$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b14d3f80-f141-3ca1-a036-dc941bbecd22.roa File: b14d3f80-f141-3ca1-a036-dc941bbecd22.roa (raw, json) Hash identifier: wxKtAq++jj7oo08JHhmx26oCze9hwG0Uf/HYM+s1owo= Subject key identifier: 3B:C0:6D:CF:49:22:D9:4A:F6:2B:AF:35:47:5D:BC:FB:DE:50:6E:2A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A0FE85A4D67B9168E4A280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b14d3f80-f141-3ca1-a036-dc941bbecd22.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 130.174.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fe:85:a4:d6:7b:91:68:e4:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=9018d00c-8b73-45f2-a716-9c1396102b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:78:2f:47:93:8b:8b:e1:3d:bc:11:35:77: ae:4e:f0:d3:0c:8f:e9:4f:92:83:ae:8c:ef:0a:18: 9e:66:73:72:a8:1f:60:de:ed:75:b7:6a:4f:bf:69: 2c:ff:dc:01:72:70:e8:65:34:74:0f:70:7d:70:b8: 07:d6:f9:b8:6a:91:ea:f6:4a:b0:5b:57:5f:d9:b7: bd:65:58:d2:f7:ae:ed:d9:95:69:8a:43:02:8a:1a: 37:b0:fe:27:1d:6c:ba:41:8d:2f:82:16:20:f7:c7: 8d:c1:d9:30:23:3f:04:ce:fc:b4:0f:c7:d8:ef:b4: 4b:1e:ce:32:6c:ac:71:2d:33:31:3e:ed:40:9f:d3: 84:29:72:3f:66:f3:c4:36:9f:10:9e:16:51:b7:3f: 20:ce:8a:d1:8d:d4:c8:57:07:1a:31:c8:f1:b4:82: df:ce:41:50:a6:5f:7f:e7:c9:f0:77:21:8c:b5:47: 7d:ca:a5:b7:ac:ad:82:32:3b:bd:44:62:14:26:81: 37:1f:75:86:f7:7c:f9:0f:f2:7c:66:7d:f4:15:1d: dc:13:40:e4:35:9f:d2:ef:20:8b:42:79:8a:e9:3d: cb:2c:05:ce:2f:a1:d8:ea:5d:5c:dc:9b:b2:cf:2f: 49:57:55:c8:15:76:c6:19:b1:da:ff:10:f2:dc:5e: c9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:6D:CF:49:22:D9:4A:F6:2B:AF:35:47:5D:BC:FB:DE:50:6E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b14d3f80-f141-3ca1-a036-dc941bbecd22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a3:64:b2:da:78:bd:ed:f3:ba:3a:9d:49:e1:b6:38:2e:e1: be:5a:4f:ae:a4:fe:14:dd:cd:cc:fd:03:c5:4f:68:da:28:ce: 7e:74:93:74:32:2b:2e:c3:0d:af:43:28:0c:a4:24:77:b4:e8: dc:c1:b4:10:c8:cf:74:02:b1:ea:69:f4:e6:fe:28:dc:09:4f: a5:63:1e:a6:e8:4b:1e:80:64:05:b5:1a:8f:fe:2c:05:ba:72: 53:69:95:3c:b4:15:8b:7e:02:2d:50:d8:e2:90:fd:6b:c8:14: ea:16:7c:0b:b8:9c:a2:db:54:55:04:a3:e4:1b:8f:99:41:f9: 6d:27:a8:5d:f0:fd:cb:ca:0b:b8:e0:40:bc:69:c1:de:40:51: 28:eb:e1:d6:3b:ba:ea:ee:ac:d4:b3:37:25:b3:cb:9a:d9:0e: dc:b2:38:37:c4:74:09:cb:0c:c0:16:3f:bf:0f:9f:2b:96:60: 45:24:84:95:61:45:2b:62:35:7f:5e:a4:20:0b:dc:9d:48:c4: 0b:3d:c8:62:ba:2c:27:ee:8e:21:87:93:e2:cd:cd:c7:d8:bb: d0:1f:08:71:e8:b6:bd:6a:00:bc:c5:be:17:04:3a:e9:2a:b5: b2:2e:ab:44:36:4e:60:8a:b6:1c:e4:18:a4:15:aa:40:b1:19: 98:6a:3a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToP6FpNZ7kWjkooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTAxOGQwMGMtOGI3My00NWYyLWE3MTYtOWMxMzk2MTAyYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigB4L0eTi4vhPbwRNXeuTvDTDI/pT5KDrozv ChieZnNyqB9g3u11t2pPv2ks/9wBcnDoZTR0D3B9cLgH1vm4apHq9kqwW1df2be9 ZVjS967t2ZVpikMCiho3sP4nHWy6QY0vghYg98eNwdkwIz8Ezvy0D8fY77RLHs4y bKxxLTMxPu1An9OEKXI/ZvPENp8QnhZRtz8gzorRjdTIVwcaMcjxtILfzkFQpl9/ 58nwdyGMtUd9yqW3rK2CMju9RGIUJoE3H3WG93z5D/J8Zn30FR3cE0DkNZ/S7yCL QnmK6T3LLAXOL6HY6l1c3Juyzy9JV1XIFXbGGbHa/xDy3F7J7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvAbc9JItlK9iuvNUddvPveUG4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjE0ZDNmODAtZjE0MS0z Y2ExLWEwMzYtZGM5NDFiYmVjZDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqjZLLaeL3t87o6nUnhtjgu4b5aT66k/hTdzcz9A8VPaNoozn50k3Qy Ky7DDa9DKAykJHe06NzBtBDIz3QCsepp9Ob+KNwJT6VjHqboSx6AZAW1Go/+LAW6 clNplTy0FYt+Ai1Q2OKQ/WvIFOoWfAu4nKLbVFUEo+Qbj5lB+W0nqF3w/cvKC7jg QLxpwd5AUSjr4dY7uururNSzNyWzy5rZDtyyODfEdAnLDMAWP78PnyuWYEUkhJVh RStiNX9epCAL3J1IxAs9yGK6LCfujiGHk+LNzcfYu9AfCHHotr1qALzFvhcEOukq tbIuq0Q2TmCKthzkGKQVqkCxGZhqOvk= -----END CERTIFICATE-----Generated at Wed Aug 20 11:56:11 2025 by rpki-client