$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa File: dd9f908b-e4fc-32a0-b013-15842bd0459e.roa (raw, json) Hash identifier: 005QfFJUe1+3kUVslUY+Nwnce7654iHDfWdYEdb6Tl0= Subject key identifier: 40:AD:ED:A8:7B:9A:86:02:C8:0C:30:CC:09:21:B3:77:19:39:69:DA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF71768B56DFEC228603EB480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 203 IP address blocks: 130.174.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:68:b5:6d:fe:c2:28:60:3e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=a2e8bf74-9a3e-429c-93fe-3553effece97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:4f:1c:93:69:e8:dd:ae:bc:d3:7d:7e:ae: b5:94:cf:bd:fd:b3:71:e8:14:63:38:54:10:fb:e7: 15:8c:7b:57:94:61:76:3b:b0:05:ea:9c:8a:f5:b5: eb:7e:05:95:24:b9:e0:b7:f5:1c:3f:ca:9c:3c:54: 7d:84:3f:8e:c7:80:25:b2:a2:64:f8:74:9f:32:48: da:92:b5:d7:0f:1a:72:7e:aa:13:d3:ca:37:e4:ee: 85:73:c8:96:7a:13:d6:10:3c:b4:2b:98:e2:c5:7b: ca:52:b0:cf:43:7d:b5:d4:b7:3f:3a:4d:19:cf:64: 4f:7c:43:f2:80:09:c8:00:6d:07:24:f6:03:53:b6: 79:e0:23:b8:25:66:7f:fb:4b:e9:09:3d:68:ba:18: a1:ff:11:64:63:8e:30:bb:99:16:cd:2d:c6:1c:da: f7:09:36:7c:f3:7c:0c:bd:e1:bf:4f:09:47:72:50: c2:26:53:83:7a:ca:af:55:54:1b:26:98:81:d4:da: 58:05:73:62:ce:82:c4:77:75:a0:a1:18:58:e7:69: 04:52:f5:ec:2e:6c:89:c8:54:94:f4:34:77:b8:bb: ec:3f:a7:47:eb:f4:b9:15:1d:34:31:c2:b5:21:7b: 9c:3a:d1:cb:03:de:dc:6f:93:2c:02:99:eb:2e:21: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AD:ED:A8:7B:9A:86:02:C8:0C:30:CC:09:21:B3:77:19:39:69:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dd9f908b-e4fc-32a0-b013-15842bd0459e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1a:1e:e7:15:a6:34:25:84:2c:4f:19:a5:15:66:d0:05:24: fb:f4:48:65:32:e5:3c:7a:03:8d:4e:68:77:8b:ef:8b:91:32: bf:3b:4c:e6:58:8b:c9:b4:f3:e9:ce:a4:22:79:b8:72:30:80: 47:6d:a5:4e:a8:a1:49:3d:f6:04:d5:eb:be:a5:a6:ee:77:bc: 81:6a:98:14:e0:f7:98:6f:16:af:b6:6c:41:95:5d:3c:ff:93: 35:64:7a:c8:06:05:b1:5a:c7:d4:15:6a:e4:57:41:4e:7c:bb: 16:57:c4:c1:66:09:bf:bc:a2:c5:94:4a:27:1d:93:4b:bc:1d: 3b:57:27:c5:07:65:a1:0e:45:40:fa:b5:54:60:b3:74:61:f7: 65:cf:25:8b:b0:ab:a8:af:48:ea:95:e9:4b:e7:46:74:db:0c: df:63:5f:22:2c:c2:23:d4:ad:9e:03:ee:3c:7d:a6:67:b4:f6: e3:1b:bf:d3:3c:df:04:d2:ff:09:65:09:08:e2:c8:27:10:08: 8a:40:41:d4:50:c8:70:a8:2d:e1:b2:a4:5f:35:45:4e:0a:6b: 13:82:e8:63:24:67:38:1a:eb:1d:30:db:d8:63:38:42:76:f3: ce:b3:e7:50:6a:6c:c5:df:45:3a:b7:8d:d7:d6:33:66:b0:23: 6e:19:14:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2i1bf7CKGA+tIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YTJlOGJmNzQtOWEzZS00MjljLTkzZmUtMzU1M2VmZmVjZTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjJPHJNp6N2uvNN9fq61lM+9/bNx6BRjOFQQ ++cVjHtXlGF2O7AF6pyK9bXrfgWVJLngt/UcP8qcPFR9hD+Ox4AlsqJk+HSfMkja krXXDxpyfqoT08o35O6Fc8iWehPWEDy0K5jixXvKUrDPQ3211Lc/Ok0Zz2RPfEPy gAnIAG0HJPYDU7Z54CO4JWZ/+0vpCT1ouhih/xFkY44wu5kWzS3GHNr3CTZ883wM veG/TwlHclDCJlODesqvVVQbJpiB1NpYBXNizoLEd3WgoRhY52kEUvXsLmyJyFSU 9DR3uLvsP6dH6/S5FR00McK1IXucOtHLA97cb5MsApnrLiHHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECt7ah7moYCyAwwzAkhs3cZOWnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGQ5ZjkwOGItZTRmYy0z MmEwLWIwMTMtMTU4NDJiZDA0NTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAaHucVpjQlhCxPGaUVZtAFJPv0SGUy5Tx6A41OaHeL74uRMr87TOZY i8m08+nOpCJ5uHIwgEdtpU6ooUk99gTV676lpu53vIFqmBTg95hvFq+2bEGVXTz/ kzVkesgGBbFax9QVauRXQU58uxZXxMFmCb+8osWUSicdk0u8HTtXJ8UHZaEORUD6 tVRgs3Rh92XPJYuwq6ivSOqV6UvnRnTbDN9jXyIswiPUrZ4D7jx9pme09uMbv9M8 3wTS/wllCQjiyCcQCIpAQdRQyHCoLeGypF81RU4KaxOC6GMkZzga6x0w29hjOEJ2 886z51BqbMXfRTq3jdfWM2awI24ZFGg= -----END CERTIFICATE-----Generated at Wed Sep 9 00:49:36 2026 by rpki-client