$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af71ea7a-8fcd-3477-a59d-7a208d8f337c.roa File: af71ea7a-8fcd-3477-a59d-7a208d8f337c.roa (raw, json) Hash identifier: zGLBApBSk9PETJMxlb/czrAN0b6X1WFcx2TCwM8Xhpg= Subject key identifier: 63:23:79:8E:DA:92:3C:CD:6A:9E:C7:F5:DB:DF:65:05:9D:52:C2:F7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A105B12F7A50AE508EF740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af71ea7a-8fcd-3477-a59d-7a208d8f337c.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3360 IP address blocks: 130.174.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:05:b1:2f:7a:50:ae:50:8e:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=8a5f3d1a-54be-498d-8991-29205970941f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:25:e9:42:32:62:ab:d7:af:98:4b:b8:b8:5d: 55:5a:80:d8:63:6b:10:92:9f:0a:9f:bc:49:5c:1c: 5f:97:f4:39:63:25:04:06:82:fa:d9:c2:38:2e:6e: df:f7:f0:89:ec:6b:a0:ae:48:d7:cc:d3:1b:e5:62: a9:b0:b3:4d:11:15:d8:01:0d:b7:8c:84:c2:d6:a3: 4b:3a:c6:c4:ca:7e:77:6b:de:6a:6c:bb:cf:76:43: 64:c9:1a:b3:36:4a:6b:9e:c7:de:c4:29:8b:48:4d: eb:9f:b4:46:bf:93:f7:cf:c5:16:d9:fd:4e:9a:12: 31:40:73:dd:98:2f:23:4f:55:52:43:dc:2c:da:28: 34:63:3e:89:51:85:b7:4f:45:2e:5a:9b:7a:7b:11: 08:1e:d0:b4:78:31:cb:04:c5:60:eb:07:6c:5c:3d: 60:41:63:aa:55:bb:3b:5f:e0:8f:c8:58:51:62:83: 2b:7a:d3:06:75:4a:9c:8c:68:f9:5c:b7:34:7f:d6: c9:74:9f:b8:c8:be:fd:72:d0:3c:a8:c2:5a:9c:31: aa:f1:49:74:44:76:cf:0a:91:15:6b:80:18:47:13: 54:0a:d7:53:44:e5:6f:89:6a:f1:1e:41:8e:52:30: e5:4a:92:93:a1:71:dd:73:8c:fd:1d:35:7f:94:dc: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:23:79:8E:DA:92:3C:CD:6A:9E:C7:F5:DB:DF:65:05:9D:52:C2:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/af71ea7a-8fcd-3477-a59d-7a208d8f337c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e6:da:88:ca:fc:7f:85:dd:d3:ef:12:29:28:48:15:d6:df: 64:fb:31:c3:c6:66:b5:e5:81:f8:8e:c1:98:dc:a0:09:44:91: 92:97:0d:59:7a:6c:ae:46:b7:59:d5:75:55:74:fc:a4:b4:fc: 11:98:ee:18:a8:1c:a6:4b:7a:ad:46:51:84:2d:14:cb:ae:37: 5a:71:76:ce:00:db:88:10:e4:e6:31:1c:f4:49:68:31:a2:2b: 9d:88:75:8b:ef:3b:ff:3f:9e:6a:67:65:2b:0c:93:ef:30:2f: a3:7d:dd:5a:84:c6:e1:de:db:cf:9c:98:07:3d:55:27:ad:f1: 7d:e6:51:47:8c:39:3e:f3:5a:9a:d5:ea:f8:04:99:16:07:8b: fd:5f:7a:af:79:22:e2:16:42:8a:b6:a3:97:42:fa:1e:4c:b8: 18:b7:e2:d7:99:c7:4d:ac:ab:49:59:3c:14:fe:6b:46:e7:6a: 2c:97:46:bc:27:bf:59:8d:35:4a:ab:37:32:0f:b9:0f:a0:57: 96:51:92:3d:06:03:47:9e:83:ef:35:47:c4:35:c7:1c:c6:04: 7d:30:bc:0b:f9:ad:a0:8b:01:d8:1e:2b:a8:c3:98:1e:4e:9f: 52:b4:07:76:3a:19:ec:62:d4:75:81:ee:63:2b:68:3e:22:3d: 40:14:f1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToQWxL3pQrlCO90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OGE1ZjNkMWEtNTRiZS00OThkLTg5OTEtMjkyMDU5NzA5NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyXpQjJiq9evmEu4uF1VWoDYY2sQkp8Kn7xJ XBxfl/Q5YyUEBoL62cI4Lm7f9/CJ7GugrkjXzNMb5WKpsLNNERXYAQ23jITC1qNL OsbEyn53a95qbLvPdkNkyRqzNkprnsfexCmLSE3rn7RGv5P3z8UW2f1OmhIxQHPd mC8jT1VSQ9ws2ig0Yz6JUYW3T0UuWpt6exEIHtC0eDHLBMVg6wdsXD1gQWOqVbs7 X+CPyFhRYoMretMGdUqcjGj5XLc0f9bJdJ+4yL79ctA8qMJanDGq8Ul0RHbPCpEV a4AYRxNUCtdTROVviWrxHkGOUjDlSpKToXHdc4z9HTV/lNxsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMjeY7akjzNap7H9dvfZQWdUsL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWY3MWVhN2EtOGZjZC0z NDc3LWE1OWQtN2EyMDhkOGYzMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvm2ojK/H+F3dPvEikoSBXW32T7McPGZrXlgfiOwZjcoAlEkZKXDVl6 bK5Gt1nVdVV0/KS0/BGY7hioHKZLeq1GUYQtFMuuN1pxds4A24gQ5OYxHPRJaDGi K52IdYvvO/8/nmpnZSsMk+8wL6N93VqExuHe28+cmAc9VSet8X3mUUeMOT7zWprV 6vgEmRYHi/1feq95IuIWQoq2o5dC+h5MuBi34teZx02sq0lZPBT+a0bnaiyXRrwn v1mNNUqrNzIPuQ+gV5ZRkj0GA0eeg+81R8Q1xxzGBH0wvAv5raCLAdgeK6jDmB5O n1K0B3Y6Gexi1HWB7mMraD4iPUAU8cg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:44 2025 by rpki-client