$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf1ab58f-8362-3974-a9b2-14647b849dec.roa File: cf1ab58f-8362-3974-a9b2-14647b849dec.roa (raw, json) Hash identifier: W4jnRu8yumjFppzgCzDk35grYwoc3oPUL9b6dWUU/Mo= Subject key identifier: 70:7F:21:16:F7:18:D0:8A:AB:42:D7:8B:10:73:B4:88:66:D8:3C:74 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BB705771F7C1C8786DD80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf1ab58f-8362-3974-a9b2-14647b849dec.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3356 IP address blocks: 130.174.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b7:05:77:1f:7c:1c:87:86:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=94f16e69-2307-4b2b-ad9a-960801866de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:e1:58:38:13:d2:6c:9f:7a:6c:2b:1c:05: e0:89:ea:e6:89:93:ba:40:78:d7:64:4b:97:da:86: e9:dd:40:ca:41:c1:e2:c7:91:80:17:14:2d:12:d4: a5:48:2d:5d:44:91:6b:7d:a2:b4:82:b0:3f:c3:67: fd:86:01:2f:38:69:98:ad:da:a8:76:23:91:4f:bd: 2b:14:71:f4:0a:0c:49:e1:91:01:cc:43:8c:de:1d: d5:cf:7f:91:b4:58:10:a2:35:b9:d0:ef:62:eb:90: 94:83:d1:c2:35:42:f9:91:67:1f:1e:60:dc:c4:47: e7:1b:af:03:51:69:da:e3:8e:79:98:c8:e7:66:af: f1:27:99:b6:bd:78:0d:38:5f:fd:d9:8b:5c:e9:bd: 7e:ea:51:46:92:16:e8:76:57:13:9c:57:42:38:aa: 28:08:74:a7:35:43:84:ca:8a:bf:78:bc:86:0d:d4: 84:f8:c1:31:7e:f6:03:08:6f:7c:de:99:81:7e:7d: 8a:d6:68:7f:8e:df:0a:6b:a4:a4:48:c4:5d:1f:d5: 61:bc:a4:89:cb:36:27:2b:0d:12:19:b6:d1:0c:f4: ba:0f:0d:7e:01:87:5e:b0:e1:3f:45:46:0e:af:7b: 02:4e:e8:6b:85:40:f2:32:f3:17:8b:0c:ac:f0:db: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7F:21:16:F7:18:D0:8A:AB:42:D7:8B:10:73:B4:88:66:D8:3C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf1ab58f-8362-3974-a9b2-14647b849dec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cf:00:f6:ad:2e:e3:37:c9:98:9b:e7:85:e9:c9:8e:d7:8b: d7:68:2c:80:43:5c:a5:02:36:fa:1d:3d:e9:28:05:08:a8:cf: 9b:ff:6f:4f:84:d1:17:46:6b:61:ee:7d:6e:00:c2:d1:ed:63: 7b:7d:9b:a7:57:a6:09:d6:42:ee:81:5a:4b:92:b3:c0:37:c2: 61:46:b1:5c:1d:b3:18:ad:3e:17:15:a6:6a:a4:9a:6a:c6:2b: 3f:fc:4b:25:02:0c:e7:83:95:d7:d3:69:13:d6:1e:7b:78:06: 42:26:9f:dc:54:2f:d8:55:20:73:de:e4:3f:0f:21:cd:5d:0b: 23:90:e6:03:66:a2:fd:da:bc:fd:01:06:19:cf:ef:c2:81:2b: 35:c3:91:30:a6:1e:00:8b:2b:ff:52:74:e9:e9:6b:d1:3a:16: 1e:ee:dc:49:23:de:1b:3d:b3:98:c9:3a:ed:4e:7c:f7:5e:16: fe:6a:b2:e2:b0:9a:fc:3e:48:d2:82:2f:d3:af:82:78:b1:d7: 5b:e5:49:a7:78:30:49:91:4e:35:c5:53:34:00:fe:d6:05:4b: 82:b9:07:d6:02:9e:3e:7e:a6:5a:eb:95:57:f8:bf:3b:cf:8c: 6b:e7:41:16:a7:23:34:f5:bf:f6:b5:34:1c:88:6a:ff:93:de: b2:27:3c:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7cFdx98HIeG3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk OTRmMTZlNjktMjMwNy00YjJiLWFkOWEtOTYwODAxODY2ZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs/hWDgT0myfemwrHAXgiermiZO6QHjXZEuX 2obp3UDKQcHix5GAFxQtEtSlSC1dRJFrfaK0grA/w2f9hgEvOGmYrdqodiORT70r FHH0CgxJ4ZEBzEOM3h3Vz3+RtFgQojW50O9i65CUg9HCNUL5kWcfHmDcxEfnG68D UWna4455mMjnZq/xJ5m2vXgNOF/92Ytc6b1+6lFGkhbodlcTnFdCOKooCHSnNUOE yoq/eLyGDdSE+MExfvYDCG983pmBfn2K1mh/jt8Ka6SkSMRdH9VhvKSJyzYnKw0S GbbRDPS6Dw1+AYdesOE/RUYOr3sCTuhrhUDyMvMXiwys8NsZpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB/IRb3GNCKq0LXixBztIhm2Dx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2YxYWI1OGYtODM2Mi0z OTc0LWE5YjItMTQ2NDdiODQ5ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILPAPatLuM3yZib54XpyY7Xi9doLIBDXKUCNvodPekoBQioz5v/b0+E 0RdGa2HufW4AwtHtY3t9m6dXpgnWQu6BWkuSs8A3wmFGsVwdsxitPhcVpmqkmmrG Kz/8SyUCDOeDldfTaRPWHnt4BkImn9xUL9hVIHPe5D8PIc1dCyOQ5gNmov3avP0B BhnP78KBKzXDkTCmHgCLK/9SdOnpa9E6Fh7u3Ekj3hs9s5jJOu1OfPdeFv5qsuKw mvw+SNKCL9Ovgnix11vlSad4MEmRTjXFUzQA/tYFS4K5B9YCnj5+plrrlVf4vzvP jGvnQRanIzT1v/a1NByIav+T3rInPLQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:11:25 2025 by rpki-client