$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa File: d6456c5f-35f6-34a3-88e6-09296cb70725.roa (raw, json) Hash identifier: 42zYqFztv4v2U0cOIqFGYFqIdvxuIktVe7tN4cqiPTc= Subject key identifier: 33:5A:CE:13:AC:F5:36:34:59:7C:4A:CF:61:BD:D8:D7:AC:F8:29:A5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7B45ABBD2BCAC0F2EFC40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b4:5a:bb:d2:bc:ac:0f:2e:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=169b9bc0-3688-4a1c-a086-876dcfd3da40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:36:de:3e:43:0d:df:d9:07:5f:99:c6:07: 90:68:1b:28:07:8a:19:bb:b9:c4:4f:8f:dd:f7:54: 48:6a:1a:a3:af:6a:8c:1e:90:06:5c:34:76:ae:15: ff:4e:e0:97:a3:3c:84:cd:06:7d:89:37:8a:d0:56: 5e:6b:9d:c4:d7:de:87:55:24:60:81:d8:92:9a:19: 0f:2b:44:1f:e2:6d:92:a1:1a:d8:e8:f8:57:7b:30: 4d:f0:aa:88:c3:bf:df:17:0f:9b:07:76:9b:d0:bf: 1e:7d:28:e8:d0:9a:94:4f:80:32:49:1f:45:3b:2a: 1d:13:58:a6:29:42:ca:11:5e:e7:9e:7c:16:d4:64: 00:67:4b:c3:05:5d:46:a5:aa:5a:38:7f:32:bb:42: f1:e6:92:28:9d:56:b6:b0:47:9a:30:15:fd:24:70: 77:98:b7:74:d1:51:cf:32:33:86:12:36:51:84:8c: 40:b0:62:e4:0c:10:07:a4:a2:60:42:10:71:9c:3f: bb:0e:fa:16:a7:15:7b:97:2f:d1:95:a4:bc:fb:15: b2:2b:f5:9d:26:c0:d4:19:af:c9:2b:a0:00:40:e4: 82:ac:5e:37:a2:1e:02:c2:61:59:99:af:73:d7:ab: a1:09:0c:9d:d8:41:25:6a:7e:23:43:f7:a4:81:d1: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5A:CE:13:AC:F5:36:34:59:7C:4A:CF:61:BD:D8:D7:AC:F8:29:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:17:b9:4d:83:fd:c6:fd:6a:87:56:97:b5:1a:3e:f1:18:70: 24:36:e8:c0:bb:f9:f7:da:68:cb:c2:c8:9a:8f:3e:3c:1b:e0: f2:3b:ec:65:84:4e:4b:9c:45:4c:19:87:22:13:28:74:d1:9e: 4e:47:3e:69:df:ed:81:61:60:59:81:4d:cd:04:2f:88:2d:9f: d7:8f:b7:59:8a:45:fa:92:28:cc:3e:ff:6b:68:68:68:a5:c7: 31:1f:d5:a2:25:c8:89:84:70:16:e1:8c:a4:ad:11:5e:d1:a4: 06:58:b7:18:53:c9:3f:22:22:de:e0:87:b5:50:ab:99:85:57: 1f:36:94:ce:e7:f6:eb:6c:f6:9a:39:75:3b:36:78:a7:cf:be: fc:00:32:f4:ed:e3:f5:d3:c7:ca:7a:13:6a:3a:5b:4d:a2:02: 5c:37:05:61:a1:9c:35:cf:da:23:9c:a1:69:85:7a:92:f6:6e: ac:3f:ee:25:b8:d3:2e:80:e9:d8:26:40:5f:3c:bb:ed:fe:15: 1a:a9:6a:2d:27:9d:11:af:39:5b:2c:70:c6:b5:ef:47:fd:ee: 27:91:99:5d:63:d3:43:a2:96:64:00:e8:91:b5:b6:e8:d8:31: 2f:fc:76:03:31:a0:5c:79:71:c8:c9:7e:a1:72:76:56:9f:d8: 93:d3:51:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97Rau9K8rA8u/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MTY5YjliYzAtMzY4OC00YTFjLWEwODYtODc2ZGNmZDNkYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Y23j5DDd/ZB1+ZxgeQaBsoB4oZu7nET4/d 91RIahqjr2qMHpAGXDR2rhX/TuCXozyEzQZ9iTeK0FZea53E196HVSRggdiSmhkP K0Qf4m2SoRrY6PhXezBN8KqIw7/fFw+bB3ab0L8efSjo0JqUT4AySR9FOyodE1im KULKEV7nnnwW1GQAZ0vDBV1GpapaOH8yu0Lx5pIonVa2sEeaMBX9JHB3mLd00VHP MjOGEjZRhIxAsGLkDBAHpKJgQhBxnD+7DvoWpxV7ly/RlaS8+xWyK/WdJsDUGa/J K6AAQOSCrF43oh4CwmFZma9z16uhCQyd2EElan4jQ/ekgdFj9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNazhOs9TY0WXxKz2G92Nes+CmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDY0NTZjNWYtMzVmNi0z NGEzLTg4ZTYtMDkyOTZjYjcwNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8XuU2D/cb9aodWl7UaPvEYcCQ26MC7+ffaaMvCyJqPPjwb4PI77GWE TkucRUwZhyITKHTRnk5HPmnf7YFhYFmBTc0EL4gtn9ePt1mKRfqSKMw+/2toaGil xzEf1aIlyImEcBbhjKStEV7RpAZYtxhTyT8iIt7gh7VQq5mFVx82lM7n9uts9po5 dTs2eKfPvvwAMvTt4/XTx8p6E2o6W02iAlw3BWGhnDXP2iOcoWmFepL2bqw/7iW4 0y6A6dgmQF88u+3+FRqpai0nnRGvOVsscMa170f97ieRmV1j00OilmQA6JG1tujY MS/8dgMxoFx5ccjJfqFydlaf2JPTUcc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:44 2025 by rpki-client