$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa File: db597222-f843-3ed4-998f-1deb57292b3d.roa (raw, json) Hash identifier: UfAH4gZmq33lfAMTwabqyw/KW/2hldRT/Rgb+wh8mXU= Subject key identifier: 1A:19:89:48:BD:7B:9F:AD:05:EC:60:09:9E:25:EC:6E:AC:B0:17:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF717719C6E38DB61208B8E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 130.174.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:71:9c:6e:38:db:61:20:8b:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=8bcaa41f-98a4-40db-9ae7-107db2d8b826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2c:d3:75:a5:5d:2e:84:a1:a7:80:70:2d:1c: 38:a4:29:46:6b:7f:b1:ac:e0:a8:78:d2:d4:10:c0: 7b:15:fe:85:e7:19:a6:dc:6d:de:d7:93:44:cc:06: b2:3b:e1:ff:8d:44:13:2c:33:0d:e3:e6:52:cc:a2: 25:94:00:4b:17:1d:a3:09:a5:88:f4:35:3f:94:89: ae:e6:7d:03:fb:8c:b2:cf:4c:fa:d2:75:1e:41:cd: 2b:73:10:aa:70:1f:b3:0a:55:3b:ce:b3:ae:19:0d: ac:e9:b4:3b:dc:d5:1e:c3:44:e2:1f:45:e6:4e:cc: ea:7d:0e:67:c1:88:90:37:78:45:1e:78:f9:cc:1b: bb:7a:55:11:50:d7:6d:83:62:55:96:c3:f4:4f:52: e7:8e:18:94:70:a9:a0:fd:04:41:9d:8a:03:31:25: cf:d1:37:12:e2:0d:b2:66:56:cf:10:b3:23:45:db: 78:ba:93:ca:8b:72:88:4f:65:6d:38:d5:e4:26:d0: c0:06:e4:13:4c:d9:78:c9:80:28:01:43:94:ff:79: 90:92:99:07:0b:2c:d1:c5:58:10:e9:c3:45:a7:e8: 81:b1:ae:5d:ba:9a:9a:dd:74:6a:2d:1e:42:87:0d: 4b:49:92:65:c1:b4:88:70:dc:23:5b:1d:d8:bb:13: 8c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:19:89:48:BD:7B:9F:AD:05:EC:60:09:9E:25:EC:6E:AC:B0:17:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:78:45:c8:36:0e:a8:e0:21:e5:3f:e4:89:e4:53:f7:07:eb: dc:00:0d:ee:13:07:d9:8f:3e:71:9e:49:2c:f1:f4:82:0c:67: 91:7b:a0:66:71:f2:67:98:98:e7:df:51:1b:86:e6:6f:89:b3: 42:dd:c0:7f:99:d4:3c:f3:4f:c9:41:32:be:ab:22:b4:37:d6: 6b:62:34:63:c5:4d:f9:a4:09:54:9f:46:cc:87:d0:d2:47:3a: 22:38:80:e6:e6:35:34:f1:9f:68:af:17:3a:11:af:46:aa:ea: 4f:e3:c5:e6:93:d3:e2:7a:a8:d7:83:4c:ea:a7:c4:f0:ac:f0: 63:5d:38:70:84:cc:4e:82:b6:b0:8d:f5:01:67:4d:38:df:ff: 28:60:7c:79:23:a7:8c:c5:0d:d8:53:ed:a5:d6:da:8e:3e:9d: b0:5b:30:f5:c6:8d:eb:0a:87:5f:06:67:8d:c4:9c:03:f2:b1: 51:e3:cb:40:ce:42:58:4e:75:59:42:3e:c1:da:5a:14:e6:3f: 05:83:b1:63:a3:0f:9d:8d:a6:a8:c3:48:7c:43:a0:71:12:24: 05:89:c8:57:26:c2:87:5f:6f:a4:f0:cf:13:a8:f7:e9:a4:1f: 91:c3:95:e5:6b:27:1b:62:3f:74:14:9d:0b:0e:80:4d:1c:6c: fe:44:e1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3GcbjjbYSCLjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk OGJjYWE0MWYtOThhNC00MGRiLTlhZTctMTA3ZGIyZDhiODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCzTdaVdLoShp4BwLRw4pClGa3+xrOCoeNLU EMB7Ff6F5xmm3G3e15NEzAayO+H/jUQTLDMN4+ZSzKIllABLFx2jCaWI9DU/lImu 5n0D+4yyz0z60nUeQc0rcxCqcB+zClU7zrOuGQ2s6bQ73NUew0TiH0XmTszqfQ5n wYiQN3hFHnj5zBu7elURUNdtg2JVlsP0T1LnjhiUcKmg/QRBnYoDMSXP0TcS4g2y ZlbPELMjRdt4upPKi3KIT2VtONXkJtDABuQTTNl4yYAoAUOU/3mQkpkHCyzRxVgQ 6cNFp+iBsa5dupqa3XRqLR5Chw1LSZJlwbSIcNwjWx3YuxOMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoZiUi9e5+tBexgCZ4l7G6ssBdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI1OTcyMjItZjg0My0z ZWQ0LTk5OGYtMWRlYjU3MjkyYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ4Rcg2DqjgIeU/5InkU/cH69wADe4TB9mPPnGeSSzx9IIMZ5F7oGZx 8meYmOffURuG5m+Js0LdwH+Z1DzzT8lBMr6rIrQ31mtiNGPFTfmkCVSfRsyH0NJH OiI4gObmNTTxn2ivFzoRr0aq6k/jxeaT0+J6qNeDTOqnxPCs8GNdOHCEzE6CtrCN 9QFnTTjf/yhgfHkjp4zFDdhT7aXW2o4+nbBbMPXGjesKh18GZ43EnAPysVHjy0DO QlhOdVlCPsHaWhTmPwWDsWOjD52NpqjDSHxDoHESJAWJyFcmwodfb6TwzxOo9+mk H5HDleVrJxtiP3QUnQsOgE0cbP5E4bA= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:47 2026 by rpki-client