX4ZbJg+pRhJqhxG1ti3ecalgMAbbtB6FqPvi WEsihm3/trPnHYC7DiYp0Zvxf1aic8T0GncX/+YUvNUyjLS1cyL+3nm4VunhXvCr yuK7zgc/MjU3ySiZjAnkZt+BUe+afDL4ve44LWcjXYBFn5fDnJ5lCj7XFEFWJgVV G9SYuWb+J5eCbW1l1Wnrpiq/dFmpJ5Q= -----END CERTIFICATE-----Generated at Wed Sep 9 00:50:26 2026 by rpki-client