$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bec969b2-1774-3024-9b51-ae0b218eb8f5.roa File: bec969b2-1774-3024-9b51-ae0b218eb8f5.roa (raw, json) Hash identifier: lW55tF9ZpmN/kCANOwNSJbN7TAD9BpDuqQGG5mZq/OY= Subject key identifier: C4:95:AE:D7:0F:44:23:06:3B:D6:66:59:1C:78:18:D9:74:AD:8E:14 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF717684DE224D4345B4A1780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bec969b2-1774-3024-9b51-ae0b218eb8f5.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 130.174.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:68:4d:e2:24:d4:34:5b:4a:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=14bc191f-64be-4aad-bd05-d01873fd3d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:6e:d8:aa:5b:65:1f:9c:48:76:25:08:19: 7e:39:5a:52:38:dd:52:b6:96:16:16:ff:52:b9:30: 12:64:31:88:5b:0b:c6:d2:a8:11:0f:ec:12:b5:f1: 32:84:0c:8a:8f:8b:f9:42:dc:81:84:d3:50:25:09: b4:df:5a:4d:b7:cf:00:c5:e7:5c:e1:f0:41:d8:49: 42:41:1e:11:cf:a5:3c:b7:15:cc:ad:32:e8:3d:9c: c7:fb:f9:5d:a6:0e:35:06:31:af:f0:87:a2:7a:c1: e6:13:0a:b5:9b:95:06:04:47:54:00:c9:7b:e2:bb: 7d:76:fb:0c:9d:15:4b:d6:c4:27:79:05:0d:e8:8e: fa:2f:b3:99:f4:1c:68:78:e0:1d:8c:82:8b:92:6e: 4c:0a:fc:76:48:38:47:b6:00:ec:2a:38:f3:15:46: 8e:a0:f3:34:ec:7f:ac:7c:94:c1:82:48:b3:0c:40: ce:91:1b:9c:db:65:80:36:72:c0:c1:c5:dd:49:01: 0a:7f:ee:ad:8e:cc:07:b9:de:5c:ae:31:e8:fc:f8: 98:8f:ef:07:70:3d:34:fd:ba:4d:49:ac:96:e0:b2: 08:e5:64:e9:17:e5:a0:76:13:19:6a:a5:7f:0d:92: d2:0a:0d:db:da:b4:49:09:7a:d0:27:41:fd:93:1e: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:AE:D7:0F:44:23:06:3B:D6:66:59:1C:78:18:D9:74:AD:8E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bec969b2-1774-3024-9b51-ae0b218eb8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:22:82:33:03:01:a7:97:43:83:cc:95:be:1e:30:e1:fe:dd: 2b:fe:57:f2:2c:77:88:e7:8b:77:56:93:14:1a:61:3e:c1:f3: 6b:b0:df:ca:c8:65:13:09:f4:01:2f:47:d0:08:9a:64:c7:5d: 37:11:b7:1b:75:62:f3:2b:7e:bf:93:7c:69:e3:ae:d3:5b:b6: ac:f8:89:ac:86:9d:ff:bb:c4:33:6c:98:00:df:96:e0:27:84: 98:f6:bb:f1:30:df:f2:05:b3:1e:85:d0:78:9a:81:a2:5c:84: 42:de:3c:8d:f2:f5:12:54:d7:58:e7:68:b3:da:86:63:8f:7b: 3c:af:19:e8:dd:bb:07:c3:e4:db:6f:8c:ec:02:b1:04:20:2b: fd:9a:77:53:6b:1b:76:95:9f:ab:64:a8:b7:4d:3a:04:22:1c: e4:d0:37:9e:dd:4f:eb:0b:5b:81:38:34:89:b5:81:64:5c:da: 0a:a9:be:92:67:05:5a:fb:64:7e:d3:4d:4b:66:00:bb:65:d8: 35:c0:6c:ec:51:d7:df:31:8d:8f:cc:e5:02:bd:e7:b0:54:2e: 9c:a4:1b:14:bf:86:5a:0d:3d:c7:47:9e:d4:7d:8f:68:ba:04: a2:65:55:d0:5d:14:b2:a8:fd:24:af:79:15:60:67:cf:a3:b9: 29:3a:92:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2hN4iTUNFtKF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTRiYzE5MWYtNjRiZS00YWFkLWJkMDUtZDAxODczZmQzZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2xu2KpbZR+cSHYlCBl+OVpSON1StpYWFv9S uTASZDGIWwvG0qgRD+wStfEyhAyKj4v5QtyBhNNQJQm031pNt88Axedc4fBB2ElC QR4Rz6U8txXMrTLoPZzH+/ldpg41BjGv8IeiesHmEwq1m5UGBEdUAMl74rt9dvsM nRVL1sQneQUN6I76L7OZ9BxoeOAdjIKLkm5MCvx2SDhHtgDsKjjzFUaOoPM07H+s fJTBgkizDEDOkRuc22WANnLAwcXdSQEKf+6tjswHud5crjHo/PiYj+8HcD00/bpN SayW4LII5WTpF+WgdhMZaqV/DZLSCg3b2rRJCXrQJ0H9kx5p2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSVrtcPRCMGO9ZmWRx4GNl0rY4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmVjOTY5YjItMTc3NC0z MDI0LTliNTEtYWUwYjIxOGViOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAigjMDAaeXQ4PMlb4eMOH+3Sv+V/Isd4jni3dWkxQaYT7B82uw38rI ZRMJ9AEvR9AImmTHXTcRtxt1YvMrfr+TfGnjrtNbtqz4iayGnf+7xDNsmADfluAn hJj2u/Ew3/IFsx6F0HiagaJchELePI3y9RJU11jnaLPahmOPezyvGejduwfD5Ntv jOwCsQQgK/2ad1NrG3aVn6tkqLdNOgQiHOTQN57dT+sLW4E4NIm1gWRc2gqpvpJn BVr7ZH7TTUtmALtl2DXAbOxR198xjY/M5QK957BULpykGxS/hloNPcdHntR9j2i6 BKJlVdBdFLKo/SSveRVgZ8+juSk6ksA= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:00 2026 by rpki-client