$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa File: ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa (raw, json) Hash identifier: SAD0XsaGZKKskpfPOwNXv1iT6e7C9hT5TwwunDFBkbo= Subject key identifier: 30:61:AD:B9:22:B1:39:3D:59:D0:8A:87:25:35:1B:58:F8:CC:00:B6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDC80C7527B974DCDADB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 130.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c8:0c:75:27:b9:74:dc:da:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=4fa37e04-5f2a-4568-9565-b38225ef4ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:57:d4:68:45:bc:cb:57:54:fe:8e:be:62: ae:55:c8:2b:04:8d:c6:e6:aa:41:4e:09:32:0d:a9: 90:68:32:75:b7:ee:e8:eb:a1:3f:d2:19:1f:77:90: e9:bd:6d:f4:a9:3b:52:1f:65:2c:4f:8f:f2:e0:7e: 3e:ca:8d:bc:70:8a:56:87:92:a5:47:56:02:05:d0: d7:4b:12:0c:7c:5f:54:a5:3b:44:86:15:6e:23:a2: 53:7f:c5:69:10:83:74:d0:99:54:cf:20:e2:20:e2: b1:c1:02:56:8f:45:da:00:84:f4:ac:23:9a:9f:d8: b6:de:55:7e:48:a3:4e:02:e8:3f:f1:8d:a8:2e:23: 9b:02:29:fa:c4:95:6a:7d:a6:26:63:dd:e1:3c:0a: 76:cd:d9:f7:17:8d:8c:15:55:1c:cd:59:51:23:62: 78:00:96:b9:b9:d2:b0:ec:11:68:9e:4b:ac:ff:b2: 90:94:45:e7:c7:76:6c:90:49:c4:da:be:0b:fa:14: f5:4b:20:6b:c8:5a:24:4b:c4:c6:94:51:11:c1:93: aa:f9:8f:91:92:72:59:95:b5:c7:8a:64:50:6a:c7: 29:12:4f:a8:8b:50:0f:fa:73:30:71:96:f0:99:a3: 07:54:b3:2a:64:c0:d3:e5:a4:de:a8:40:ee:e8:34: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:61:AD:B9:22:B1:39:3D:59:D0:8A:87:25:35:1B:58:F8:CC:00:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b4:94:62:4d:28:5b:97:e0:e1:10:be:59:97:0d:7b:f3:fc: 3c:0e:49:48:71:0a:4a:f6:03:eb:7d:76:6c:3f:b1:77:e0:5a: 35:a5:62:c7:7d:ba:44:ef:44:8a:9e:e7:1c:af:8c:9e:86:5f: d0:5e:99:dc:b3:98:65:2d:10:d8:48:c0:88:7b:b7:60:cd:c8: f9:8c:6c:90:7e:b0:02:fb:9e:24:22:c6:5a:30:2f:16:e3:17: ec:bf:95:f2:80:cb:a1:ff:a2:e1:50:b2:c8:32:02:23:f0:78: 84:83:16:2f:f7:ac:eb:68:94:a6:d1:19:44:e2:4b:cf:6e:8e: 76:bc:a7:41:ca:8e:13:00:c6:f7:be:95:5c:f8:a0:f8:9f:9b: 2a:15:0a:79:75:47:e3:0e:77:c7:5f:25:80:49:f8:0a:19:de: 33:58:b2:51:09:cf:7b:a1:0e:6f:4e:cb:52:8b:80:32:c1:93: 44:72:b8:0e:a1:49:83:71:77:ed:ca:3b:42:7f:0c:e8:46:d6: d8:55:ea:74:e4:2f:8a:6b:29:5b:63:75:b1:2f:2b:ec:75:51: 5b:53:f2:de:c7:75:55:50:21:d9:0c:cc:2e:f9:61:cf:4d:5b: 13:30:77:68:15:5c:f5:a8:0d:df:8b:d6:e2:95:95:ef:45:0c: 72:b7:3d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcgMdSe5dNza2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NGZhMzdlMDQtNWYyYS00NTY4LTk1NjUtYjM4MjI1ZWY0Y2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppX1GhFvMtXVP6OvmKuVcgrBI3G5qpBTgky DamQaDJ1t+7o66E/0hkfd5DpvW30qTtSH2UsT4/y4H4+yo28cIpWh5KlR1YCBdDX SxIMfF9UpTtEhhVuI6JTf8VpEIN00JlUzyDiIOKxwQJWj0XaAIT0rCOan9i23lV+ SKNOAug/8Y2oLiObAin6xJVqfaYmY93hPAp2zdn3F42MFVUczVlRI2J4AJa5udKw 7BFonkus/7KQlEXnx3ZskEnE2r4L+hT1SyBryFokS8TGlFERwZOq+Y+RknJZlbXH imRQascpEk+oi1AP+nMwcZbwmaMHVLMqZMDT5aTeqEDu6DSX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBhrbkisTk9WdCKhyU1G1j4zAC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmE4YTMwYzMtMDNkNi0z MmQzLWI2YjQtOGE1ZmYzNWMxYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH20lGJNKFuX4OEQvlmXDXvz/DwOSUhxCkr2A+t9dmw/sXfgWjWlYsd9 ukTvRIqe5xyvjJ6GX9BemdyzmGUtENhIwIh7t2DNyPmMbJB+sAL7niQixlowLxbj F+y/lfKAy6H/ouFQssgyAiPweISDFi/3rOtolKbRGUTiS89ujna8p0HKjhMAxve+ lVz4oPifmyoVCnl1R+MOd8dfJYBJ+AoZ3jNYslEJz3uhDm9Oy1KLgDLBk0RyuA6h SYNxd+3KO0J/DOhG1thV6nTkL4prKVtjdbEvK+x1UVtT8t7HdVVQIdkMzC75Yc9N WxMwd2gVXPWoDd+L1uKVle9FDHK3PVY= -----END CERTIFICATE-----Generated at Sat Oct 24 19:24:30 2026 by rpki-client