$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa File: db597222-f843-3ed4-998f-1deb57292b3d.roa (raw, json) Hash identifier: i3I9ZIS7UkZuc8I4Y0Ty/g9dw/H1wQnNag4YDJ0kVjE= Subject key identifier: 53:48:6F:26:35:42:5A:10:09:5D:2F:EA:8E:8D:92:3F:F0:6E:61:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9A6876A5F44B50A100389EC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 203 IP address blocks: 130.174.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:76:a5:f4:4b:50:a1:00:38:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=7296091a-c1af-4891-8e2a-336119efd76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:be:42:3f:32:a6:7c:cc:65:70:ba:5a:c7: be:96:25:15:15:d6:24:1a:0f:f6:0a:37:75:19:c1: 63:69:58:de:1b:11:72:7f:b8:f6:52:95:8c:37:e8: a0:9a:1a:85:38:26:ee:22:e5:50:98:16:2d:0d:f3: e4:37:6f:91:19:1e:e9:e8:a6:d3:87:7e:16:37:28: a1:45:e4:93:4b:85:61:7a:7e:9f:58:97:37:69:90: e8:9b:7b:c8:60:95:38:72:e6:47:bf:0a:df:13:53: 6f:c8:e6:80:6b:c9:cf:b7:fc:35:99:9c:3f:28:c5: a4:2a:ae:7d:a4:b2:00:6a:aa:d9:79:f6:22:89:99: 78:0a:2d:e3:d3:ae:ca:c2:20:b3:c5:9b:7d:c7:34: da:43:ec:ef:e2:b6:66:2d:b9:ec:fa:41:b7:a7:3c: 76:db:6b:45:a8:51:57:4e:e0:f9:a6:92:81:69:64: 63:47:48:f2:06:88:d4:68:e2:18:8e:ff:11:3f:bf: 9c:bb:92:49:fe:e5:a8:fe:d6:84:be:66:bb:1b:7d: 58:9c:77:dc:ed:d8:2f:78:74:05:18:cc:b9:4d:b8: 18:88:2e:69:cd:67:b6:2f:2f:94:45:73:4e:ff:eb: 34:56:39:0d:05:bc:1d:42:31:80:9d:3c:2b:04:d4: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:48:6F:26:35:42:5A:10:09:5D:2F:EA:8E:8D:92:3F:F0:6E:61:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:21:3e:83:55:be:26:73:f1:d0:f1:aa:4b:b4:c1:21:17:8d: c2:e3:88:dc:89:3d:7b:bb:c8:9b:6e:c1:70:90:7c:e2:1e:99: 7c:f4:ac:8e:68:4f:97:24:37:71:50:91:a0:cd:c5:a8:27:c9: ee:f6:cf:64:eb:69:ff:0d:fd:ad:b0:a0:f1:53:8a:fc:cb:b6: c6:d8:b7:ca:10:42:19:54:ed:0d:7b:26:dc:0a:a7:7f:f0:c1: 0e:92:6f:19:d0:0a:80:ef:06:68:68:83:1e:c7:eb:e6:4b:8e: ea:dd:43:34:4b:12:39:c8:53:be:8f:7d:e1:94:14:c6:ff:d3: f8:40:36:af:3c:d6:a6:17:71:5d:dd:cf:9e:bf:27:a5:be:66: a0:ee:f7:92:e6:26:fe:7d:1e:e9:22:98:34:7c:86:bf:29:fc: b6:33:07:1b:db:46:52:3c:d2:0f:59:12:42:5c:e5:5a:8f:39: 75:c3:c7:65:c1:de:b6:97:ff:64:98:5d:16:e7:c9:6f:d4:f5: c7:90:b2:2f:51:b0:d2:d2:37:f4:45:39:35:25:71:79:e7:bd: c9:36:12:a0:66:f9:99:bf:cf:66:96:26:e3:b8:7b:53:f8:78: 6f:97:37:02:c7:b3:a0:b2:63:c9:25:7c:c9:b9:08:dd:e6:cc: b3:f3:47:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHal9EtQoQA4nsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NzI5NjA5MWEtYzFhZi00ODkxLThlMmEtMzM2MTE5ZWZkNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEO+Qj8ypnzMZXC6Wse+liUVFdYkGg/2Cjd1 GcFjaVjeGxFyf7j2UpWMN+igmhqFOCbuIuVQmBYtDfPkN2+RGR7p6KbTh34WNyih ReSTS4Vhen6fWJc3aZDom3vIYJU4cuZHvwrfE1NvyOaAa8nPt/w1mZw/KMWkKq59 pLIAaqrZefYiiZl4Ci3j067KwiCzxZt9xzTaQ+zv4rZmLbns+kG3pzx222tFqFFX TuD5ppKBaWRjR0jyBojUaOIYjv8RP7+cu5JJ/uWo/taEvma7G31YnHfc7dgveHQF GMy5TbgYiC5pzWe2Ly+URXNO/+s0VjkNBbwdQjGAnTwrBNSkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNIbyY1QloQCV0v6o6Nkj/wbmFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI1OTcyMjItZjg0My0z ZWQ0LTk5OGYtMWRlYjU3MjkyYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEhPoNVviZz8dDxqku0wSEXjcLjiNyJPXu7yJtuwXCQfOIemXz0rI5o T5ckN3FQkaDNxagnye72z2Traf8N/a2woPFTivzLtsbYt8oQQhlU7Q17JtwKp3/w wQ6SbxnQCoDvBmhogx7H6+ZLjurdQzRLEjnIU76PfeGUFMb/0/hANq881qYXcV3d z56/J6W+ZqDu95LmJv59HukimDR8hr8p/LYzBxvbRlI80g9ZEkJc5VqPOXXDx2XB 3raX/2SYXRbnyW/U9ceQsi9RsNLSN/RFOTUlcXnnvck2EqBm+Zm/z2aWJuO4e1P4 eG+XNwLHs6CyY8klfMm5CN3mzLPzRzk= -----END CERTIFICATE-----Generated at Wed Oct 28 20:43:57 2026 by rpki-client