$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa File: 85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa (raw, json) Hash identifier: s9qTyL5/eoRU9avWvuonHlHk53B6K0Ip+Pg6MzYiP+s= Subject key identifier: 99:89:84:8B:69:11:6A:16:35:FA:2F:57:19:9A:63:5F:F1:6A:8C:8F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BCD8A2A4AC3B7569FC500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 130.174.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:cd:8a:2a:4a:c3:b7:56:9f:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ae8c4d8c-b70d-45bf-9bf2-e2bde116b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d5:10:ff:ed:8e:b4:9a:4f:9e:49:6c:2b:2e: 41:b7:bc:fe:c6:d2:80:6d:c5:21:9b:ec:8c:7b:65: f2:fa:92:d1:f6:14:61:b4:af:36:ce:4f:17:ee:c1: 8d:8f:ce:c2:db:49:80:b0:f3:45:2a:b8:8a:61:95: de:4a:4b:04:07:fe:c1:39:b9:32:db:2b:5e:cf:b4: d7:00:b1:0b:2b:66:e2:a6:43:50:e9:0d:d4:f0:4e: a2:ec:ec:d6:0d:72:d4:88:37:e0:cc:30:68:3d:16: 2b:92:25:c5:11:2f:d7:a3:d9:47:a6:a6:38:d0:70: 30:55:4c:32:05:19:05:61:38:41:c2:5d:3d:5d:c6: a8:c8:6c:66:2e:c5:04:bc:39:0f:5a:47:f4:ea:63: 73:83:84:74:27:2e:d1:c7:6e:a9:23:d5:d4:43:4e: 90:37:b3:da:ed:5f:ba:48:5c:97:bb:54:ac:86:51: 37:7b:fc:64:22:6a:a1:a3:ed:c5:5f:d2:f4:bc:89: 4b:ce:f1:97:92:36:68:d8:80:0a:56:3a:e4:b8:a8: 15:8a:7f:4d:d3:ba:e6:78:2e:b4:6b:38:fd:6c:b1: 5b:b3:bc:be:99:8a:9b:c4:8f:7b:9e:19:c5:e8:78: 46:14:44:c9:db:3a:1a:00:57:46:b6:85:2a:f7:c2: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:84:8B:69:11:6A:16:35:FA:2F:57:19:9A:63:5F:F1:6A:8C:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e2:14:3d:35:be:ca:5b:0f:ee:7c:f1:e0:33:4c:96:3e:7c: 88:75:9c:ba:ed:6a:55:b1:4d:06:d2:50:cd:88:22:c7:26:16: 90:9d:7a:1f:9c:13:28:e0:de:94:2f:94:02:b6:5b:b3:7c:0b: 1a:e9:cc:22:ac:9e:7a:29:b1:df:bb:2b:8d:4a:ec:08:b8:d4: 55:70:5b:ee:0e:85:93:dc:d8:c3:b3:aa:1b:a5:42:e6:03:d3: 79:2a:41:9d:dd:d4:ce:8e:86:c2:f6:4c:aa:5e:ac:f3:db:ed: 5d:2c:90:b6:bf:d7:aa:a3:9e:20:7e:0b:82:8d:0a:b9:bb:36: 1a:88:11:a6:26:c7:93:2a:36:a5:a0:83:41:99:38:02:87:a3: e0:d5:9c:6c:59:bd:e0:f5:84:59:96:79:58:52:6c:56:56:97: d6:66:a9:b5:e5:ea:b8:ef:42:a1:a8:3a:fb:b8:b4:fe:9b:27: 6b:b4:f3:a7:05:ab:10:7d:a8:7c:52:69:5c:2a:bb:98:94:96: b3:be:8b:73:c2:3c:40:ca:d8:ea:1e:bb:3a:9f:41:e5:09:fa: b3:f6:da:27:fc:b8:5f:54:90:b2:e5:53:51:47:d2:f1:9a:12: 59:bc:19:ea:14:43:c1:59:2d:93:ad:bc:23:07:1d:b6:80:e6: 5a:db:c2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO82KKkrDt1afxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YWU4YzRkOGMtYjcwZC00NWJmLTliZjItZTJiZGUxMTZiOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tUQ/+2OtJpPnklsKy5Bt7z+xtKAbcUhm+yM e2Xy+pLR9hRhtK82zk8X7sGNj87C20mAsPNFKriKYZXeSksEB/7BObky2ytez7TX ALELK2bipkNQ6Q3U8E6i7OzWDXLUiDfgzDBoPRYrkiXFES/Xo9lHpqY40HAwVUwy BRkFYThBwl09XcaoyGxmLsUEvDkPWkf06mNzg4R0Jy7Rx26pI9XUQ06QN7Pa7V+6 SFyXu1SshlE3e/xkImqho+3FX9L0vIlLzvGXkjZo2IAKVjrkuKgVin9N07rmeC60 azj9bLFbs7y+mYqbxI97nhnF6HhGFETJ2zoaAFdGtoUq98KIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmJhItpEWoWNfovVxmaY1/xaoyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODVhMGZlZjMtZWJhOC0z MDlhLTliNjItNTM5ZDJlY2ZjYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDiFD01vspbD+588eAzTJY+fIh1nLrtalWxTQbSUM2IIscmFpCdeh+c Eyjg3pQvlAK2W7N8CxrpzCKsnnopsd+7K41K7Ai41FVwW+4OhZPc2MOzqhulQuYD 03kqQZ3d1M6OhsL2TKperPPb7V0skLa/16qjniB+C4KNCrm7NhqIEaYmx5MqNqWg g0GZOAKHo+DVnGxZveD1hFmWeVhSbFZWl9ZmqbXl6rjvQqGoOvu4tP6bJ2u086cF qxB9qHxSaVwqu5iUlrO+i3PCPEDK2OoeuzqfQeUJ+rP22if8uF9UkLLlU1FH0vGa Elm8GeoUQ8FZLZOtvCMHHbaA5lrbwoM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:52 2025 by rpki-client