$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa File: df151142-859b-3304-8c30-830c91a3721f.roa (raw, json) Hash identifier: rFZIGY5b6BspWWCzSzHTYAy62i9wkqZpVHgYzev4CFE= Subject key identifier: 63:22:9C:32:3E:8B:83:EC:10:56:C1:6D:C5:F2:2D:19:EF:E8:FC:47 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CC8CB67BFBA151CDDBF80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 203 IP address blocks: 130.174.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c8:cb:67:bf:ba:15:1c:dd:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=40ecad7e-f458-4bfd-ba09-31bfa567bbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:b1:fe:2c:76:2d:6a:61:ba:9c:e4:42:de: 14:3e:04:0e:9e:20:d4:09:b5:d9:11:e0:2a:3e:bd: 03:4e:2c:d1:12:45:0d:9e:ec:f2:e9:b2:3b:b8:5d: be:23:54:12:9b:0b:fd:81:26:aa:9a:7e:29:90:ac: 27:2e:46:42:2d:60:5c:cb:9c:eb:78:ee:72:83:42: a4:a6:6b:94:96:fa:ec:c3:8c:ba:cb:5e:c2:32:9e: 07:a9:2c:8b:1c:de:af:07:89:3e:e1:b2:d8:55:5d: 91:df:76:55:55:2b:08:ab:6c:ad:dc:db:da:2e:c2: 9a:21:ca:0f:6c:f5:91:2a:49:d0:46:9f:31:74:76: 81:75:f0:62:f9:05:4b:b2:67:96:1e:ee:64:dd:d9: 5d:36:74:04:fb:c1:4d:ce:ba:83:06:20:e8:a1:73: a7:0d:f0:87:8b:92:67:ea:0e:9f:fb:07:67:ab:e7: 3a:31:05:95:9e:43:4a:84:00:d2:0f:f1:bf:44:74: cc:d9:81:cc:4b:30:ed:84:77:fc:fa:7b:bf:fd:91: e6:56:bb:55:18:7b:c5:27:e4:f9:1f:82:90:f0:04: 8c:aa:94:56:75:de:a0:ac:88:32:3a:03:a6:87:e8: a0:1d:dc:14:41:b8:85:96:48:e2:78:3b:af:b2:c4: d4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:22:9C:32:3E:8B:83:EC:10:56:C1:6D:C5:F2:2D:19:EF:E8:FC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:04:9a:6d:63:ba:82:95:6d:d9:58:b1:5a:81:91:bb:a2:18: 0e:d2:6b:96:83:02:f1:91:3c:a6:83:d6:da:7b:f6:dc:64:ec: 81:14:9a:2f:58:97:f4:0b:cd:fd:21:01:52:ed:2f:c8:08:09: e4:87:8f:fe:dd:d4:21:bc:df:19:1f:fe:fb:81:84:10:b8:fb: 1d:3a:8a:ce:5c:d9:16:f6:d9:be:9a:f5:1e:e1:eb:4a:2f:42: 43:5e:4a:50:32:bd:33:04:53:03:77:d9:bd:ab:41:c1:f3:18: bd:c7:fa:59:78:5f:a7:a2:57:d7:86:ea:40:10:b0:56:b4:e2: 66:89:b5:46:4a:56:84:a1:c0:48:47:2d:b3:33:39:4d:10:b6: 9f:2a:e4:c2:d8:d4:83:26:bf:87:a1:83:63:d7:b4:35:ba:d5: 7d:09:04:74:1f:62:f4:e3:40:b4:d1:66:4b:54:64:f5:b6:35: 77:26:5d:c5:4f:38:c7:fb:ad:98:67:68:cc:be:b6:30:85:d5: 76:0d:8a:4c:cc:45:97:d9:86:97:d1:0d:14:97:60:0b:13:83: 20:0f:7e:04:59:55:e9:10:96:12:00:13:b6:6c:0a:b9:23:3d: 39:33:41:9b:d1:bf:c7:df:03:eb:83:cc:33:c7:d4:0e:d7:38: 4c:cb:2b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMjLZ7+6FRzdv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NDBlY2FkN2UtZjQ1OC00YmZkLWJhMDktMzFiZmE1NjdiYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC2x/ix2LWphupzkQt4UPgQOniDUCbXZEeAq Pr0DTizREkUNnuzy6bI7uF2+I1QSmwv9gSaqmn4pkKwnLkZCLWBcy5zreO5yg0Kk pmuUlvrsw4y6y17CMp4HqSyLHN6vB4k+4bLYVV2R33ZVVSsIq2yt3NvaLsKaIcoP bPWRKknQRp8xdHaBdfBi+QVLsmeWHu5k3dldNnQE+8FNzrqDBiDooXOnDfCHi5Jn 6g6f+wdnq+c6MQWVnkNKhADSD/G/RHTM2YHMSzDthHf8+nu//ZHmVrtVGHvFJ+T5 H4KQ8ASMqpRWdd6grIgyOgOmh+igHdwUQbiFlkjieDuvssTUFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMinDI+i4PsEFbBbcXyLRnv6PxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGYxNTExNDItODU5Yi0z MzA0LThjMzAtODMwYzkxYTM3MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAEmm1juoKVbdlYsVqBkbuiGA7Sa5aDAvGRPKaD1tp79txk7IEUmi9Y l/QLzf0hAVLtL8gICeSHj/7d1CG83xkf/vuBhBC4+x06is5c2Rb22b6a9R7h60ov QkNeSlAyvTMEUwN32b2rQcHzGL3H+ll4X6eiV9eG6kAQsFa04maJtUZKVoShwEhH LbMzOU0Qtp8q5MLY1IMmv4ehg2PXtDW61X0JBHQfYvTjQLTRZktUZPW2NXcmXcVP OMf7rZhnaMy+tjCF1XYNikzMRZfZhpfRDRSXYAsTgyAPfgRZVekQlhIAE7ZsCrkj PTkzQZvRv8ffA+uDzDPH1A7XOEzLK9c= -----END CERTIFICATE-----Generated at Wed Sep 9 00:52:23 2026 by rpki-client