$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa File: ab087d20-9084-39ca-9395-d2254d2fa85d.roa (raw, json) Hash identifier: yH039nQXXpyhzKLi1/YmTPCVVLCDu7XOKkUo3xoZL+Y= Subject key identifier: AE:10:55:9B:78:91:4D:1F:A7:D8:91:57:41:03:9A:1F:BE:75:5B:73 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7CBA8063EE61C31E3A880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cb:a8:06:3e:e6:1c:31:e3:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=116cc893-c676-418b-af17-fa4b755eac3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:2d:61:21:b3:7b:29:44:10:7f:6a:a4:b6: cb:1c:24:d2:18:3d:4d:bf:01:38:8b:90:03:b5:52: fa:9d:75:b2:b9:d1:0e:af:86:17:a3:63:8c:66:ae: 76:9a:66:55:30:d7:d9:c4:6d:20:a5:f6:6d:20:08: c0:5a:ea:5c:5e:6b:01:95:82:ee:7b:56:e8:ad:45: c8:54:78:b1:8b:80:20:07:36:8b:b7:5d:28:b4:e0: 6a:d0:36:db:b5:98:8f:53:4e:05:d3:93:42:49:e5: de:9a:2e:5e:b5:54:21:f1:fc:60:59:07:ac:a0:37: 3a:68:0c:8c:47:df:c8:3d:f5:0a:ab:e2:da:ec:51: f3:f2:d5:2f:eb:de:c2:95:ae:a3:a7:16:da:50:3a: 81:d4:81:f8:54:88:fd:02:35:f4:cf:4e:8c:a3:f7: b7:c1:d8:f0:31:e0:2e:45:e7:e6:58:a9:e9:3e:e3: 9c:dd:2b:67:a7:b5:54:66:f2:25:d7:96:30:fd:00: 51:c7:52:3d:2a:4a:12:80:21:16:93:3c:0f:23:a3: 0d:c2:f9:52:db:7e:a1:d8:76:a6:39:2e:59:c1:18: 17:40:c6:cd:5f:4c:fa:d7:99:ab:02:f5:f1:66:d5: 0e:de:5a:f1:96:fa:e1:ca:89:58:17:a3:b1:01:e9: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:55:9B:78:91:4D:1F:A7:D8:91:57:41:03:9A:1F:BE:75:5B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d0:c9:c2:87:2b:5d:26:a3:2f:38:5d:c6:63:e3:e8:b0:66: 2b:68:66:5e:81:0c:7a:7a:3c:93:c1:bf:08:2c:f3:33:90:e8: d6:37:81:bb:93:75:1e:4b:32:30:18:70:4a:4e:36:aa:cd:f9: 07:5f:90:7e:1a:d8:70:40:43:50:a5:64:b1:30:39:45:99:bf: f8:97:91:79:27:86:9b:97:5c:fc:d9:bc:d8:3e:57:ab:5d:99: 1e:1e:d5:b1:d5:de:86:d8:96:05:dd:89:11:41:bb:66:6d:8f: bd:7d:08:2e:c9:20:2c:c9:7f:85:5a:c1:9b:0b:41:b9:fd:1f: d2:d2:58:0c:24:0d:b8:58:42:59:e6:40:3f:cf:ee:51:84:34: ec:d0:0b:3a:79:ce:f9:c0:7d:be:3f:c0:b1:1e:27:36:94:8b: a1:cb:85:d9:6f:fe:7a:2c:a6:4b:3a:3b:35:6e:3a:ce:ec:b6: 8c:b9:09:ce:21:7e:ef:8b:ee:52:24:a3:c8:5d:c8:a1:c8:11: 75:1c:92:9f:7e:85:0b:38:ae:b3:27:a1:16:9d:79:6e:10:cd: c3:18:e1:33:fa:77:26:ff:d1:b2:d7:85:ea:f7:e9:8a:62:f2: 63:38:50:41:6b:b4:40:14:4c:a7:9b:b5:65:c9:81:ce:80:53: ba:fd:8a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98uoBj7mHDHjqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTE2Y2M4OTMtYzY3Ni00MThiLWFmMTctZmE0Yjc1NWVhYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8stYSGzeylEEH9qpLbLHCTSGD1NvwE4i5AD tVL6nXWyudEOr4YXo2OMZq52mmZVMNfZxG0gpfZtIAjAWupcXmsBlYLue1borUXI VHixi4AgBzaLt10otOBq0DbbtZiPU04F05NCSeXemi5etVQh8fxgWQesoDc6aAyM R9/IPfUKq+La7FHz8tUv697Cla6jpxbaUDqB1IH4VIj9AjX0z06Mo/e3wdjwMeAu RefmWKnpPuOc3Stnp7VUZvIl15Yw/QBRx1I9KkoSgCEWkzwPI6MNwvlS236h2Ham OS5ZwRgXQMbNX0z615mrAvXxZtUO3lrxlvrhyolYF6OxAekUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4QVZt4kU0fp9iRV0EDmh++dVtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWIwODdkMjAtOTA4NC0z OWNhLTkzOTUtZDIyNTRkMmZhODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDQycKHK10moy84XcZj4+iwZitoZl6BDHp6PJPBvwgs8zOQ6NY3gbuT dR5LMjAYcEpONqrN+QdfkH4a2HBAQ1ClZLEwOUWZv/iXkXknhpuXXPzZvNg+V6td mR4e1bHV3obYlgXdiRFBu2Ztj719CC7JICzJf4VawZsLQbn9H9LSWAwkDbhYQlnm QD/P7lGENOzQCzp5zvnAfb4/wLEeJzaUi6HLhdlv/nospks6OzVuOs7stoy5Cc4h fu+L7lIko8hdyKHIEXUckp9+hQs4rrMnoRadeW4QzcMY4TP6dyb/0bLXher36Ypi 8mM4UEFrtEAUTKebtWXJgc6AU7r9ikE= -----END CERTIFICATE-----Generated at Tue Nov 4 03:23:40 2025 by rpki-client