$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa File: 4ccaf6cf-5069-3f74-915c-660c34906331.roa (raw, json) Hash identifier: NjSyKC0KQiP/yEfQI4XGCykk1S+NV08Pl47mHWfYcQA= Subject key identifier: 52:48:A3:03:4D:CA:BD:D8:F1:45:51:49:C4:AE:9C:4E:BF:DD:C9:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BB9B3377EE51E29B865C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 130.174.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b9:b3:37:7e:e5:1e:29:b8:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=e89d3e27-57ec-4f0b-b331-7161bbdb0762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:b3:e8:07:aa:09:c4:a5:b8:bd:67:84:50: 39:1e:68:07:d1:df:55:2a:a3:7c:1f:5d:e5:ae:2f: fa:a1:b2:c3:c0:53:44:c6:b1:ee:1b:3f:ef:bc:1b: 31:99:4d:3a:71:dc:94:f1:a0:4b:72:bf:82:70:77: e6:e7:80:e1:f0:5d:76:50:b8:95:67:7f:46:d1:f9: e9:91:0a:9b:29:07:ed:ce:50:81:2e:b2:a9:0c:34: 95:07:96:e8:1a:41:a2:9e:58:e6:11:6a:4a:e2:f9: e1:80:47:1c:fa:34:5f:6c:03:62:d0:5e:a3:a5:5d: 0d:1e:83:e4:f2:4c:82:89:e6:ad:95:3e:35:dc:e1: df:6c:b6:75:0b:30:26:b0:8c:d7:2c:9b:2e:a8:0b: 4e:0e:3a:96:d2:c0:13:0c:cf:a4:ae:74:c8:c8:df: ea:e5:26:ce:d3:ee:9d:b9:8c:7d:f4:d3:4e:84:ab: ab:8b:fc:88:cd:1b:4c:c4:ee:3c:79:85:31:33:80: e1:47:54:8b:e2:b3:8a:15:c7:08:13:df:09:3f:17: 2f:1b:5c:99:33:45:0a:39:a8:f2:3b:6a:24:63:7a: e7:ef:d3:11:00:41:c7:3e:c3:d1:3e:d6:c0:52:40: ef:1a:b9:3d:81:88:d1:01:4b:8f:23:5a:d6:58:4e: 50:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:48:A3:03:4D:CA:BD:D8:F1:45:51:49:C4:AE:9C:4E:BF:DD:C9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4ccaf6cf-5069-3f74-915c-660c34906331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:52:0c:67:c4:8f:94:f5:66:dd:e5:32:5e:09:82:36:4a:bc: 7f:4c:56:29:be:f9:f0:af:6f:1f:06:4b:bb:3c:f0:04:01:13: fc:f9:59:a7:6e:d3:2d:0e:33:cc:5d:f5:db:2d:d0:5d:53:c8: 73:b4:3d:fa:12:95:b5:92:cd:be:5d:80:c0:47:cf:d0:bf:0b: 8a:05:e8:19:b6:1d:2a:fd:ff:58:a8:c4:73:bd:66:6f:bf:c6: 5f:ce:1f:e3:f5:6e:ca:b5:07:bc:f9:9a:c6:d1:a8:f3:61:59: db:e7:cb:84:87:0e:5d:d1:ea:e2:4f:02:8d:31:92:ab:24:77: 6f:a2:88:f5:aa:15:8b:ca:a6:65:9f:ef:7d:c8:16:7f:ab:83: cb:32:a5:b4:ba:48:9b:4e:57:ac:73:c5:54:f3:4c:ef:82:69: 34:c3:80:48:70:ce:fa:e2:82:5c:16:d0:bb:49:39:ec:eb:01: 74:d4:2e:49:0b:c3:05:c9:33:31:d1:c2:4b:3a:83:2b:f7:f4: 9d:11:66:82:ce:e2:cb:77:bd:7f:12:2d:81:77:22:dd:36:3c: 74:70:1a:c8:d1:0b:86:8f:0e:9f:45:05:1c:ff:06:2d:c6:33: cb:33:eb:df:8a:d3:d0:77:a2:74:1c:0e:6a:c5:5b:cf:ce:27: f3:a7:29:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7mzN37lHim4ZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZTg5ZDNlMjctNTdlYy00ZjBiLWIzMzEtNzE2MWJiZGIwNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD+z6AeqCcSluL1nhFA5HmgH0d9VKqN8H13l ri/6obLDwFNExrHuGz/vvBsxmU06cdyU8aBLcr+CcHfm54Dh8F12ULiVZ39G0fnp kQqbKQftzlCBLrKpDDSVB5boGkGinljmEWpK4vnhgEcc+jRfbANi0F6jpV0NHoPk 8kyCieatlT413OHfbLZ1CzAmsIzXLJsuqAtODjqW0sATDM+krnTIyN/q5SbO0+6d uYx99NNOhKuri/yIzRtMxO48eYUxM4DhR1SL4rOKFccIE98JPxcvG1yZM0UKOajy O2okY3rn79MRAEHHPsPRPtbAUkDvGrk9gYjRAUuPI1rWWE5QTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJIowNNyr3Y8UVRScSunE6/3cn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGNjYWY2Y2YtNTA2OS0z Zjc0LTkxNWMtNjYwYzM0OTA2MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBSDGfEj5T1Zt3lMl4JgjZKvH9MVim++fCvbx8GS7s88AQBE/z5Wadu 0y0OM8xd9dst0F1TyHO0PfoSlbWSzb5dgMBHz9C/C4oF6Bm2HSr9/1ioxHO9Zm+/ xl/OH+P1bsq1B7z5msbRqPNhWdvny4SHDl3R6uJPAo0xkqskd2+iiPWqFYvKpmWf 733IFn+rg8sypbS6SJtOV6xzxVTzTO+CaTTDgEhwzvriglwW0LtJOezrAXTULkkL wwXJMzHRwks6gyv39J0RZoLO4st3vX8SLYF3It02PHRwGsjRC4aPDp9FBRz/Bi3G M8sz69+K09B3onQcDmrFW8/OJ/OnKZo= -----END CERTIFICATE-----Generated at Sat Aug 23 20:19:15 2025 by rpki-client