$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa File: 35d6e188-30dd-33ac-a7dc-46e588dea154.roa (raw, json) Hash identifier: 44PCaj/tkVl3HrmcBbHKjj268zN3UyVrMN1aoIBheDU= Subject key identifier: 80:3E:9B:E5:02:20:96:01:E7:2E:7E:3E:08:61:C4:71:8B:A2:FE:F1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC5183C139A441DECB1A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 130.174.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c5:18:3c:13:9a:44:1d:ec:b1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=f9164866-b401-4f46-ad4d-807ce48f9097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5d:a7:97:ea:76:0c:ba:c7:8b:54:d7:87:ff: 7b:e6:91:36:63:e1:a1:ca:c6:ab:77:cf:97:8c:ee: 22:ec:53:64:1b:06:a8:2b:87:fb:91:1e:d9:1d:fb: ed:bb:a1:eb:76:ef:bf:eb:e6:91:a1:7b:ec:74:a5: 5e:3c:72:c5:6f:26:3d:36:5b:0e:ff:5c:0d:e5:04: 44:d9:96:ef:da:61:71:8c:31:51:5a:07:d1:46:15: cc:1c:1b:96:5e:ce:ef:54:39:95:d5:9a:bc:81:92: b6:74:ec:c5:4f:70:65:14:88:c1:79:39:44:5f:7e: be:a2:36:7f:ad:ba:bc:6f:8d:18:d2:e1:66:fd:d7: 03:27:c4:c0:69:71:e9:e0:f6:53:e6:a4:68:2c:cb: 38:2d:28:b9:84:17:28:d7:0d:1f:68:b9:b4:a4:1f: e1:42:d1:4e:66:ac:c9:6c:64:d1:9d:2d:a9:01:f8: c9:65:09:30:f3:30:7c:0d:f8:7e:50:58:e7:64:75: ec:b5:2c:83:6c:f2:31:d5:c7:47:e2:e8:bf:20:14: f6:f8:2e:4f:04:85:43:ff:9a:cc:79:10:18:0d:73: 83:3b:a1:f2:f2:0d:d6:5a:64:3e:f6:56:aa:96:d6: 91:44:09:ef:fd:54:a6:6c:cd:26:00:88:05:b9:90: f9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:9B:E5:02:20:96:01:E7:2E:7E:3E:08:61:C4:71:8B:A2:FE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/35d6e188-30dd-33ac-a7dc-46e588dea154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:61:e6:6d:e3:44:3d:66:33:e1:21:52:0b:d7:03:a2:f5:1a: 7a:d6:5c:d0:ea:17:a2:56:23:75:d5:e8:c2:84:a0:d3:48:35: 8b:1a:a5:91:8c:79:90:a1:08:48:a6:0c:e7:36:93:7e:d3:84: 83:6e:86:76:31:d9:4d:c2:b4:d3:17:f6:8a:90:a4:4d:8f:63: ef:c4:51:23:d0:1c:a2:94:ba:b5:8c:55:72:21:cd:f6:d3:83: 99:2a:4c:b5:95:66:a3:21:12:4c:57:44:b2:09:8e:17:2b:6d: ac:c3:ee:3a:90:20:28:3c:ef:75:51:8f:bf:77:7b:c2:2c:e9: 85:18:04:2e:aa:48:ba:c0:7a:00:2b:cd:2c:47:1c:a6:47:9f: af:3b:7f:b5:7b:46:34:fa:5c:86:b6:38:31:35:ff:b2:89:ff: fb:cf:1a:23:af:cc:81:87:b4:4f:ab:78:92:15:8f:96:88:9c: f4:21:7d:17:ea:0a:c0:04:b9:bc:97:a6:a7:1a:5e:b4:b2:be: e3:03:76:ea:a6:ad:e4:fb:1d:33:58:bb:f0:3e:3a:20:1b:ea: 9e:cf:8e:59:ef:e6:cc:b7:ac:eb:a4:fa:9a:5e:54:7a:1e:e6: 1a:8a:41:a8:95:a4:37:9b:5f:3e:82:c9:14:ab:24:b0:2d:56: 3d:89:1b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8UYPBOaRB3ssaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZjkxNjQ4NjYtYjQwMS00ZjQ2LWFkNGQtODA3Y2U0OGY5MDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF2nl+p2DLrHi1TXh/975pE2Y+Ghysard8+X jO4i7FNkGwaoK4f7kR7ZHfvtu6Hrdu+/6+aRoXvsdKVePHLFbyY9NlsO/1wN5QRE 2Zbv2mFxjDFRWgfRRhXMHBuWXs7vVDmV1Zq8gZK2dOzFT3BlFIjBeTlEX36+ojZ/ rbq8b40Y0uFm/dcDJ8TAaXHp4PZT5qRoLMs4LSi5hBco1w0faLm0pB/hQtFOZqzJ bGTRnS2pAfjJZQkw8zB8Dfh+UFjnZHXstSyDbPIx1cdH4ui/IBT2+C5PBIVD/5rM eRAYDXODO6Hy8g3WWmQ+9laqltaRRAnv/VSmbM0mAIgFuZD5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA+m+UCIJYB5y5+PghhxHGLov7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzVkNmUxODgtMzBkZC0z M2FjLWE3ZGMtNDZlNTg4ZGVhMTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5h5m3jRD1mM+EhUgvXA6L1GnrWXNDqF6JWI3XV6MKEoNNINYsapZGM eZChCEimDOc2k37ThINuhnYx2U3CtNMX9oqQpE2PY+/EUSPQHKKUurWMVXIhzfbT g5kqTLWVZqMhEkxXRLIJjhcrbazD7jqQICg873VRj793e8Is6YUYBC6qSLrAegAr zSxHHKZHn687f7V7RjT6XIa2ODE1/7KJ//vPGiOvzIGHtE+reJIVj5aInPQhfRfq CsAEubyXpqcaXrSyvuMDduqmreT7HTNYu/A+OiAb6p7Pjlnv5sy3rOuk+ppeVHoe 5hqKQaiVpDebXz6CyRSrJLAtVj2JG1U= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:05 2025 by rpki-client