$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa File: b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa (raw, json) Hash identifier: wLZpLhg1xJTHl+rSeNT7tYNfrlsMRrG7wGwVruQy6RA= Subject key identifier: 00:3F:C5:45:D7:C9:4C:D8:C8:89:B0:B8:AD:F3:F4:C0:5A:CE:AD:E1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A1018E7701F70FE19A2E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3360 IP address blocks: 130.174.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:01:8e:77:01:f7:0f:e1:9a:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=e9efaf22-89f6-4b13-a9c1-651e31646c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:31:fe:31:f6:20:6d:67:e1:f9:11:99:ab: e0:c5:d8:07:fb:f1:41:e9:8c:bb:c0:87:05:06:3e: 6b:2f:52:91:5c:43:54:26:b0:20:a1:ff:ed:74:7f: b9:fd:0c:83:01:ff:8d:bd:42:02:05:9e:9e:18:54: d7:83:9a:1c:12:8b:eb:09:16:f8:c9:be:66:92:ab: 93:3c:d4:fd:5e:1b:f7:0b:af:34:c6:d7:25:1c:13: 6a:f8:02:da:25:cd:d6:17:77:40:af:1a:70:06:54: 4a:9a:a1:f9:73:7c:4c:62:d9:52:ef:f4:7e:7c:5e: a9:90:b8:21:91:33:c8:5f:9c:74:12:c7:1f:5c:70: 33:37:b2:f8:5a:8f:19:ba:c2:d0:11:99:9a:94:4e: 1f:d5:90:5d:ce:24:dd:e7:e2:bf:c4:9a:0a:d8:21: 0c:70:c2:84:07:23:bd:2c:e5:23:fe:a5:f5:45:18: 41:cb:14:8d:88:46:26:03:9d:87:6e:3b:24:07:1f: 4b:fd:37:d4:00:7b:57:db:d9:5c:a5:06:e7:92:04: b9:e2:4f:b5:b9:f3:07:ee:6c:34:05:bd:11:ed:fb: 1e:5b:6e:7d:af:c0:b8:a8:a3:02:bb:a0:7a:cd:d7: 72:81:eb:04:08:2a:0e:99:e5:e0:14:82:29:a6:09: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3F:C5:45:D7:C9:4C:D8:C8:89:B0:B8:AD:F3:F4:C0:5A:CE:AD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2d:33:63:16:af:7a:b3:bf:57:5d:d4:63:06:9b:a0:b6:47: 43:32:f5:fc:c2:8d:46:20:45:70:f6:6a:aa:00:78:5f:16:43: c9:1f:6b:20:0d:76:5f:dd:e4:34:46:1a:72:97:f5:6c:52:5f: d4:61:17:c9:7d:4f:5b:36:9b:64:d2:db:4d:ff:ed:51:e7:37: 14:58:94:f9:a5:e8:66:78:75:e2:9a:c5:a1:d5:80:54:e1:cd: 3d:4b:eb:ea:66:90:b6:33:69:ce:77:46:15:00:02:35:3d:ed: 62:05:d2:12:c0:51:0d:ab:86:17:e8:5d:76:cf:67:bd:e8:93: b6:01:c0:c3:ea:51:92:f5:5f:2d:64:e3:08:a6:4e:e6:0a:71: e3:bb:e9:b7:22:14:6a:8d:d6:21:0f:e8:a9:b2:b2:17:cb:06: 2d:9c:a0:ec:2c:9a:c5:3e:e4:8c:3d:1c:73:2b:e3:6b:18:f0: cf:b7:70:8e:a6:d1:d3:c7:14:c2:42:4e:7d:19:8d:14:03:eb: d4:35:af:75:8d:df:59:fd:c4:a9:3f:ec:df:2f:f1:42:58:87: aa:73:f9:f1:56:22:2f:5c:b6:fb:45:7a:fe:39:1b:f8:0d:4a: de:21:62:07:ad:3d:28:75:ce:44:66:9f:82:fe:19:b9:1b:cb: 38:a4:e5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToQGOdwH3D+GaLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTllZmFmMjItODlmNi00YjEzLWE5YzEtNjUxZTMxNjQ2YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk14x/jH2IG1n4fkRmavgxdgH+/FB6Yy7wIcF Bj5rL1KRXENUJrAgof/tdH+5/QyDAf+NvUICBZ6eGFTXg5ocEovrCRb4yb5mkquT PNT9Xhv3C680xtclHBNq+ALaJc3WF3dArxpwBlRKmqH5c3xMYtlS7/R+fF6pkLgh kTPIX5x0EscfXHAzN7L4Wo8ZusLQEZmalE4f1ZBdziTd5+K/xJoK2CEMcMKEByO9 LOUj/qX1RRhByxSNiEYmA52HbjskBx9L/TfUAHtX29lcpQbnkgS54k+1ufMH7mw0 Bb0R7fseW259r8C4qKMCu6B6zddygesECCoOmeXgFIIppgnbYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAA/xUXXyUzYyImwuK3z9MBazq3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRhYjFhYTAtOGVjZC0z MTM4LWE1YTctZTExMDFhNzVkZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHktM2MWr3qzv1dd1GMGm6C2R0My9fzCjUYgRXD2aqoAeF8WQ8kfayAN dl/d5DRGGnKX9WxSX9RhF8l9T1s2m2TS203/7VHnNxRYlPml6GZ4deKaxaHVgFTh zT1L6+pmkLYzac53RhUAAjU97WIF0hLAUQ2rhhfoXXbPZ73ok7YBwMPqUZL1Xy1k 4wimTuYKceO76bciFGqN1iEP6KmyshfLBi2coOwsmsU+5Iw9HHMr42sY8M+3cI6m 0dPHFMJCTn0ZjRQD69Q1r3WN31n9xKk/7N8v8UJYh6pz+fFWIi9ctvtFev45G/gN St4hYgetPSh1zkRmn4L+Gbkbyzik5eo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:16 2025 by rpki-client