$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa File: cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa (raw, json) Hash identifier: jprcl/k++z0CxLVaGEpb6Il2Uy/dkygiak6gXsW0dCY= Subject key identifier: 56:70:E8:2E:39:1E:51:F0:A2:65:AD:A6:24:0B:22:D0:00:76:2A:94 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BCB580514857866645800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 130.174.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:cb:58:05:14:85:78:66:64:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=2a20fdda-874c-4a3f-a4e1-fdd6fb0fc48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:bf:10:3a:57:2b:73:d8:3c:00:8e:60:f9:89: 66:0f:c3:39:60:14:1d:ed:34:50:69:d6:be:93:4d: 73:bd:2e:f3:b0:9a:91:10:bc:1f:04:58:ae:6e:ee: c1:ac:99:84:b4:4a:2f:c6:b6:4c:ac:00:8d:ee:8b: 4b:2f:f1:92:93:36:82:40:a1:c0:30:4b:13:83:99: 42:12:25:67:10:12:db:98:ae:50:e4:d5:3d:77:1a: 83:e2:05:ec:fa:38:76:06:02:73:37:0c:e5:17:d0: 39:4b:2c:04:aa:7d:c1:63:0b:07:fa:58:d9:15:5f: 99:f3:48:4f:40:90:c4:81:a8:81:5f:57:94:b5:b7: 79:74:11:43:07:8f:74:f2:81:d4:d7:f0:48:d8:90: d8:63:fc:23:69:05:e5:49:75:a7:cc:71:f7:3e:0b: 44:72:7a:be:a3:f9:cb:37:1a:4e:d5:12:9b:07:e5: b7:85:ae:31:30:c9:8e:b1:74:ed:d5:1a:6d:45:79: df:65:57:f0:47:1f:83:3f:8d:2e:96:3d:c5:eb:3f: b0:b5:04:de:52:47:1b:f1:eb:06:d9:a5:46:67:5a: 63:20:5e:38:e5:46:04:23:e6:4c:79:92:89:d6:c7: 0b:29:9d:11:11:8c:fa:0c:b1:73:2f:6e:6b:8d:18: 86:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:E8:2E:39:1E:51:F0:A2:65:AD:A6:24:0B:22:D0:00:76:2A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6f:2b:a0:6d:89:52:01:d1:78:90:f0:58:a2:0b:72:6b:b4: a4:a0:d6:c4:64:30:06:21:93:bf:93:17:1d:4c:40:6d:1d:5e: d7:e4:ea:bb:b8:22:4b:b5:ed:e0:6c:ff:91:f1:14:c4:ff:b3: 39:55:2e:bf:d9:2c:9c:78:2b:66:9e:89:bf:9d:9e:8c:f1:15: 88:07:cc:26:e0:4f:30:5a:0d:08:3e:f7:5a:b8:78:f8:78:8e: d9:65:f0:39:e6:1a:36:0b:04:cb:75:7c:a1:ee:85:21:7c:74: 06:e7:f4:5e:34:c3:f8:c4:5c:2e:49:ef:9d:73:67:50:9f:06: f8:23:aa:04:cd:52:9b:6e:d3:13:76:52:ad:41:c8:1c:b2:00: ed:a9:ba:b6:f7:00:dd:3c:89:83:9f:2f:8f:cd:1a:38:53:c4: 5d:7f:72:5f:bb:16:f2:4e:ac:38:8e:a1:50:25:b6:e2:98:6b: 84:62:cf:5d:5b:3f:ed:38:9d:02:fa:14:ba:5c:4c:00:ad:00: 88:36:d7:d3:c7:33:19:37:7e:1a:43:92:ce:e0:27:c6:ea:ca: 43:b2:b1:b2:56:d0:2b:16:56:77:aa:cd:e7:26:e4:02:be:21: 52:e4:1f:20:2e:d8:4e:08:88:cc:ea:91:3b:b0:9a:a4:b2:c5: d1:e4:23:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8tYBRSFeGZkWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MmEyMGZkZGEtODc0Yy00YTNmLWE0ZTEtZmRkNmZiMGZjNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+b8QOlcrc9g8AI5g+YlmD8M5YBQd7TRQada+ k01zvS7zsJqRELwfBFiubu7BrJmEtEovxrZMrACN7otLL/GSkzaCQKHAMEsTg5lC EiVnEBLbmK5Q5NU9dxqD4gXs+jh2BgJzNwzlF9A5SywEqn3BYwsH+ljZFV+Z80hP QJDEgaiBX1eUtbd5dBFDB4908oHU1/BI2JDYY/wjaQXlSXWnzHH3PgtEcnq+o/nL NxpO1RKbB+W3ha4xMMmOsXTt1RptRXnfZVfwRx+DP40ulj3F6z+wtQTeUkcb8esG 2aVGZ1pjIF445UYEI+ZMeZKJ1scLKZ0REYz6DLFzL25rjRiG+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZw6C45HlHwomWtpiQLItAAdiqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2Y4OGI2NDEtM2I2MC0z ZjVkLWJlYTctMDdlZmRkYWY4OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClvK6BtiVIB0XiQ8FiiC3JrtKSg1sRkMAYhk7+TFx1MQG0dXtfk6ru4 Iku17eBs/5HxFMT/szlVLr/ZLJx4K2aeib+dnozxFYgHzCbgTzBaDQg+91q4ePh4 jtll8DnmGjYLBMt1fKHuhSF8dAbn9F40w/jEXC5J751zZ1CfBvgjqgTNUptu0xN2 Uq1ByByyAO2purb3AN08iYOfL4/NGjhTxF1/cl+7FvJOrDiOoVAltuKYa4Riz11b P+04nQL6FLpcTACtAIg219PHMxk3fhpDks7gJ8bqykOysbJW0CsWVneqzecm5AK+ IVLkHyAu2E4IiMzqkTuwmqSyxdHkI/M= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:25 2025 by rpki-client