$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa File: ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa (raw, json) Hash identifier: fH2hOrHhLLBfR5n1AL1mtEFThU9/gKxTyo6454/EVLk= Subject key identifier: 68:B1:91:3C:71:38:B5:E4:BC:E7:0A:C1:A6:E4:F9:FB:BB:A5:38:7D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A0FD2316F9336AF85ADD00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 130.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fd:23:16:f9:33:6a:f8:5a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=90479846-8aaa-496d-b627-bf57ec81250d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:39:a6:12:a9:2a:6e:1e:c9:63:d1:e6:bb: cd:1f:b2:17:8d:9e:64:dd:c5:a3:e4:3a:3f:b8:ab: 47:1a:31:8a:e1:36:70:c6:49:de:02:86:bf:f8:c6: 25:27:41:02:9d:02:b8:cf:74:29:8c:b5:ef:50:e3: 63:a3:69:47:01:6c:df:fd:4a:c5:03:c8:db:f8:73: d0:40:d3:1b:52:25:6a:c5:cb:21:6e:49:59:f3:0c: da:23:8e:7c:20:bf:4a:84:dd:6d:16:04:90:2f:d5: 51:ed:9a:e9:44:60:7d:6e:96:83:84:49:a1:fe:e5: d6:9a:bd:60:71:9e:f8:40:4f:82:b0:55:88:17:a4: 9e:7a:ae:8e:d7:69:74:6b:68:40:be:82:e8:57:5f: 09:3d:a7:c4:c5:c9:44:4d:54:f4:47:6c:bc:f2:80: 87:98:52:af:af:25:45:35:d6:0f:ad:1c:9e:3d:1a: 26:a8:dd:8c:b3:c3:59:10:9e:1c:a4:2e:99:c1:41: bb:7f:d8:21:b2:29:47:4e:bf:1a:51:52:3b:83:25: d4:eb:35:d8:bc:5d:ef:90:b7:04:b9:e6:19:4b:44: 94:ba:15:9d:55:6b:82:63:6a:cf:10:dd:cd:53:e1: af:09:73:e6:58:bc:de:69:62:e5:93:90:56:bd:84: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:91:3C:71:38:B5:E4:BC:E7:0A:C1:A6:E4:F9:FB:BB:A5:38:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:91:9f:1b:3e:ab:38:0b:58:cb:43:12:50:2b:31:95:45:ea: 8c:4a:e9:8c:51:aa:f7:ae:7a:ac:a1:18:d6:ab:a0:97:22:93: 78:46:d4:cf:70:15:75:47:86:85:dc:f5:1b:1c:96:1f:ac:4e: d0:fb:c4:df:e8:3d:40:6a:4a:b7:f4:cb:5c:11:93:7d:e6:cb: 93:9e:7e:1f:ee:cf:0b:39:3f:8a:20:26:dd:72:68:b9:8c:90: a1:d4:8f:dc:c4:09:b0:95:87:23:14:c5:6e:ec:c1:b6:42:da: 95:35:18:3d:55:e9:07:c6:5d:c4:b2:a6:c0:2b:d4:ce:68:59: 50:ae:33:70:6d:18:a4:d7:0e:2e:fb:f0:0a:db:61:d6:95:65: 71:3b:10:5e:94:a1:84:c2:d9:53:8f:ab:46:c9:45:08:8e:f2: f8:55:27:f8:b1:04:8c:db:04:57:92:5f:ae:38:10:8f:60:13: 4f:ad:8f:eb:57:b5:8c:ea:0b:94:5c:aa:2a:0b:bc:de:fa:62: 42:86:e5:1e:f3:de:62:35:76:74:26:1e:9b:d8:67:4f:4c:8b: c3:e9:9c:57:a5:35:44:28:1d:c6:06:b3:86:cf:3b:bd:8b:d7: 1b:d3:62:5d:89:cd:85:dd:c2:c0:90:24:f5:41:d2:8f:66:20: 83:3c:03:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToP0jFvkzavha3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTA0Nzk4NDYtOGFhYS00OTZkLWI2MjctYmY1N2VjODEyNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswM5phKpKm4eyWPR5rvNH7IXjZ5k3cWj5Do/ uKtHGjGK4TZwxkneAoa/+MYlJ0ECnQK4z3QpjLXvUONjo2lHAWzf/UrFA8jb+HPQ QNMbUiVqxcshbklZ8wzaI458IL9KhN1tFgSQL9VR7ZrpRGB9bpaDhEmh/uXWmr1g cZ74QE+CsFWIF6Seeq6O12l0a2hAvoLoV18JPafExclETVT0R2y88oCHmFKvryVF NdYPrRyePRomqN2Ms8NZEJ4cpC6ZwUG7f9ghsilHTr8aUVI7gyXU6zXYvF3vkLcE ueYZS0SUuhWdVWuCY2rPEN3NU+GvCXPmWLzeaWLlk5BWvYTKkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGixkTxxOLXkvOcKwabk+fu7pTh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmE4YTMwYzMtMDNkNi0z MmQzLWI2YjQtOGE1ZmYzNWMxYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeRnxs+qzgLWMtDElArMZVF6oxK6YxRqveueqyhGNaroJcik3hG1M9w FXVHhoXc9Rsclh+sTtD7xN/oPUBqSrf0y1wRk33my5Oefh/uzws5P4ogJt1yaLmM kKHUj9zECbCVhyMUxW7swbZC2pU1GD1V6QfGXcSypsAr1M5oWVCuM3BtGKTXDi77 8ArbYdaVZXE7EF6UoYTC2VOPq0bJRQiO8vhVJ/ixBIzbBFeSX644EI9gE0+tj+tX tYzqC5RcqioLvN76YkKG5R7z3mI1dnQmHpvYZ09Mi8PpnFelNUQoHcYGs4bPO72L 1xvTYl2JzYXdwsCQJPVB0o9mIIM8A38= -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:17 2025 by rpki-client