$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa File: 45903c34-be56-3f79-af14-28700a3b4f0b.roa (raw, json) Hash identifier: 6RyVfGe9WOI+qQ4DD2vC4J4FiVnd2t2mQePdNOqxG7Q= Subject key identifier: ED:F9:AA:EB:F5:2F:35:A9:A9:D4:63:18:86:75:AD:0E:04:B1:E4:C8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC40FBB2139CDD5479B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 130.174.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c4:0f:bb:21:39:cd:d5:47:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=7911b525-c82b-4ffc-b4d1-e1896ac93114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:6e:65:c1:ca:2b:90:3e:d8:72:1f:98:c1: 3c:49:47:3e:ca:07:4f:c2:d4:b6:08:af:ad:5b:cf: de:2b:96:4e:dd:9c:89:7f:05:2f:72:aa:45:5e:d6: 7f:5f:3e:27:00:ac:81:6e:ef:9e:74:64:8d:32:1f: d7:29:b2:29:69:bb:a9:ba:44:ae:d2:80:1d:0b:d3: 44:a2:96:ab:d5:33:c4:2b:ac:10:1d:71:65:9b:1a: 85:9d:7b:3d:61:cf:6c:60:6c:e1:8d:01:0c:f0:d6: 70:61:22:ee:07:54:1f:5c:32:db:15:9f:6b:d4:28: 34:cd:ce:90:ed:d9:c0:95:fa:ae:10:09:6a:34:43: 80:29:a9:8f:3c:ac:79:a4:c9:59:db:f1:bc:1e:fc: ed:7b:a6:e3:1e:0a:2d:e9:47:a4:e4:b6:f9:66:41: 83:c9:b2:35:7b:11:19:9b:80:a0:4c:0b:c3:a0:47: 97:87:e5:98:f5:9b:55:33:f6:ff:aa:c0:56:d9:71: 9d:f7:3a:09:39:6a:35:2a:3b:7d:0b:69:be:da:6c: cc:f4:07:6b:c7:d1:e0:01:47:3c:6c:af:56:13:31: bb:24:1e:87:d0:8c:ff:fa:74:7b:12:2f:9b:87:25: e1:a2:e9:87:1f:40:0e:59:c5:12:19:22:88:44:42: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F9:AA:EB:F5:2F:35:A9:A9:D4:63:18:86:75:AD:0E:04:B1:E4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:42:c1:5a:25:a6:0f:d7:e9:41:68:bb:c3:7c:95:85:4e:cd: 7e:5a:b9:1f:53:52:d4:1e:3a:02:dd:fd:3c:37:ac:6f:1a:17: 0f:69:22:dd:d5:75:05:ac:45:16:ec:6b:76:4c:2d:ac:2e:d7: af:40:45:88:7c:e0:89:cb:6f:b1:64:c2:c5:5b:ed:cf:21:a7: 93:67:ed:80:ee:be:0d:f5:5e:f0:3d:e7:28:3e:af:18:25:08: 1b:1d:f0:d3:f2:0d:77:ea:6b:d8:97:45:d0:09:03:01:84:19: ea:6f:f2:dd:34:54:f2:a7:d1:ac:c1:40:2e:17:cb:2d:fe:a2: e8:50:21:9e:c3:11:cf:3a:01:9b:28:9b:03:6d:a5:af:a5:d3: a4:1c:1b:9f:64:69:27:42:38:df:f2:03:a9:db:d6:19:4e:93: 24:5a:6e:13:60:38:9d:b6:98:b8:2b:01:32:d2:08:2a:1b:5c: 6a:fd:66:cd:25:f0:5a:a6:f8:59:5f:d4:b1:53:28:e1:45:09: 6e:8b:a0:13:5a:a5:db:33:1a:3e:08:16:68:33:c7:37:01:48: 71:67:b4:d0:7e:b0:75:d9:20:88:0a:28:a9:3d:a1:61:6e:b7: 4b:17:e9:1c:ba:77:cb:28:61:b4:0a:4f:14:3e:41:10:5e:da: 42:4a:46:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8QPuyE5zdVHmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NzkxMWI1MjUtYzgyYi00ZmZjLWI0ZDEtZTE4OTZhYzkzMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngpuZcHKK5A+2HIfmME8SUc+ygdPwtS2CK+t W8/eK5ZO3ZyJfwUvcqpFXtZ/Xz4nAKyBbu+edGSNMh/XKbIpabupukSu0oAdC9NE opar1TPEK6wQHXFlmxqFnXs9Yc9sYGzhjQEM8NZwYSLuB1QfXDLbFZ9r1Cg0zc6Q 7dnAlfquEAlqNEOAKamPPKx5pMlZ2/G8Hvzte6bjHgot6Uek5Lb5ZkGDybI1exEZ m4CgTAvDoEeXh+WY9ZtVM/b/qsBW2XGd9zoJOWo1Kjt9C2m+2mzM9Adrx9HgAUc8 bK9WEzG7JB6H0Iz/+nR7Ei+bhyXhoumHH0AOWcUSGSKIREIdfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO35quv1LzWpqdRjGIZ1rQ4EseTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDU5MDNjMzQtYmU1Ni0z Zjc5LWFmMTQtMjg3MDBhM2I0ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5CwVolpg/X6UFou8N8lYVOzX5auR9TUtQeOgLd/Tw3rG8aFw9pIt3V dQWsRRbsa3ZMLawu169ARYh84InLb7FkwsVb7c8hp5Nn7YDuvg31XvA95yg+rxgl CBsd8NPyDXfqa9iXRdAJAwGEGepv8t00VPKn0azBQC4Xyy3+ouhQIZ7DEc86AZso mwNtpa+l06QcG59kaSdCON/yA6nb1hlOkyRabhNgOJ22mLgrATLSCCobXGr9Zs0l 8Fqm+Flf1LFTKOFFCW6LoBNapdszGj4IFmgzxzcBSHFntNB+sHXZIIgKKKk9oWFu t0sX6Ry6d8soYbQKTxQ+QRBe2kJKRow= -----END CERTIFICATE-----Generated at Sat Aug 23 22:35:39 2025 by rpki-client