$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa File: baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa (raw, json) Hash identifier: pOJX7Hpn6Dbus6joQO8i7V4+oCktQG+MRjKQ9jdwtUE= Subject key identifier: CD:B3:53:A0:F7:20:C5:5E:59:9C:65:C6:88:80:BC:E2:AA:75:9A:75 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C9F90B177CE833146340 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c9:f9:0b:17:7c:e8:33:14:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=43de6126-6177-40c5-8914-f51c41d9acaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:f6:af:4a:bf:33:69:af:2c:9e:69:bd:da: 01:22:9e:34:9a:83:03:0e:18:8b:c7:a5:3a:59:e5: a6:f9:b8:52:81:60:f0:fd:6b:17:02:97:1a:50:20: bc:73:24:3b:9a:41:70:cc:fa:03:db:34:5b:bd:88: f3:e9:27:7b:f1:8e:00:5d:28:44:d2:20:d6:63:9f: dc:be:0b:59:4b:15:c1:9c:94:b6:a7:0a:f9:33:2e: 34:36:ed:d7:61:38:40:2d:99:54:5b:54:de:4b:33: 01:12:da:f9:a5:7d:a0:90:dc:8c:34:36:03:c3:4d: 4a:35:80:55:b0:a6:ed:06:f8:c9:24:b5:7c:4b:f8: 5c:73:f4:a0:ab:ed:a6:74:ac:7d:4a:02:99:57:51: 52:00:33:43:40:f0:ec:00:3a:56:cf:7c:93:a1:65: 43:b7:98:55:df:c4:d5:76:49:a0:de:f6:08:b3:df: 17:a4:7c:cb:6c:1c:21:2b:f9:f1:d2:5e:83:66:47: a6:9f:e2:2d:fe:a3:84:81:5e:f4:01:0e:81:5c:ed: b5:b7:41:85:9f:b2:59:60:e0:43:49:5f:41:db:ec: d4:1d:2f:75:8a:94:36:8f:1f:ad:9c:52:87:1a:24: de:12:41:f3:9b:2a:b6:01:33:c6:73:3b:cb:38:cf: 65:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B3:53:A0:F7:20:C5:5E:59:9C:65:C6:88:80:BC:E2:AA:75:9A:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b3:ae:fd:8b:d7:2b:0a:de:2d:95:98:13:2e:83:b5:41:da: 96:63:48:f7:e2:dd:0f:25:a3:ca:7d:9a:9a:68:01:97:a3:67: 02:d3:cb:a8:32:af:ee:b8:9f:cb:7f:05:dc:e3:06:51:7b:71: ea:96:a1:a4:66:16:00:05:8e:3b:aa:82:1a:dd:44:b7:2b:20: b7:04:6a:02:03:78:d4:d2:34:b5:5e:e6:36:31:c5:2d:de:a1: 09:60:d9:55:8a:64:55:7a:f1:03:ce:d4:93:1a:fe:3b:91:6b: 9b:42:e4:97:e6:99:82:50:c5:10:8b:a1:80:0f:a5:e7:85:70: d9:d1:30:9e:c6:1c:b1:75:ea:db:46:3c:bf:a0:fd:31:ec:68: c8:ba:2f:fd:81:20:6b:e6:6c:11:61:ad:47:7f:ea:15:60:88: 1d:0d:08:63:f8:41:9f:fb:00:d7:18:e8:62:47:01:66:cd:ef: 14:33:59:d4:9a:a6:4a:e7:07:57:3f:a3:19:28:e9:62:27:fa: c1:b9:fb:32:3f:99:fa:5c:fd:81:83:f4:22:1f:fd:7a:8a:1c: dd:45:f0:d6:8d:56:f0:8f:bd:bf:93:1a:9f:ab:98:88:f6:09: ff:15:e4:ec:72:b7:e0:50:c1:38:2d:9c:02:b2:d4:45:50:b8: 45:e9:bb:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98n5Cxd86DMUY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NDNkZTYxMjYtNjE3Ny00MGM1LTg5MTQtZjUxYzQxZDlhY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHn2r0q/M2mvLJ5pvdoBIp40moMDDhiLx6U6 WeWm+bhSgWDw/WsXApcaUCC8cyQ7mkFwzPoD2zRbvYjz6Sd78Y4AXShE0iDWY5/c vgtZSxXBnJS2pwr5My40Nu3XYThALZlUW1TeSzMBEtr5pX2gkNyMNDYDw01KNYBV sKbtBvjJJLV8S/hcc/Sgq+2mdKx9SgKZV1FSADNDQPDsADpWz3yToWVDt5hV38TV dkmg3vYIs98XpHzLbBwhK/nx0l6DZkemn+It/qOEgV70AQ6BXO21t0GFn7JZYOBD SV9B2+zUHS91ipQ2jx+tnFKHGiTeEkHzmyq2ATPGczvLOM9lhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2zU6D3IMVeWZxlxoiAvOKqdZp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFmNDY4YzYtMzZjYi0z NTJlLThjNzMtMzI2NmQyZmM1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHezrv2L1ysK3i2VmBMug7VB2pZjSPfi3Q8lo8p9mppoAZejZwLTy6gy r+64n8t/BdzjBlF7ceqWoaRmFgAFjjuqghrdRLcrILcEagIDeNTSNLVe5jYxxS3e oQlg2VWKZFV68QPO1JMa/juRa5tC5JfmmYJQxRCLoYAPpeeFcNnRMJ7GHLF16ttG PL+g/THsaMi6L/2BIGvmbBFhrUd/6hVgiB0NCGP4QZ/7ANcY6GJHAWbN7xQzWdSa pkrnB1c/oxko6WIn+sG5+zI/mfpc/YGD9CIf/XqKHN1F8NaNVvCPvb+TGp+rmIj2 Cf8V5Oxyt+BQwTgtnAKy1EVQuEXpuz0= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:11 2025 by rpki-client