$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa File: 33f95527-3969-306a-a2c5-4693ebe9dd54.roa (raw, json) Hash identifier: 9XcKSbpaqEq9U3Npb2OAw6hEQBQBPSIib9ZSRPvy8Zs= Subject key identifier: CE:5B:5B:50:B6:7A:6A:8D:3C:70:BF:45:D9:92:62:3A:1F:4C:38:37 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BB9638B4897E623ABE800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 130.174.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b9:63:8b:48:97:e6:23:ab:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f89e853e-cc9f-4eb3-91df-9effd65c9bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:e1:70:a0:17:2a:76:ed:83:47:a7:5e:21: 0d:69:51:1d:07:db:d9:50:d3:62:31:f4:94:a9:d0: c8:23:a7:11:f9:f0:18:00:04:d3:30:2c:b2:b1:e8: c0:3b:15:ab:67:51:4e:1a:d5:b5:30:ba:f8:20:ec: f5:6f:16:3d:be:b8:50:d1:62:16:6b:fd:9a:81:4f: 1d:f5:ea:31:af:f1:1e:75:14:d4:46:5f:3e:ad:b1: cf:1e:a0:bc:dc:7b:82:cc:a4:e9:a7:9f:a4:db:78: 07:63:cb:ad:b9:c8:88:d3:1c:81:7f:10:3a:46:a4: 47:a4:07:f8:c6:6e:02:2c:f5:ee:07:dc:19:7c:c9: 43:09:20:db:fc:8d:2a:fb:d9:66:76:5e:cc:23:a0: da:b2:e3:6b:b1:9f:ba:b2:2e:d5:7f:68:0a:ae:f1: 1e:1f:8f:2d:7e:a5:10:e4:bd:d1:f3:4b:89:0b:42: 62:13:7d:ac:18:91:f8:bc:6f:b3:86:65:1d:24:83: 90:33:4e:32:d4:e7:6e:26:9f:58:dc:ec:da:17:78: 9e:3a:fb:10:23:93:a7:dc:1f:2a:e2:77:c2:e3:e6: c7:00:60:4a:81:bf:5c:44:8f:b4:55:18:2b:80:51: b6:15:29:6f:2f:83:12:9a:98:00:67:ef:e2:61:40: ea:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:5B:50:B6:7A:6A:8D:3C:70:BF:45:D9:92:62:3A:1F:4C:38:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f8:64:d2:93:f9:6e:19:70:9b:ce:88:47:68:a6:6a:fe:11: 5e:76:b1:4c:29:8b:50:bb:a8:39:2c:03:da:59:4b:3b:e9:dd: a4:1c:83:66:e7:e2:39:f6:c9:53:c9:bf:57:74:db:b9:98:cb: db:d1:67:a6:24:46:9e:05:87:9c:7b:ad:05:25:a8:8c:ce:f0: b5:4b:57:02:25:88:b0:6b:58:5e:e9:bd:1d:62:cd:73:a2:87: 5c:4b:fb:b5:51:48:f0:ef:ca:45:47:0f:80:a9:70:52:bf:7f: c1:33:ff:ea:db:50:5c:f8:e0:3f:03:5b:2a:21:49:20:e0:28: ce:7c:2d:dd:bb:28:3a:93:76:ea:8f:d5:81:c8:49:11:a3:d3: be:25:5d:c5:38:34:1a:22:e1:8b:5b:eb:05:ea:15:07:eb:f0: 11:b1:5b:be:c9:c2:d5:83:ed:8b:ed:f8:90:be:7a:1a:9d:c5: ac:8b:bf:4c:d0:5a:a3:bc:fa:f3:b5:b8:18:ef:e2:f4:e7:79: bd:c1:a1:42:10:3a:46:6b:8b:aa:a0:3c:84:5f:bf:97:de:3d: 90:37:ab:e0:b9:3b:45:55:43:65:f3:27:f1:d6:73:62:5c:d2: 3a:0e:7a:d8:be:2d:ac:03:80:5c:d6:99:57:2e:21:80:b2:38: ff:26:60:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7lji0iX5iOr6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Zjg5ZTg1M2UtY2M5Zi00ZWIzLTkxZGYtOWVmZmQ2NWM5YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNHhcKAXKnbtg0enXiENaVEdB9vZUNNiMfSU qdDII6cR+fAYAATTMCyysejAOxWrZ1FOGtW1MLr4IOz1bxY9vrhQ0WIWa/2agU8d 9eoxr/EedRTURl8+rbHPHqC83HuCzKTpp5+k23gHY8utuciI0xyBfxA6RqRHpAf4 xm4CLPXuB9wZfMlDCSDb/I0q+9lmdl7MI6DasuNrsZ+6si7Vf2gKrvEeH48tfqUQ 5L3R80uJC0JiE32sGJH4vG+zhmUdJIOQM04y1OduJp9Y3OzaF3ieOvsQI5On3B8q 4nfC4+bHAGBKgb9cRI+0VRgrgFG2FSlvL4MSmpgAZ+/iYUDqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5bW1C2emqNPHC/RdmSYjofTDg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzNmOTU1MjctMzk2OS0z MDZhLWEyYzUtNDY5M2ViZTlkZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIn4ZNKT+W4ZcJvOiEdopmr+EV52sUwpi1C7qDksA9pZSzvp3aQcg2bn 4jn2yVPJv1d027mYy9vRZ6YkRp4Fh5x7rQUlqIzO8LVLVwIliLBrWF7pvR1izXOi h1xL+7VRSPDvykVHD4CpcFK/f8Ez/+rbUFz44D8DWyohSSDgKM58Ld27KDqTduqP 1YHISRGj074lXcU4NBoi4Ytb6wXqFQfr8BGxW77JwtWD7Yvt+JC+ehqdxayLv0zQ WqO8+vO1uBjv4vTneb3BoUIQOkZri6qgPIRfv5fePZA3q+C5O0VVQ2XzJ/HWc2Jc 0joOeti+LawDgFzWmVcuIYCyOP8mYC0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:18 2025 by rpki-client