$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa File: 3cb8e548-696d-3518-b3fe-4e1df2101a23.roa (raw, json) Hash identifier: CZYWd2FIQxfSSg80yR9HJJRwTAJYui0D60Ik8ILV6s8= Subject key identifier: 1C:E8:71:C9:2A:54:EF:36:52:68:99:BD:37:60:0D:D4:AB:7F:AE:8A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BBA0D2FE9D18685FCF5C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 130.174.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ba:0d:2f:e9:d1:86:85:fc:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=e3bda8c9-6e07-4c96-ae3c-4d53b6a321bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:98:0a:dc:a8:65:54:8e:4b:27:0d:ea:47:77: 52:e9:a7:0d:14:4b:48:76:b2:55:9b:a7:30:58:e2: 47:19:3e:ac:1c:72:07:f2:bf:7d:10:49:d0:1e:50: 47:32:ee:52:78:d2:ed:be:60:97:51:75:47:5f:c6: de:ad:82:17:fc:02:65:ac:6e:65:8f:dc:5c:de:6f: 36:4b:1a:50:b4:95:fe:22:3f:ca:d6:0f:be:0d:db: 60:66:af:25:e8:5b:19:3e:b2:18:fc:16:33:09:44: 98:95:7b:f2:3f:b4:ea:fe:45:62:78:81:a3:11:c2: 70:92:0e:52:5d:f8:22:e1:f4:a3:7d:ef:ea:24:8c: 1f:ad:45:d2:22:92:36:d4:b5:cc:6a:72:ad:03:c9: 54:b8:8a:d5:7a:b0:95:b8:72:37:50:75:c3:53:7a: 83:93:25:f6:e3:a6:cd:c7:35:43:8a:44:9e:c8:90: 12:2c:cd:4a:45:32:dd:c2:ae:d1:f0:eb:c7:ff:74: 26:99:05:92:93:76:5c:07:39:9e:27:4a:e8:9a:a6: 8a:c6:45:f5:90:ce:70:24:48:28:1e:54:9d:07:fe: 6a:b8:49:21:75:e1:c8:fe:52:81:87:4c:91:9a:86: 94:c0:45:ab:c7:a7:dc:28:f0:f5:95:fc:ae:09:5d: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E8:71:C9:2A:54:EF:36:52:68:99:BD:37:60:0D:D4:AB:7F:AE:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0a:81:ac:87:10:a4:18:d5:07:e7:78:d0:ce:c3:8f:30:68: a4:12:38:e9:12:31:88:c7:44:22:71:ef:cc:21:0d:50:42:84: 7c:1b:d9:a4:09:0a:c2:d0:4a:fa:4b:05:53:85:fe:09:50:3d: f4:39:79:8d:fe:3c:62:fe:8a:b4:1f:a8:02:a5:5f:0b:f7:45: 4c:1b:30:07:07:ed:2f:9e:5b:1f:9c:ee:43:b3:78:3a:3a:5f: fe:9b:c1:6b:e8:72:5e:3b:a5:ee:99:93:0d:87:2a:fb:30:b3: fe:9d:a8:a6:46:1c:a1:76:65:92:d4:9f:95:31:d0:08:f7:02: 1d:8d:16:1f:42:4c:02:77:a4:71:8a:1a:ce:67:5a:a4:22:1f: 74:95:1f:58:04:78:dc:cd:44:76:c7:39:2e:e5:1b:2f:fd:e3: 5a:6f:ee:2d:46:b0:38:36:8a:04:4f:ab:77:41:35:f3:ed:2f: ed:a7:f1:fc:3f:de:94:37:1b:c8:28:42:6c:eb:97:ef:8d:ed: 44:ab:25:f2:2e:b7:e5:ec:86:2e:17:89:08:16:ba:dc:17:e6: 6e:e5:24:a0:51:1b:ea:ea:10:40:ec:62:aa:c2:75:bb:ba:81: 9d:4c:ce:5e:07:78:c7:2a:4d:17:99:06:fa:20:ef:63:c6:5e: b8:57:92:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7oNL+nRhoX89cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTNiZGE4YzktNmUwNy00Yzk2LWFlM2MtNGQ1M2I2YTMyMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZgK3KhlVI5LJw3qR3dS6acNFEtIdrJVm6cw WOJHGT6sHHIH8r99EEnQHlBHMu5SeNLtvmCXUXVHX8berYIX/AJlrG5lj9xc3m82 SxpQtJX+Ij/K1g++DdtgZq8l6FsZPrIY/BYzCUSYlXvyP7Tq/kVieIGjEcJwkg5S Xfgi4fSjfe/qJIwfrUXSIpI21LXManKtA8lUuIrVerCVuHI3UHXDU3qDkyX246bN xzVDikSeyJASLM1KRTLdwq7R8OvH/3QmmQWSk3ZcBzmeJ0romqaKxkX1kM5wJEgo HlSdB/5quEkhdeHI/lKBh0yRmoaUwEWrx6fcKPD1lfyuCV03IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzocckqVO82UmiZvTdgDdSrf66KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2NiOGU1NDgtNjk2ZC0z NTE4LWIzZmUtNGUxZGYyMTAxYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAKgayHEKQY1QfneNDOw48waKQSOOkSMYjHRCJx78whDVBChHwb2aQJ CsLQSvpLBVOF/glQPfQ5eY3+PGL+irQfqAKlXwv3RUwbMAcH7S+eWx+c7kOzeDo6 X/6bwWvocl47pe6Zkw2HKvsws/6dqKZGHKF2ZZLUn5Ux0Aj3Ah2NFh9CTAJ3pHGK Gs5nWqQiH3SVH1gEeNzNRHbHOS7lGy/941pv7i1GsDg2igRPq3dBNfPtL+2n8fw/ 3pQ3G8goQmzrl++N7USrJfIut+Xshi4XiQgWutwX5m7lJKBRG+rqEEDsYqrCdbu6 gZ1Mzl4HeMcqTReZBvog72PGXrhXkqY= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:30 2025 by rpki-client