$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01995715-c25e-34d9-96ad-6654768a1420.roa File: 01995715-c25e-34d9-96ad-6654768a1420.roa (raw, json) Hash identifier: 5VMbU8eMqivU2vHHKnPZxCmM1jvEQrD3bmU2nkaop4U= Subject key identifier: 44:E0:74:35:17:D1:53:0E:A0:0E:5F:70:9D:3D:64:E2:95:31:18:09 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B79F0F2017B8AE295A7447C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01995715-c25e-34d9-96ad-6654768a1420.roa Signing time: Fri 10 Oct 2025 14:45:59 +0000 ROA not before: Fri 10 Oct 2025 14:45:59 +0000 ROA not after: Thu 08 Jan 2026 15:45:59 +0000 asID: 203 IP address blocks: 130.174.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f0:f2:01:7b:8a:e2:95:a7:44:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 10 14:45:59 2025 GMT Not After : Jan 8 15:45:59 2026 GMT Subject: CN=2aa6a2c7-5db4-4b0d-a6d7-f09d5289f455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:53:41:64:6d:28:05:58:5d:5f:00:88:3e:24: 62:0e:80:43:06:35:6d:50:5b:1b:76:5e:a6:bc:ef: 48:8e:4b:9f:09:10:ac:93:8c:7e:21:a1:eb:fe:e4: aa:87:9b:56:d4:8c:94:7a:43:ea:27:a9:52:81:de: a6:11:12:4b:80:e6:c8:2b:35:ec:20:03:82:d2:13: 46:f4:2d:13:85:23:c0:e9:1f:bc:45:a2:7e:68:b2: c5:1a:a3:1a:0d:b3:66:5a:32:aa:30:32:87:2d:ec: 36:16:ca:fb:06:fd:1e:a2:cc:8d:7f:ed:4e:42:20: 6c:99:18:0c:c5:ce:ab:8c:ea:78:e7:53:4b:df:52: 92:f3:36:34:52:75:72:8d:22:2a:d1:ed:1f:c9:8e: 31:7d:90:16:f9:3d:f7:0a:4b:42:4c:0a:8b:36:a1: 48:58:48:15:ae:1a:8d:e3:9d:f8:68:eb:7b:a0:02: b2:26:d1:a8:e5:0c:c2:97:6a:c5:fa:be:f6:92:38: 48:27:80:4a:0c:48:43:47:52:30:87:ec:db:cd:b8: 56:4e:ec:cd:f5:aa:90:71:b1:29:1b:58:27:fe:9a: 5c:64:cc:6c:fb:47:62:79:d9:86:82:76:60:6c:a8: 8b:5e:f4:f5:fc:e6:73:0e:2e:77:55:ae:61:59:60: e9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:74:35:17:D1:53:0E:A0:0E:5F:70:9D:3D:64:E2:95:31:18:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/01995715-c25e-34d9-96ad-6654768a1420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d9:de:32:08:28:95:fd:ba:c8:eb:6a:f5:1a:c0:00:3d:ac: 78:be:e3:a0:3a:45:1e:33:07:c2:6c:38:8b:65:b3:43:33:0f: 8a:94:87:fb:93:6e:57:3a:9b:14:12:9b:7f:9e:f3:9a:c7:f1: f5:49:45:79:49:d6:0d:d8:10:ed:02:72:6a:27:99:d2:99:db: 3c:41:38:5e:02:14:ee:eb:44:af:1e:e3:5d:08:af:4f:9f:40: 72:49:f4:b0:84:13:f8:14:25:8d:7f:64:0c:80:ab:43:5d:3e: d0:e7:30:19:d6:b2:23:10:5a:1e:bf:d9:be:25:c4:b1:d3:2e: d8:78:8e:6e:39:a7:06:b3:c8:b1:f1:9c:97:b3:c2:16:8a:52: 1d:1d:4b:0d:3e:72:07:5f:1f:9a:69:c0:d4:ed:b4:2f:fd:b8: aa:d4:2e:37:cd:72:ad:02:eb:93:31:c4:18:91:be:73:08:17: e0:45:99:e4:4d:cf:0d:a3:af:25:f8:0d:c7:36:85:64:66:bb: 19:ff:d5:e7:3a:1a:60:e2:58:e7:bb:a3:b1:d4:ed:b6:5a:77: f3:67:96:fc:e4:b5:bf:ea:b9:37:4c:6c:fc:05:10:87:af:b3: 96:97:97:9f:1f:ae:b5:2b:20:a0:61:6d:cc:a3:b5:cf:d3:5d: 4b:8d:9d:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt58PIBe4riladEfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAxMDE0NDU1OVoXDTI2MDEwODE1NDU1OVowLzEtMCsGA1UEAxMk MmFhNmEyYzctNWRiNC00YjBkLWE2ZDctZjA5ZDUyODlmNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFNBZG0oBVhdXwCIPiRiDoBDBjVtUFsbdl6m vO9IjkufCRCsk4x+IaHr/uSqh5tW1IyUekPqJ6lSgd6mERJLgObIKzXsIAOC0hNG 9C0ThSPA6R+8RaJ+aLLFGqMaDbNmWjKqMDKHLew2Fsr7Bv0eosyNf+1OQiBsmRgM xc6rjOp451NL31KS8zY0UnVyjSIq0e0fyY4xfZAW+T33CktCTAqLNqFIWEgVrhqN 4534aOt7oAKyJtGo5QzCl2rF+r72kjhIJ4BKDEhDR1Iwh+zbzbhWTuzN9aqQcbEp G1gn/ppcZMxs+0diedmGgnZgbKiLXvT1/OZzDi53Va5hWWDpIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETgdDUX0VMOoA5fcJ09ZOKVMRgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDE5OTU3MTUtYzI1ZS0z NGQ5LTk2YWQtNjY1NDc2OGExNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfZ3jIIKJX9usjravUawAA9rHi+46A6RR4zB8JsOItls0MzD4qUh/uT blc6mxQSm3+e85rH8fVJRXlJ1g3YEO0CcmonmdKZ2zxBOF4CFO7rRK8e410Ir0+f QHJJ9LCEE/gUJY1/ZAyAq0NdPtDnMBnWsiMQWh6/2b4lxLHTLth4jm45pwazyLHx nJezwhaKUh0dSw0+cgdfH5ppwNTttC/9uKrULjfNcq0C65MxxBiRvnMIF+BFmeRN zw2jryX4Dcc2hWRmuxn/1ec6GmDiWOe7o7HU7bZad/Nnlvzktb/quTdMbPwFEIev s5aXl58frrUrIKBhbcyjtc/TXUuNnU8= -----END CERTIFICATE-----Generated at Mon Oct 20 01:29:58 2025 by rpki-client