$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa File: d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa (raw, json) Hash identifier: 1LvE9oR/Tnrxy90lkWS0VHwxbcdsE4WKFwuTWF0UkUI= Subject key identifier: 94:33:A6:B0:87:6C:3F:AE:0B:47:E3:04:FE:6D:F1:F4:0B:59:37:F3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDCA589C90F7A76AE5BE20 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 203 IP address blocks: 130.174.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ca:58:9c:90:f7:a7:6a:e5:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=14f45fc3-4713-4181-8d9b-b7870f9ee4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:2e:c2:30:c0:3d:be:e5:23:73:7a:56:0c: f6:78:99:06:aa:69:e3:83:22:33:44:b5:64:74:19: 2a:a4:3d:01:69:2a:24:45:24:5d:0c:e6:fd:3c:4e: 5f:94:ec:0e:93:cf:9e:d0:53:b3:4b:69:b1:95:66: 85:80:e0:34:5d:18:7e:f5:e2:d1:c1:c0:fc:1d:d4: 7f:1a:a6:94:51:a2:a9:a4:80:5a:0a:2e:59:25:21: fa:d5:08:6e:78:6a:37:03:11:02:cb:fa:f1:3d:6f: 8f:ee:bb:4a:e0:08:60:11:da:9e:98:c3:d7:17:ad: 0b:cb:af:9d:aa:c4:82:84:48:a6:06:61:4b:01:8c: 79:79:1f:fa:60:85:4b:d4:80:5b:c1:a9:fb:cc:49: ef:17:2a:5a:9d:dc:57:8b:9f:83:7c:2c:24:b7:9a: ad:21:4b:44:55:47:24:32:9b:bf:cb:96:5e:d4:56: ef:9e:db:39:3d:99:4f:ad:ee:94:aa:78:d3:66:e8: 3f:01:72:55:0c:ec:07:aa:b7:6b:a8:45:ea:4a:93: a2:7c:3f:8d:20:c7:dd:89:86:50:f6:9c:53:22:ea: 1f:47:68:52:e1:d0:73:d0:ce:97:fb:6c:be:99:88: 74:3b:f1:03:f9:4d:e7:88:cb:1f:4f:4e:b0:be:63: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:33:A6:B0:87:6C:3F:AE:0B:47:E3:04:FE:6D:F1:F4:0B:59:37:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d7bb3f29-eb6f-36f3-a315-fce87cd1e452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:50:cc:85:c0:dc:65:81:bf:28:d1:d1:23:fe:e7:89:7e:8b: bc:76:23:c9:d9:81:4a:c5:f6:a7:ef:ba:17:43:06:23:de:17: b4:c3:66:65:c9:fe:96:40:e0:08:c5:dd:68:29:df:e4:e8:ce: f9:f9:93:86:63:4a:38:30:c0:2b:98:0c:91:59:f9:82:a4:3a: 2e:c2:9a:95:84:bd:7a:22:53:02:b6:f8:7a:44:93:6b:31:3c: a9:2a:f3:36:2b:ea:50:62:02:13:f6:e3:1a:77:f4:aa:85:39: f6:30:4d:c0:24:e1:82:09:1d:8a:ec:9b:94:04:be:60:b9:b1: f7:ff:d8:98:f0:8e:e7:92:ee:d5:cc:86:70:aa:99:22:14:7d: 77:53:bb:09:da:e2:54:95:3e:de:f4:39:b1:8a:18:25:92:35: 32:f0:63:92:ab:d6:c2:17:3d:74:aa:8d:e1:bf:cd:8f:74:f7: b3:d8:25:f6:6d:02:91:c1:87:d0:de:cb:2f:97:05:69:49:32: cb:88:3b:32:09:59:aa:78:15:4d:83:ff:26:76:2a:99:37:94: cb:3d:84:2c:50:0b:34:72:cb:69:d7:e8:22:3c:16:86:55:1c: da:1a:a5:1b:a4:24:88:9e:d4:ac:62:43:e8:ed:f2:61:12:e8: 5f:47:de:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcpYnJD3p2rlviAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MTRmNDVmYzMtNDcxMy00MTgxLThkOWItYjc4NzBmOWVlNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQuwjDAPb7lI3N6Vgz2eJkGqmnjgyIzRLVk dBkqpD0BaSokRSRdDOb9PE5flOwOk8+e0FOzS2mxlWaFgOA0XRh+9eLRwcD8HdR/ GqaUUaKppIBaCi5ZJSH61QhueGo3AxECy/rxPW+P7rtK4AhgEdqemMPXF60Ly6+d qsSChEimBmFLAYx5eR/6YIVL1IBbwan7zEnvFypandxXi5+DfCwkt5qtIUtEVUck Mpu/y5Ze1Fbvnts5PZlPre6UqnjTZug/AXJVDOwHqrdrqEXqSpOifD+NIMfdiYZQ 9pxTIuofR2hS4dBz0M6X+2y+mYh0O/ED+U3niMsfT06wvmPefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQzprCHbD+uC0fjBP5t8fQLWTfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDdiYjNmMjktZWI2Zi0z NmYzLWEzMTUtZmNlODdjZDFlNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARQzIXA3GWBvyjR0SP+54l+i7x2I8nZgUrF9qfvuhdDBiPeF7TDZmXJ /pZA4AjF3Wgp3+Tozvn5k4ZjSjgwwCuYDJFZ+YKkOi7CmpWEvXoiUwK2+HpEk2sx PKkq8zYr6lBiAhP24xp39KqFOfYwTcAk4YIJHYrsm5QEvmC5sff/2JjwjueS7tXM hnCqmSIUfXdTuwna4lSVPt70ObGKGCWSNTLwY5Kr1sIXPXSqjeG/zY9097PYJfZt ApHBh9Deyy+XBWlJMsuIOzIJWap4FU2D/yZ2Kpk3lMs9hCxQCzRyy2nX6CI8FoZV HNoapRukJIie1KxiQ+jt8mES6F9H3hY= -----END CERTIFICATE-----Generated at Tue Oct 27 13:03:06 2026 by rpki-client