$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa File: 5af3f919-f57e-33a2-9b2b-392746a4669f.roa (raw, json) Hash identifier: UESoWT0WztYa9NowY30lY7BwDZIiP+NWuqtE10qrua0= Subject key identifier: A2:17:01:72:A2:33:27:BF:0D:C0:1A:F8:13:60:63:D9:E2:44:08:FE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC4796F727624516B7300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 130.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c4:79:6f:72:76:24:51:6b:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=90b40124-c073-467e-ad26-4c0ba35656c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:04:53:43:5d:d7:fd:0e:39:46:62:15:27:f8: c7:2d:6d:7c:cf:bc:c7:f6:a6:90:41:09:88:19:b0: db:73:a0:9e:aa:87:0e:97:78:a4:21:b2:47:94:02: 45:20:97:fb:3b:a2:aa:d2:f0:73:c5:11:55:dc:23: 77:e1:2a:21:43:e8:57:63:3d:a7:9d:b3:00:26:fb: e1:5c:20:25:0a:03:83:e7:4a:f4:77:ca:0c:a1:79: 45:92:53:9d:a4:6a:28:b9:43:4e:ed:77:13:1e:4a: 41:c2:3d:47:62:e1:52:8e:02:54:4d:7b:58:64:28: 51:5f:aa:9e:59:d4:6b:1a:15:e8:f9:bf:6f:e4:12: 76:8f:2b:97:e2:5d:d7:73:68:33:5a:9a:ab:f4:4c: 57:4f:94:e2:d6:b7:02:f1:8a:ae:7b:2e:9c:ae:28: f7:23:b8:d8:66:b7:68:aa:ca:60:f7:92:a4:2f:ce: 9d:32:dd:c1:7a:50:e5:ff:41:80:8f:de:49:f3:f5: d5:4d:d8:75:2a:fe:fd:74:6e:09:2f:45:11:34:e2: 31:90:86:a4:9a:71:94:60:28:46:f7:6f:4a:fb:a6: ff:66:9f:0b:05:cc:94:15:6f:1f:c7:85:82:40:67: 5d:78:f3:d2:56:93:f1:5a:de:ad:72:5b:6d:29:9d: 9d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:17:01:72:A2:33:27:BF:0D:C0:1A:F8:13:60:63:D9:E2:44:08:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b6:87:1e:3a:97:71:a3:f3:78:db:b6:62:81:56:e4:d2:c9: c4:8a:2d:aa:1c:6d:d9:3d:87:82:67:2f:61:44:87:01:78:25: b7:d0:90:cd:b4:50:40:94:6a:53:3a:ab:0f:5e:b9:3c:e2:8b: 41:09:42:3d:6c:7b:cc:c1:76:83:9a:2d:a1:7f:5a:36:b3:6b: b8:30:c8:f2:f9:1f:28:3f:22:d1:2d:eb:aa:82:84:cd:cd:7a: a9:ad:87:52:99:da:96:e7:3a:42:16:72:e4:67:cb:b0:3b:4d: ae:5a:2a:60:db:95:38:ca:b8:ef:e8:fb:2e:45:af:4f:2c:68: d5:d6:34:04:61:ea:51:4b:37:b1:9c:35:08:da:d6:06:49:4a: 1c:90:b4:ec:78:3b:eb:3a:1d:ec:3d:5f:21:a5:35:8c:a8:7f: 57:8b:d0:37:d7:d1:52:70:3a:9c:af:b4:58:2e:a0:15:64:44: 13:a5:d5:cb:c6:41:75:98:1b:00:18:a1:5e:7b:b5:28:a0:11: 15:59:8b:86:2d:19:25:a0:c8:4d:eb:60:2d:7e:11:05:17:6b: e6:90:21:73:5a:06:96:e0:c4:d3:ac:ee:58:8d:aa:54:db:84: ea:c4:e4:1b:8c:01:3f:75:38:9f:3d:9c:17:43:ee:0a:a8:93: 9d:67:a2:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8R5b3J2JFFrcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTBiNDAxMjQtYzA3My00NjdlLWFkMjYtNGMwYmEzNTY1NmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQRTQ13X/Q45RmIVJ/jHLW18z7zH9qaQQQmI GbDbc6CeqocOl3ikIbJHlAJFIJf7O6Kq0vBzxRFV3CN34SohQ+hXYz2nnbMAJvvh XCAlCgOD50r0d8oMoXlFklOdpGoouUNO7XcTHkpBwj1HYuFSjgJUTXtYZChRX6qe WdRrGhXo+b9v5BJ2jyuX4l3Xc2gzWpqr9ExXT5Ti1rcC8Yquey6crij3I7jYZrdo qspg95KkL86dMt3BelDl/0GAj95J8/XVTdh1Kv79dG4JL0URNOIxkIakmnGUYChG 929K+6b/Zp8LBcyUFW8fx4WCQGddePPSVpPxWt6tclttKZ2dUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIXAXKiMye/DcAa+BNgY9niRAj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWFmM2Y5MTktZjU3ZS0z M2EyLTliMmItMzkyNzQ2YTQ2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu2hx46l3Gj83jbtmKBVuTSycSKLaocbdk9h4JnL2FEhwF4JbfQkM20 UECUalM6qw9euTzii0EJQj1se8zBdoOaLaF/Wjaza7gwyPL5Hyg/ItEt66qChM3N eqmth1KZ2pbnOkIWcuRny7A7Ta5aKmDblTjKuO/o+y5Fr08saNXWNARh6lFLN7Gc NQja1gZJShyQtOx4O+s6Hew9XyGlNYyof1eL0DfX0VJwOpyvtFguoBVkRBOl1cvG QXWYGwAYoV57tSigERVZi4YtGSWgyE3rYC1+EQUXa+aQIXNaBpbgxNOs7liNqlTb hOrE5BuMAT91OJ89nBdD7gqok51nonA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:09:27 2025 by rpki-client