$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa File: 3a14a4fb-67a7-3a3e-8054-6165db358899.roa (raw, json) Hash identifier: P/7vhuXg3ktRC56N9wT30FV5hcQ0cCaDrAwP7LSnoOA= Subject key identifier: DC:70:D8:7A:2F:BE:1F:BC:7D:04:D7:61:44:3D:89:91:F5:EA:E0:11 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E5619FBA058DCC3B1A8322ECD Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 202 IP address blocks: 130.174.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:fb:a0:58:dc:c3:b1:a8:32:2e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=5076bde7-09d4-4b28-8fb6-72bc6400f13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:d5:c0:16:dd:53:bb:bc:cf:db:cd:ec:3f: 46:77:0f:81:ea:64:b8:95:25:d2:06:33:73:60:7f: eb:fe:29:0c:63:72:fb:75:b4:03:18:06:7e:59:c5: 6b:92:db:14:02:a2:2f:c9:aa:b0:68:05:8b:05:89: 04:16:e5:59:6b:d5:d0:8d:a8:36:d9:97:bd:cb:de: 6d:d0:f8:01:54:86:b9:1d:ca:cd:a2:a1:51:a0:80: ee:20:44:67:2e:60:50:28:25:bb:d6:4a:93:1f:15: 38:e4:0d:c7:40:71:f5:d2:de:c4:f6:3b:a1:b2:47: 13:d3:dd:a7:c1:7e:ff:42:ac:3f:77:c6:ec:7e:54: 4b:c3:dc:57:fb:f8:6e:e7:b9:37:9f:c6:a3:77:cd: 82:f8:66:61:55:fd:03:b7:6b:97:76:10:db:81:e0: a3:49:07:6e:64:b0:8b:dd:47:c9:d0:46:11:19:5b: 44:eb:0e:71:57:28:de:65:ff:1e:49:02:c9:25:c0: ee:24:4c:ab:06:11:d7:32:73:86:db:7a:db:20:07: 70:ec:ac:78:3a:5c:6d:eb:24:70:0a:d3:ee:13:fc: 17:fe:17:44:b8:db:40:2a:cb:b3:36:47:7a:d9:22: cc:84:cf:b4:8e:b1:35:58:bf:f4:1c:0a:1e:bc:00: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:D8:7A:2F:BE:1F:BC:7D:04:D7:61:44:3D:89:91:F5:EA:E0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d3:f1:71:6a:b6:78:fd:6f:87:04:a9:5c:70:0b:ed:7c:c8: 90:c4:90:8f:58:8c:7f:08:14:b9:7a:fd:e4:8c:59:35:87:1e: 22:19:f9:40:69:e5:dc:47:d6:37:dd:0a:f7:d0:46:11:2f:94: bc:8c:ed:1c:48:c9:79:42:50:7f:fa:68:a4:61:07:6f:27:d1: e6:ec:aa:fd:c9:4e:1a:e9:75:04:de:54:da:7d:95:e7:cf:55: e6:fd:b1:d8:76:6d:fc:ed:4e:5a:a3:71:75:92:72:14:60:9f: 96:1e:69:3f:36:7c:28:7a:a1:ef:34:f1:7b:14:09:39:e6:e7: dc:1c:9e:47:93:56:b0:3c:10:36:66:21:3b:a2:5f:36:69:b6: 3d:1e:35:b1:c9:30:ae:9e:35:3b:76:ab:92:92:39:4a:75:bb: ac:c9:57:5f:56:97:64:1f:de:86:2a:2f:53:7d:8a:19:19:cd: 08:3e:f1:d4:1d:ca:6c:87:37:03:15:73:8e:0d:c8:7d:ab:6f: 3f:8f:b5:0d:e3:69:31:cc:ba:88:23:27:35:ce:97:ee:27:bc: 6a:e7:ab:2b:38:b4:89:91:09:58:52:9e:1a:42:a8:4d:eb:9c: 36:48:f1:eb:99:2b:57:a5:e8:a4:27:68:8f:7b:9a:25:f7:dc: 1e:cd:bf:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfugWNzDsagyLs0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk NTA3NmJkZTctMDlkNC00YjI4LThmYjYtNzJiYzY0MDBmMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+vVwBbdU7u8z9vN7D9Gdw+B6mS4lSXSBjNz YH/r/ikMY3L7dbQDGAZ+WcVrktsUAqIvyaqwaAWLBYkEFuVZa9XQjag22Ze9y95t 0PgBVIa5HcrNoqFRoIDuIERnLmBQKCW71kqTHxU45A3HQHH10t7E9juhskcT092n wX7/Qqw/d8bsflRLw9xX+/hu57k3n8ajd82C+GZhVf0Dt2uXdhDbgeCjSQduZLCL 3UfJ0EYRGVtE6w5xVyjeZf8eSQLJJcDuJEyrBhHXMnOG23rbIAdw7Kx4Olxt6yRw CtPuE/wX/hdEuNtAKsuzNkd62SLMhM+0jrE1WL/0HAoevADpdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxw2Hovvh+8fQTXYUQ9iZH16uARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2ExNGE0ZmItNjdhNy0z YTNlLTgwNTQtNjE2NWRiMzU4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjT8XFqtnj9b4cEqVxwC+18yJDEkI9YjH8IFLl6/eSMWTWHHiIZ+UBp 5dxH1jfdCvfQRhEvlLyM7RxIyXlCUH/6aKRhB28n0ebsqv3JThrpdQTeVNp9lefP Veb9sdh2bfztTlqjcXWSchRgn5YeaT82fCh6oe808XsUCTnm59wcnkeTVrA8EDZm ITuiXzZptj0eNbHJMK6eNTt2q5KSOUp1u6zJV19Wl2Qf3oYqL1N9ihkZzQg+8dQd ymyHNwMVc44NyH2rbz+PtQ3jaTHMuogjJzXOl+4nvGrnqys4tImRCVhSnhpCqE3r nDZI8euZK1el6KQnaI97miX33B7Nv4s= -----END CERTIFICATE-----Generated at Fri Jul 24 13:10:36 2026 by rpki-client