$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa File: bfb6b141-6a57-3161-831c-725299707029.roa (raw, json) Hash identifier: 3DVvGzZJeG0GHd2X381/3b+yTeafI4eGjBDz8JyDoZ0= Subject key identifier: 40:04:F0:07:B9:8C:16:11:16:8B:8F:16:C7:2B:87:B7:C6:86:1C:87 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7177429155B98CDB75AC800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3360 IP address blocks: 130.174.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:74:29:15:5b:98:cd:b7:5a:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=4b27a33d-4130-4d0e-88dd-3bd5d1101776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:c2:bb:cd:ef:28:17:f2:68:f5:1b:91:63: b5:6a:3f:a4:ce:14:30:85:b9:76:94:bd:4a:19:78: 72:5e:3c:eb:1a:94:c7:4e:32:60:85:2d:f6:a1:1d: d3:bd:ca:06:61:26:2a:a1:32:b6:00:7c:51:89:30: 2c:6c:83:ee:b8:5b:eb:f7:bc:c1:6a:65:81:61:fa: 20:79:51:f5:e4:1c:d9:d4:cc:95:76:ac:83:cb:cb: f8:8d:db:9e:72:b2:ad:50:f1:32:7e:e0:f4:1e:32: c9:48:1b:b4:c4:4a:f8:ad:cc:c7:d1:1c:3b:8c:36: c3:50:db:cb:42:fa:f5:4c:96:b6:18:90:2a:22:32: bb:11:aa:35:9b:85:51:41:51:5b:58:13:9c:4b:10: 41:56:39:ac:a9:3d:8f:f6:11:98:a4:d9:2b:ee:7e: dc:fa:d3:aa:ec:74:c9:9b:4f:94:f8:9e:1a:c9:3a: 57:be:f4:d1:99:a6:4a:2a:a9:26:ac:d1:e1:46:ca: bb:03:8f:6f:05:b2:1c:69:00:53:1f:62:fc:7d:4f: c4:5d:a7:6a:0f:9a:b0:9a:d2:99:57:f3:11:51:e8: 1a:ef:e9:cd:2a:06:1a:aa:d3:e9:b3:d4:9c:db:33: d8:51:e4:82:ba:56:a6:09:7c:0c:35:98:b7:4e:1a: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:04:F0:07:B9:8C:16:11:16:8B:8F:16:C7:2B:87:B7:C6:86:1C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:fe:8a:09:4c:1e:a4:59:a7:42:9d:dc:d3:40:a2:1d:b1:20: fa:07:33:5e:1e:96:f1:d5:f0:5a:c6:95:b2:f0:74:9c:34:51: 84:f8:aa:8f:bb:50:0b:b6:94:5f:59:cf:6d:73:80:8b:b9:8f: 17:e0:f1:85:4c:c5:04:2c:d2:6f:60:f8:8b:f8:1c:57:49:9d: 57:89:10:6a:e9:74:8e:36:19:4c:f0:7f:06:8a:2d:bd:f1:10: 7b:e2:7d:74:a5:ba:db:78:a8:2e:16:87:af:09:25:70:8e:b9: 40:d5:2e:3d:dc:cb:af:19:43:09:05:ee:45:b0:6c:04:21:cf: 5a:1d:b4:d8:42:d0:e4:ec:a3:c5:f8:97:13:48:17:da:3d:11: e8:61:b5:9a:e1:59:9b:1d:b2:42:19:d8:24:91:ba:25:9a:9d: 7c:2a:6a:f6:12:22:41:00:bc:a2:81:a0:d4:ea:21:35:82:74: 6e:f5:e0:5c:1d:3b:ef:4f:6b:4a:62:ed:b4:61:9e:05:d5:58: 66:e6:b4:75:af:05:02:8b:a9:d8:a5:d8:fe:a3:c3:53:57:d8: 74:67:00:fa:e7:c3:b9:f6:63:c7:52:76:a7:4b:0f:f4:bb:b7: aa:aa:af:89:20:d5:0f:1d:91:d4:42:5b:28:00:71:af:c3:90: 5c:b2:24:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3QpFVuYzbdayAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NGIyN2EzM2QtNDEzMC00ZDBlLTg4ZGQtM2JkNWQxMTAxNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5rCu83vKBfyaPUbkWO1aj+kzhQwhbl2lL1K GXhyXjzrGpTHTjJghS32oR3TvcoGYSYqoTK2AHxRiTAsbIPuuFvr97zBamWBYfog eVH15BzZ1MyVdqyDy8v4jduecrKtUPEyfuD0HjLJSBu0xEr4rczH0Rw7jDbDUNvL Qvr1TJa2GJAqIjK7Eao1m4VRQVFbWBOcSxBBVjmsqT2P9hGYpNkr7n7c+tOq7HTJ m0+U+J4ayTpXvvTRmaZKKqkmrNHhRsq7A49vBbIcaQBTH2L8fU/EXadqD5qwmtKZ V/MRUega7+nNKgYaqtPps9Sc2zPYUeSCulamCXwMNZi3ThokEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAE8Ae5jBYRFouPFscrh7fGhhyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZiNmIxNDEtNmE1Ny0z MTYxLTgzMWMtNzI1Mjk5NzA3MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP+iglMHqRZp0Kd3NNAoh2xIPoHM14elvHV8FrGlbLwdJw0UYT4qo+7 UAu2lF9Zz21zgIu5jxfg8YVMxQQs0m9g+Iv4HFdJnVeJEGrpdI42GUzwfwaKLb3x EHvifXSlutt4qC4Wh68JJXCOuUDVLj3cy68ZQwkF7kWwbAQhz1odtNhC0OTso8X4 lxNIF9o9EehhtZrhWZsdskIZ2CSRuiWanXwqavYSIkEAvKKBoNTqITWCdG714Fwd O+9Pa0pi7bRhngXVWGbmtHWvBQKLqdil2P6jw1NX2HRnAPrnw7n2Y8dSdqdLD/S7 t6qqr4kg1Q8dkdRCWygAca/DkFyyJAg= -----END CERTIFICATE-----Generated at Sun Oct 11 17:42:04 2026 by rpki-client