$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21c54ed0-19f7-300e-9d60-4c1ae5d666ee.roa File: 21c54ed0-19f7-300e-9d60-4c1ae5d666ee.roa (raw, json) Hash identifier: DnW5HSKJelQn3RtUJqvoMGwXwxnlr7uh5HCMvfbpU6M= Subject key identifier: CD:20:57:AE:8E:1F:30:0E:FC:F4:2F:26:BB:B2:86:1F:66:41:F9:AE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B7DECC64F71DF651B6A2A83C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21c54ed0-19f7-300e-9d60-4c1ae5d666ee.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 130.174.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c6:4f:71:df:65:1b:6a:2a:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=de839854-d473-49f7-b9f4-6521baed5edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:04:a6:85:de:ef:04:09:fb:6c:2c:38:e5: c1:dd:ac:06:b4:2b:96:fe:30:87:e4:ee:7e:90:74: 49:e7:d4:32:40:bb:15:6b:3b:9b:eb:19:5e:4f:a7: c8:6a:63:2b:d9:97:8b:3b:52:44:69:fd:af:8b:d3: b8:d6:0e:36:42:64:8f:a7:70:98:0d:d6:79:db:55: 7b:d6:b4:a7:37:e6:c1:c2:84:90:69:5b:a9:1f:87: 1e:14:27:d9:fe:3a:2b:5b:3d:c1:24:a9:9a:98:e5: b5:29:80:36:2c:84:41:a8:ab:3c:ba:4b:26:fe:cd: 67:b8:5f:ab:f6:f8:71:8a:b5:ae:32:9b:70:b2:3c: b2:dc:71:87:f6:b4:ad:1f:2e:4e:b0:2a:6d:d5:78: fc:73:98:4e:dd:a3:ea:9a:92:6e:3e:ce:54:2e:62: 68:19:87:41:fc:35:8d:a8:d0:cf:b7:ff:43:b8:91: 0b:bd:69:7c:aa:d6:ea:3d:d2:95:c7:95:88:c1:62: 57:64:8d:3e:a8:d4:38:87:99:7e:35:a0:4a:0f:84: 80:f6:3a:c1:a6:6c:23:46:a8:d9:16:b4:c2:87:a1: 64:91:de:c1:76:87:10:7a:19:e5:fe:62:ca:b2:03: e8:20:a7:74:12:77:19:92:0e:cf:9c:b6:60:f5:a0: 49:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:20:57:AE:8E:1F:30:0E:FC:F4:2F:26:BB:B2:86:1F:66:41:F9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21c54ed0-19f7-300e-9d60-4c1ae5d666ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f1:4d:89:ff:af:47:c3:68:d5:23:b2:e5:25:f0:21:c4:63: 28:72:86:ac:dc:fc:d3:ff:cd:ff:dd:69:96:99:ed:39:50:45: 05:80:4a:ec:f9:ec:f7:61:a4:43:00:04:05:98:c6:b8:86:3e: f6:5a:59:b2:08:7b:be:07:94:50:70:a5:2f:4c:3d:0a:eb:6d: 01:2e:27:b5:d3:3b:79:bb:2a:62:01:18:dd:b6:69:4a:29:46: 65:b8:49:c4:64:b8:8b:b3:8f:64:82:e9:d3:35:c8:73:1b:9c: 3d:d1:b7:e6:90:d8:7c:48:af:2f:63:74:37:d3:7c:75:04:f7: 9d:6f:cc:b2:97:d5:96:cb:de:9c:17:e3:7f:9e:f1:3e:57:84: 14:51:40:05:14:09:0e:dd:4d:c1:39:4a:43:ac:b9:eb:30:c7: 40:e2:07:56:e9:93:10:f5:2e:93:58:fe:53:3d:81:dd:41:2d: c5:21:46:a9:c6:50:31:bc:6c:3a:6a:7e:8e:dc:f6:d8:19:3d: cc:7c:18:67:f5:08:3e:88:23:7d:f4:a2:70:1b:54:dd:bc:bc: 1d:8a:21:1e:83:fc:f8:e8:8f:5d:80:1c:3d:b0:7f:2b:bf:13: 86:a7:86:5a:18:b8:9b:5e:b5:3d:dd:f2:a4:d4:0f:e6:97:c9: 90:53:40:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MZPcd9lG2oqg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZGU4Mzk4NTQtZDQ3My00OWY3LWI5ZjQtNjUyMWJhZWQ1ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxssEpoXe7wQJ+2wsOOXB3awGtCuW/jCH5O5+ kHRJ59QyQLsVazub6xleT6fIamMr2ZeLO1JEaf2vi9O41g42QmSPp3CYDdZ521V7 1rSnN+bBwoSQaVupH4ceFCfZ/jorWz3BJKmamOW1KYA2LIRBqKs8uksm/s1nuF+r 9vhxirWuMptwsjyy3HGH9rStHy5OsCpt1Xj8c5hO3aPqmpJuPs5ULmJoGYdB/DWN qNDPt/9DuJELvWl8qtbqPdKVx5WIwWJXZI0+qNQ4h5l+NaBKD4SA9jrBpmwjRqjZ FrTCh6Fkkd7BdocQehnl/mLKsgPoIKd0EncZkg7PnLZg9aBJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0gV66OHzAO/PQvJruyhh9mQfmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjFjNTRlZDAtMTlmNy0z MDBlLTlkNjAtNGMxYWU1ZDY2NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3xTYn/r0fDaNUjsuUl8CHEYyhyhqzc/NP/zf/daZaZ7TlQRQWASuz5 7PdhpEMABAWYxriGPvZaWbIIe74HlFBwpS9MPQrrbQEuJ7XTO3m7KmIBGN22aUop RmW4ScRkuIuzj2SC6dM1yHMbnD3Rt+aQ2HxIry9jdDfTfHUE951vzLKX1ZbL3pwX 43+e8T5XhBRRQAUUCQ7dTcE5SkOsueswx0DiB1bpkxD1LpNY/lM9gd1BLcUhRqnG UDG8bDpqfo7c9tgZPcx8GGf1CD6II330onAbVN28vB2KIR6D/Pjoj12AHD2wfyu/ E4anhloYuJtetT3d8qTUD+aXyZBTQJg= -----END CERTIFICATE-----Generated at Sun Oct 19 20:43:53 2025 by rpki-client