$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa File: 1a273ca3-2b30-30af-8f44-77a7c904ad88.roa (raw, json) Hash identifier: T+IZzaZx2skcb1upmGfq/m/TU/DmvKb83nmKUfUG0xM= Subject key identifier: AA:0B:A2:69:AD:62:8C:2A:F9:FC:88:1F:F5:AD:DD:78:39:B6:12:2A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC7D04B2AA72D70DC6770 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 130.174.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c7:d0:4b:2a:a7:2d:70:dc:67:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=485e4bab-df1f-482a-bca5-779f70e1bc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:16:f7:4c:1a:a7:f3:c1:26:7a:12:1e:36: f7:dd:d6:5a:cc:ef:ff:1f:e5:f8:16:b8:8e:f7:21: ca:8b:9f:5d:11:40:71:7f:fd:66:92:52:2c:13:ae: 4d:f6:16:02:a1:2f:3d:50:7d:a0:c1:65:dd:50:4b: e3:fd:0a:8b:0d:06:d6:aa:e7:c9:d1:25:64:48:7d: 10:55:ac:18:05:ef:0c:6f:ae:54:53:a1:ad:43:33: 38:52:1d:62:85:08:79:7d:de:38:ae:c0:43:ef:72: 34:1b:c2:9c:1e:96:7c:76:0c:dd:19:31:04:aa:4f: 3d:4b:a7:f6:2e:ca:47:52:63:d3:18:a3:2a:e0:e1: ad:1d:81:be:58:9a:88:42:c4:71:14:91:64:3b:0d: ba:ac:a8:8e:1f:dc:8f:d8:0d:bb:96:47:c3:60:b4: 8b:05:7d:0f:3b:db:a4:cc:87:a6:4f:3e:fa:f8:18: f9:7c:6e:9d:fb:56:f8:1a:f3:ec:15:15:a0:eb:4b: 77:32:34:f7:13:b9:b4:76:58:95:09:c9:6a:b1:5b: 04:43:a5:76:16:ad:19:ab:e1:81:b6:19:00:9e:23: 9c:e2:8a:44:30:79:1a:c5:4b:f2:86:52:05:ba:a2: 7f:2a:60:66:aa:55:b6:ec:f7:cc:b4:9d:e9:99:c1: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0B:A2:69:AD:62:8C:2A:F9:FC:88:1F:F5:AD:DD:78:39:B6:12:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1a273ca3-2b30-30af-8f44-77a7c904ad88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a8:59:66:6c:e0:2c:c2:5c:43:56:9a:96:4b:a7:3c:0c:db: 8a:4b:72:ac:69:60:38:5c:4e:b8:de:55:1d:55:ed:64:24:bb: 84:d8:f2:02:64:d1:e2:84:75:56:49:f4:63:76:aa:e5:60:5c: 06:47:f5:70:00:13:1e:df:da:4f:91:d9:41:88:40:93:67:76: bd:57:29:f1:59:13:d9:b5:91:ab:97:38:8b:20:5a:92:a2:be: b8:5c:d9:da:02:4c:90:8e:79:c1:98:71:38:f3:20:6e:11:ec: d8:79:91:67:d3:22:df:65:2f:d7:3a:79:83:59:bb:b4:a7:ae: af:08:16:6b:7a:5f:01:1a:6e:a9:e8:cc:26:b8:30:7c:3b:4c: f7:07:a7:d9:b0:37:d0:32:a4:c8:4b:f4:23:98:d2:bc:e3:67: bc:82:ae:3e:85:24:24:0a:bc:22:e3:76:70:6c:1c:8d:ec:3b: e2:63:30:13:1e:77:13:27:74:25:fc:a6:68:53:3b:0a:5f:69: 57:83:eb:40:62:01:f1:d3:db:7c:77:d1:2e:71:1e:fe:c3:c4: 91:70:8f:61:fb:21:fc:17:c1:11:aa:72:74:d5:e2:30:0b:e4: 7a:bb:d7:c7:0e:3b:77:70:6b:f3:ab:9f:2d:0f:75:5b:9d:ea: bc:51:2d:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8fQSyqnLXDcZ3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NDg1ZTRiYWItZGYxZi00ODJhLWJjYTUtNzc5ZjcwZTFiYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn40W90wap/PBJnoSHjb33dZazO//H+X4FriO 9yHKi59dEUBxf/1mklIsE65N9hYCoS89UH2gwWXdUEvj/QqLDQbWqufJ0SVkSH0Q VawYBe8Mb65UU6GtQzM4Uh1ihQh5fd44rsBD73I0G8KcHpZ8dgzdGTEEqk89S6f2 LspHUmPTGKMq4OGtHYG+WJqIQsRxFJFkOw26rKiOH9yP2A27lkfDYLSLBX0PO9uk zIemTz76+Bj5fG6d+1b4GvPsFRWg60t3MjT3E7m0dliVCclqsVsEQ6V2Fq0Zq+GB thkAniOc4opEMHkaxUvyhlIFuqJ/KmBmqlW27PfMtJ3pmcHzYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoLommtYowq+fyIH/Wt3Xg5thIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWEyNzNjYTMtMmIzMC0z MGFmLThmNDQtNzdhN2M5MDRhZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGoWWZs4CzCXENWmpZLpzwM24pLcqxpYDhcTrjeVR1V7WQku4TY8gJk 0eKEdVZJ9GN2quVgXAZH9XAAEx7f2k+R2UGIQJNndr1XKfFZE9m1kauXOIsgWpKi vrhc2doCTJCOecGYcTjzIG4R7Nh5kWfTIt9lL9c6eYNZu7Snrq8IFmt6XwEabqno zCa4MHw7TPcHp9mwN9AypMhL9COY0rzjZ7yCrj6FJCQKvCLjdnBsHI3sO+JjMBMe dxMndCX8pmhTOwpfaVeD60BiAfHT23x30S5xHv7DxJFwj2H7IfwXwRGqcnTV4jAL 5Hq718cOO3dwa/Orny0PdVud6rxRLeE= -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:22 2025 by rpki-client