$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa File: baac2399-6e65-3ceb-8e43-1020ddff7256.roa (raw, json) Hash identifier: QERybm/PAUunAli7CLthYsrVIFuky/1mLVY1Cb958CI= Subject key identifier: 93:90:45:64:63:F8:5D:9C:DC:CA:25:E5:D8:82:19:76:2B:D8:D3:F9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EC0A75D6B9D36776C992F0D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 130.174.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:5d:6b:9d:36:77:6c:99:2f:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=d3c2b736-edce-4ca5-bb16-5ae8243d8067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:c9:13:1d:69:bb:b7:1a:fe:6a:14:80:dc: 2f:b5:37:b7:f9:ca:e5:4c:b3:0e:14:1a:91:32:3a: 87:f8:2c:89:46:f8:2e:ab:67:47:7a:62:a0:67:50: 8c:c6:5e:cb:62:13:69:8e:89:0d:fe:06:93:c0:e9: 7a:e7:68:51:b9:45:54:e8:f1:35:1d:bb:38:81:84: e7:74:91:57:04:4d:87:f1:8b:e9:54:bd:9d:79:e5: 95:e2:63:4d:78:19:c6:81:51:ac:36:de:d2:af:f8: 67:0c:c3:3a:37:75:09:09:30:88:f4:99:11:31:fd: 91:cc:4c:73:34:69:b4:e0:eb:8f:39:ad:d7:bd:4b: df:ca:ab:cb:e2:eb:ee:0b:83:b0:e8:03:b1:f7:c0: d6:cc:3f:1f:f1:b7:1b:63:f4:48:f0:bd:10:0a:7a: de:b8:0c:3f:15:43:9a:cc:cf:4f:e4:68:bc:07:e0: e3:0a:04:9f:e8:16:ab:d5:c2:44:b0:c3:15:3d:43: 2f:f3:1e:79:c4:75:a5:7b:8e:78:36:57:98:52:66: e6:d8:11:3c:70:f5:5b:79:5b:6e:71:ea:51:1e:3e: 64:3d:e2:b2:ce:20:6e:8a:22:6b:a2:cb:15:2a:ef: 40:f2:bb:4f:fe:93:60:20:fb:70:d3:7d:91:74:7b: ec:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:45:64:63:F8:5D:9C:DC:CA:25:E5:D8:82:19:76:2B:D8:D3:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:06:c0:a4:97:8e:b7:23:b3:6a:d5:c5:16:ed:d5:b1:13:17: 7b:5b:64:0e:6a:34:a2:9f:22:3e:38:a1:a3:61:df:b3:5c:10: c9:20:1c:04:a6:19:88:30:13:b3:f9:1e:9c:86:1b:0a:1f:45: 70:fa:ac:c3:be:3c:f0:d2:93:a8:1a:81:16:81:95:21:43:00: de:9e:bd:e8:19:69:a4:d7:61:84:d3:dd:7f:29:7b:b4:4d:e2: ec:77:57:0d:08:52:a7:1a:67:b5:15:f3:a5:6f:25:e9:ac:7c: a3:e0:44:77:09:c8:33:60:9c:84:f3:f8:54:68:41:b4:9c:6f: 17:bf:90:28:66:9c:12:ad:22:8e:63:80:c5:e9:38:e2:10:33: 49:78:46:9b:f3:5b:22:b9:2a:3d:ac:d2:0a:c1:61:43:79:3d: 92:cf:13:2c:9c:23:c6:4c:70:fc:77:76:af:20:8d:fd:37:6c: 68:76:7c:45:89:c7:da:60:37:4d:85:d7:8f:d1:ac:34:58:d2: 97:47:51:11:29:99:74:10:39:16:58:6c:62:06:bc:19:fc:5a: 3a:cb:76:50:1e:89:3a:54:9b:8b:05:d1:b1:be:3f:a0:cd:7d: f6:28:f8:71:8e:9b:37:15:8d:c8:1c:64:4e:d1:d8:c8:26:7e: ba:3c:bf:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap11rnTZ3bJkvDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDNjMmI3MzYtZWRjZS00Y2E1LWJiMTYtNWFlODI0M2Q4MDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdPJEx1pu7ca/moUgNwvtTe3+crlTLMOFBqR MjqH+CyJRvguq2dHemKgZ1CMxl7LYhNpjokN/gaTwOl652hRuUVU6PE1Hbs4gYTn dJFXBE2H8YvpVL2deeWV4mNNeBnGgVGsNt7Sr/hnDMM6N3UJCTCI9JkRMf2RzExz NGm04OuPOa3XvUvfyqvL4uvuC4Ow6AOx98DWzD8f8bcbY/RI8L0QCnreuAw/FUOa zM9P5Gi8B+DjCgSf6Bar1cJEsMMVPUMv8x55xHWle454NleYUmbm2BE8cPVbeVtu cepRHj5kPeKyziBuiiJrossVKu9A8rtP/pNgIPtw032RdHvsFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOQRWRj+F2c3Mol5diCGXYr2NP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFhYzIzOTktNmU2NS0z Y2ViLThlNDMtMTAyMGRkZmY3MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYGwKSXjrcjs2rVxRbt1bETF3tbZA5qNKKfIj44oaNh37NcEMkgHASm GYgwE7P5HpyGGwofRXD6rMO+PPDSk6gagRaBlSFDAN6evegZaaTXYYTT3X8pe7RN 4ux3Vw0IUqcaZ7UV86VvJemsfKPgRHcJyDNgnITz+FRoQbScbxe/kChmnBKtIo5j gMXpOOIQM0l4RpvzWyK5Kj2s0grBYUN5PZLPEyycI8ZMcPx3dq8gjf03bGh2fEWJ x9pgN02F14/RrDRY0pdHUREpmXQQORZYbGIGvBn8WjrLdlAeiTpUm4sF0bG+P6DN ffYo+HGOmzcVjcgcZE7R2Mgmfro8vxM= -----END CERTIFICATE-----Generated at Wed Sep 9 00:51:05 2026 by rpki-client