$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa File: 38d06ae0-9690-34fa-a93a-db5e0debc30a.roa (raw, json) Hash identifier: +6qpRTyBs2d723BE2OUa9IaN3ci92+hFEhmdL4E7o5Y= Subject key identifier: F0:04:30:DB:FB:D1:D8:A4:85:BA:9A:86:B0:FF:FE:34:3E:54:21:FA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E54B4A674EE340EF7B0407B40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 3356 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:a6:74:ee:34:0e:f7:b0:40:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=8dbd436a-eac7-4a22-b292-a2553dcf2cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:de:34:a4:1c:66:d1:13:8b:75:46:b1:f2: b8:ea:bb:6c:46:26:75:d6:34:2b:a8:dc:41:de:73: e6:dc:84:25:70:b2:06:7f:fb:8b:8b:14:b6:ff:4e: fe:6a:5a:e4:79:70:45:d1:c0:42:dc:96:9a:9e:60: 1d:20:cd:8e:ee:a2:6f:8e:05:a4:06:d5:e3:81:fd: 5b:e2:4c:76:cf:24:97:97:92:d6:d5:01:30:54:a6: e9:61:4d:20:3e:7b:dd:87:47:f1:11:1e:77:3b:7b: b6:0c:11:ed:79:d4:68:1d:b2:0e:4d:b1:4b:59:67: 10:11:5c:86:7c:ef:7a:6c:7f:b1:3b:92:d9:88:17: a3:12:a2:25:1b:c5:b6:ea:6f:1c:3d:51:d4:60:4b: 09:59:77:53:78:20:1c:92:dc:16:59:10:73:f5:e9: 62:97:8e:fe:bc:d9:18:34:7f:d3:dd:9c:9f:be:a8: 34:8f:67:92:ed:03:f9:c8:05:fa:6e:32:12:5b:72: 1c:2d:c0:94:d3:61:b0:eb:02:6a:e1:f8:30:18:5d: 91:bd:26:a7:d2:84:07:e5:43:ef:eb:91:00:b2:5a: a7:85:d3:1a:70:df:97:46:77:ca:1a:56:00:8b:cf: be:66:ce:01:14:87:de:5e:79:10:a7:07:af:de:21: 1a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:04:30:DB:FB:D1:D8:A4:85:BA:9A:86:B0:FF:FE:34:3E:54:21:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c4:8c:94:32:08:af:70:a6:58:35:b8:a3:ea:31:a9:40:d9: f6:fd:57:2e:d3:f7:54:1f:dd:fb:67:c9:39:28:5c:8d:a4:cc: e0:1a:cd:c2:15:c0:b9:fc:74:e7:14:f4:98:df:64:42:67:1f: fd:71:6b:70:55:43:d4:77:3a:5d:46:16:3f:cc:60:a8:d1:30: c3:2f:59:fd:24:ce:dd:90:d7:3e:e1:dc:cd:d0:7c:93:04:fb: 79:a7:a3:07:ae:63:cb:6c:fb:f9:20:99:00:a5:99:de:88:9e: ce:ca:5e:34:ae:25:83:23:5f:de:7f:68:68:ae:6c:dc:3e:ae: 47:15:1b:06:9c:f2:de:5a:33:83:ff:d6:ed:b3:ad:e8:f5:51: 2b:51:12:d9:5f:44:2c:d0:61:69:5c:56:d5:ba:07:eb:58:45: 45:48:69:c9:9b:53:58:86:8f:e9:f4:c6:5f:0c:9c:39:ad:75: cc:9f:f1:b8:bd:fc:81:7a:1c:d9:d8:45:c8:ae:cb:3e:ec:5e: de:c4:54:cd:b0:c0:f0:8c:0e:a8:ce:b1:ab:37:c9:81:36:00: 03:2c:e4:43:d4:09:4a:1e:7b:54:b5:98:07:48:8e:10:95:d8: 55:5f:80:82:0d:ee:04:8b:25:39:38:ed:7c:83:e5:e8:51:b1: e3:8e:36:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtKZ07jQO97BAe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk OGRiZDQzNmEtZWFjNy00YTIyLWIyOTItYTI1NTNkY2YyY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/7eNKQcZtETi3VGsfK46rtsRiZ11jQrqNxB 3nPm3IQlcLIGf/uLixS2/07+alrkeXBF0cBC3JaanmAdIM2O7qJvjgWkBtXjgf1b 4kx2zySXl5LW1QEwVKbpYU0gPnvdh0fxER53O3u2DBHtedRoHbIOTbFLWWcQEVyG fO96bH+xO5LZiBejEqIlG8W26m8cPVHUYEsJWXdTeCAcktwWWRBz9elil47+vNkY NH/T3Zyfvqg0j2eS7QP5yAX6bjISW3IcLcCU02Gw6wJq4fgwGF2RvSan0oQH5UPv 65EAslqnhdMacN+XRnfKGlYAi8++Zs4BFIfeXnkQpwev3iEakwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAEMNv70dikhbqahrD//jQ+VCH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhkMDZhZTAtOTY5MC0z NGZhLWE5M2EtZGI1ZTBkZWJjMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrEjJQyCK9wplg1uKPqMalA2fb9Vy7T91Qf3ftnyTkoXI2kzOAazcIV wLn8dOcU9JjfZEJnH/1xa3BVQ9R3Ol1GFj/MYKjRMMMvWf0kzt2Q1z7h3M3QfJME +3mnoweuY8ts+/kgmQClmd6Ins7KXjSuJYMjX95/aGiubNw+rkcVGwac8t5aM4P/ 1u2zrej1UStREtlfRCzQYWlcVtW6B+tYRUVIacmbU1iGj+n0xl8MnDmtdcyf8bi9 /IF6HNnYRciuyz7sXt7EVM2wwPCMDqjOsas3yYE2AAMs5EPUCUoee1S1mAdIjhCV 2FVfgIIN7gSLJTk47XyD5ehRseOONvw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:54:29 2026 by rpki-client