$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d45641b6-c829-3eb0-8af8-e4efe32f2201.roa File: d45641b6-c829-3eb0-8af8-e4efe32f2201.roa (raw, json) Hash identifier: 5CXXSWozazXQDjUwPjYSZzgFaDoQHB5zxOkuMMd4S44= Subject key identifier: 17:C6:15:EA:ED:31:52:5F:CD:48:4D:DE:A9:6F:AD:A7:94:4D:D0:1B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A0FE1F3055D424E8F40C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d45641b6-c829-3eb0-8af8-e4efe32f2201.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 202 IP address blocks: 130.174.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fe:1f:30:55:d4:24:e8:f4:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=c012ca0b-1253-4f7f-a33f-49ca046b1ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ab:6f:ab:25:e2:88:d3:cf:08:e4:e4:9f:80: 64:4e:40:53:cd:64:2d:fd:22:d5:e5:00:17:d5:b4: 8f:cd:54:22:8d:65:43:a3:be:6d:ce:9a:0d:ab:8e: 01:e9:5c:a1:5b:17:89:ef:a7:16:c0:1c:08:7e:42: a9:f7:39:7c:ea:3c:72:37:f0:46:ab:9b:0a:33:c7: 12:c9:df:51:c3:4f:06:bb:7f:c4:42:81:2d:4a:17: 51:7e:49:6b:4a:01:71:70:21:52:23:e4:a2:7a:10: 0e:b1:a3:10:d8:28:64:fb:74:34:0c:09:32:a9:ea: 8b:4e:8c:99:6c:d6:9f:5d:01:ad:fc:51:ca:4b:81: 3e:9d:46:b2:4c:28:d8:8f:35:a8:60:f3:a9:9c:e2: a9:11:1b:65:3c:af:06:09:5b:b2:0e:c3:c0:34:58: 2c:52:0d:01:d0:44:40:1d:78:c6:93:ff:3c:54:96: e1:0e:de:6b:24:f5:55:b7:7d:eb:db:b5:a6:12:63: f2:d1:ba:ac:ea:9c:79:e0:c5:2c:bf:6d:f3:b3:76: a5:34:b4:1e:da:85:4f:42:19:a5:82:f7:c2:e6:e0: 63:e2:fa:d4:ae:7a:e0:3e:bc:59:fb:d8:0b:c8:30: 91:1a:ae:7d:53:06:92:e0:21:8d:46:86:c9:72:af: 68:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:15:EA:ED:31:52:5F:CD:48:4D:DE:A9:6F:AD:A7:94:4D:D0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d45641b6-c829-3eb0-8af8-e4efe32f2201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b8:06:74:d6:4f:f5:90:13:c0:6d:70:01:16:38:71:30:b3: 0c:ce:16:10:e1:b0:4d:49:35:e6:15:5f:43:5b:cd:20:4b:68: ed:d6:c9:ed:ec:db:aa:50:e5:78:0f:a4:21:c0:6c:78:06:99: 7a:ab:08:9c:06:00:01:40:b1:85:55:33:cb:96:7b:72:f2:99: 03:97:29:2b:a8:58:7b:7e:28:61:e7:60:5f:d0:ee:29:98:5e: c3:da:f6:0d:ac:10:54:cd:ac:40:f0:bf:39:9b:49:2b:c4:d3: 79:74:ca:d9:cc:18:1e:15:42:f2:a0:3c:9a:8f:b2:12:37:b0: 73:4d:05:45:d0:4b:f9:7f:c7:6d:c1:a2:1b:f6:ed:12:8d:d8: 03:60:7f:11:43:da:7c:bf:ec:e7:d9:1f:08:df:e5:21:81:d5: 1b:54:8a:9f:ba:25:b9:62:f2:5f:c6:ec:00:d8:71:04:13:9d: d5:6b:ba:7e:34:00:95:eb:5e:c2:d6:45:f8:6a:89:bc:55:64: a1:be:c2:06:78:99:cd:f4:a3:fe:51:c3:59:09:31:41:21:95: 05:26:f7:36:c0:f2:85:6f:94:1d:47:a8:ec:28:ea:e6:3b:bf: 81:aa:9c:a8:3a:1f:2d:a6:83:a6:fe:c7:ab:20:ce:e3:2e:c4: 4f:a8:74:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToP4fMFXUJOj0DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YzAxMmNhMGItMTI1My00ZjdmLWEzM2YtNDljYTA0NmIxYWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKtvqyXiiNPPCOTkn4BkTkBTzWQt/SLV5QAX 1bSPzVQijWVDo75tzpoNq44B6VyhWxeJ76cWwBwIfkKp9zl86jxyN/BGq5sKM8cS yd9Rw08Gu3/EQoEtShdRfklrSgFxcCFSI+SiehAOsaMQ2Chk+3Q0DAkyqeqLToyZ bNafXQGt/FHKS4E+nUayTCjYjzWoYPOpnOKpERtlPK8GCVuyDsPANFgsUg0B0ERA HXjGk/88VJbhDt5rJPVVt33r27WmEmPy0bqs6px54MUsv23zs3alNLQe2oVPQhml gvfC5uBj4vrUrnrgPrxZ+9gLyDCRGq59UwaS4CGNRobJcq9oEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfGFertMVJfzUhN3qlvraeUTdAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDQ1NjQxYjYtYzgyOS0z ZWIwLThhZjgtZTRlZmUzMmYyMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu4BnTWT/WQE8BtcAEWOHEwswzOFhDhsE1JNeYVX0NbzSBLaO3Wye3s 26pQ5XgPpCHAbHgGmXqrCJwGAAFAsYVVM8uWe3LymQOXKSuoWHt+KGHnYF/Q7imY XsPa9g2sEFTNrEDwvzmbSSvE03l0ytnMGB4VQvKgPJqPshI3sHNNBUXQS/l/x23B ohv27RKN2ANgfxFD2ny/7OfZHwjf5SGB1RtUip+6Jbli8l/G7ADYcQQTndVrun40 AJXrXsLWRfhqibxVZKG+wgZ4mc30o/5Rw1kJMUEhlQUm9zbA8oVvlB1HqOwo6uY7 v4GqnKg6Hy2mg6b+x6sgzuMuxE+odPE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:51:45 2025 by rpki-client