$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa File: 2921d5a0-167c-34e7-ad92-c580bbdb9441.roa (raw, json) Hash identifier: LxzAxwBxjTBjOJtrWrQ6IKM+ccLSy8ZKkb3Gfn6hXaM= Subject key identifier: B2:16:8A:C2:DD:BD:8B:56:77:A1:C7:0E:78:92:B3:6E:3D:71:69:87 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC8CB4E229CCFA048C7C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c8:cb:4e:22:9c:cf:a0:48:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=1851267d-6d9e-44c5-8471-a294cd5d6f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:b9:13:d3:60:70:4a:ec:ba:39:2d:0d:d9: 1a:0f:67:05:cb:97:47:3e:ab:40:9a:fe:fb:53:fb: f1:29:87:0e:af:79:61:29:d0:72:a9:2b:9b:97:8d: 3d:32:17:c5:c9:ec:1f:92:e4:a8:90:75:aa:4c:c5: b5:d7:a3:67:64:ba:7a:07:a0:61:9b:6c:62:96:83: d5:65:6f:2a:99:b6:c8:7e:05:4e:5f:df:b0:e8:5a: f2:60:8b:6b:2e:de:f6:72:98:fe:ad:70:28:0b:d8: 64:14:0a:91:dd:f3:d8:4e:0d:6e:67:e2:24:d6:56: f1:04:08:d7:bf:0b:31:85:70:54:b9:8e:ad:3d:36: 21:e6:35:04:30:64:a8:7e:54:ab:8e:0e:63:5c:92: e3:46:31:d2:bc:56:43:81:e3:cb:06:92:76:2a:4a: 18:50:02:e1:40:c7:33:a1:b6:b6:ca:56:84:f6:45: 8d:83:dd:81:b3:d5:3b:5a:74:e4:60:17:41:d2:b2: 9b:3b:07:6c:a3:c3:96:7e:97:8a:8c:9e:fe:11:d9: e6:ac:b2:18:28:bd:f0:a3:a6:c5:2c:9d:14:29:ea: 02:05:6f:d1:6f:bc:47:3b:51:e3:2a:bd:93:e8:94: ef:51:f4:fa:96:76:f1:02:f1:8b:f5:99:15:8d:23: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:16:8A:C2:DD:BD:8B:56:77:A1:C7:0E:78:92:B3:6E:3D:71:69:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:33:d2:3c:fa:be:ed:7f:ff:11:d4:77:6a:eb:14:2d:a6:68: a3:c4:44:97:81:31:72:61:fc:c0:0e:9d:45:6a:b2:2e:be:23: 21:2e:a4:55:1e:c2:b4:35:fe:68:bf:56:7f:3a:12:11:3f:70: d6:7c:6f:8e:3c:6e:5d:d3:19:65:d5:dd:70:33:41:e6:e5:e4: 52:df:ef:23:59:bc:2f:83:87:40:29:07:ed:8c:70:f4:0b:51: 13:06:88:89:73:da:33:bb:5b:1b:7e:0c:7b:d4:50:a1:be:b6: f9:b7:12:a3:65:86:78:93:53:c2:cf:f4:35:19:da:28:6a:70: b2:64:72:82:ac:56:c1:2d:e5:5e:34:5e:ee:c2:25:b8:06:28: ec:0e:7d:19:30:32:7e:be:ff:1d:de:ae:62:39:17:3d:9a:27: da:20:8b:1b:13:6a:37:fd:d5:93:63:94:75:38:6f:de:b5:60: 07:f7:da:16:71:69:bc:d7:16:7c:85:84:61:80:33:d8:1c:6c: 5c:fc:f8:e7:7f:21:ee:8b:00:a3:e2:4f:59:da:45:23:46:ba: 74:5e:c2:d4:33:83:ef:71:e2:fe:f7:ad:d3:5f:19:cb:45:58: d2:0f:54:97:ec:17:7b:53:fc:83:f0:0d:9e:f8:03:52:95:d6: 63:37:20:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8jLTiKcz6BIx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTg1MTI2N2QtNmQ5ZS00NGM1LTg0NzEtYTI5NGNkNWQ2ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWm5E9NgcErsujktDdkaD2cFy5dHPqtAmv77 U/vxKYcOr3lhKdByqSubl409MhfFyewfkuSokHWqTMW116NnZLp6B6Bhm2xiloPV ZW8qmbbIfgVOX9+w6FryYItrLt72cpj+rXAoC9hkFAqR3fPYTg1uZ+Ik1lbxBAjX vwsxhXBUuY6tPTYh5jUEMGSoflSrjg5jXJLjRjHSvFZDgePLBpJ2KkoYUALhQMcz oba2ylaE9kWNg92Bs9U7WnTkYBdB0rKbOwdso8OWfpeKjJ7+EdnmrLIYKL3wo6bF LJ0UKeoCBW/Rb7xHO1HjKr2T6JTvUfT6lnbxAvGL9ZkVjSNzCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIWisLdvYtWd6HHDniSs249cWmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjkyMWQ1YTAtMTY3Yy0z NGU3LWFkOTItYzU4MGJiZGI5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0z0jz6vu1//xHUd2rrFC2maKPERJeBMXJh/MAOnUVqsi6+IyEupFUe wrQ1/mi/Vn86EhE/cNZ8b448bl3TGWXV3XAzQebl5FLf7yNZvC+Dh0ApB+2McPQL URMGiIlz2jO7Wxt+DHvUUKG+tvm3EqNlhniTU8LP9DUZ2ihqcLJkcoKsVsEt5V40 Xu7CJbgGKOwOfRkwMn6+/x3ermI5Fz2aJ9ogixsTajf91ZNjlHU4b961YAf32hZx abzXFnyFhGGAM9gcbFz8+Od/Ie6LAKPiT1naRSNGunRewtQzg+9x4v73rdNfGctF WNIPVJfsF3tT/IPwDZ74A1KV1mM3IM4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:15:12 2025 by rpki-client