$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa File: d6456c5f-35f6-34a3-88e6-09296cb70725.roa (raw, json) Hash identifier: OA1eTx412Zq0t4MKDiRNZgj8mzpsNZA5PfhnyBNYBEE= Subject key identifier: E1:0B:12:70:F1:13:F4:28:FE:BD:8B:D1:A2:B8:5C:93:30:6D:14:11 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BB62A74A1670371C42B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 203 IP address blocks: 130.174.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b6:2a:74:a1:67:03:71:c4:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=c014ce96-c380-48a0-bfb9-a52db2b95575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:3f:e6:be:92:b1:23:04:4d:34:d1:64:43: 77:a1:2a:66:8d:fb:88:ee:ce:83:fe:4f:4c:31:bf: 1e:0a:fa:e7:ba:3e:42:58:1e:31:d7:a3:5f:22:7b: 74:17:3f:7c:de:32:fd:4c:2d:24:19:ed:86:03:52: 99:cd:bc:b4:33:4f:e4:fa:cd:ba:93:1b:b8:e5:b3: 87:61:a4:ad:4b:88:2a:0d:32:43:db:a1:89:ec:55: c9:87:53:65:46:e9:c9:64:89:12:ae:af:57:b2:8c: a7:67:24:2c:39:fa:34:1a:83:43:6f:5c:ed:5d:09: a7:e1:cd:b0:ab:fc:30:68:5e:8c:b8:c5:b2:c5:9e: 28:4b:b4:74:2c:53:41:0f:a4:0c:62:cc:7c:ac:6d: 11:65:00:3e:9f:9b:4b:d9:22:37:41:89:0c:3d:ec: 6f:8a:f0:ce:c1:3d:78:dc:20:df:ca:69:b7:f5:f6: 87:ab:d9:5d:6b:6b:fe:3a:65:9a:2f:8d:7b:7e:2c: 85:e8:cf:98:b8:b1:d5:b4:5c:d9:92:22:ed:ba:38: d0:8a:a2:35:d5:52:84:6b:4f:db:14:14:a5:c7:ad: 53:c8:4f:f4:23:b5:a3:37:f8:52:b3:20:16:02:5b: 28:52:c1:31:3c:c6:38:15:3b:69:4c:a5:f1:7e:37: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:12:70:F1:13:F4:28:FE:BD:8B:D1:A2:B8:5C:93:30:6D:14:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6456c5f-35f6-34a3-88e6-09296cb70725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:99:aa:23:b2:6e:97:40:94:f6:c8:c1:3f:3b:bc:0c:2c:92: 52:dc:87:6d:19:1a:f0:14:a0:57:9f:84:0c:00:bc:1b:c8:c5: 94:14:3a:85:fb:5d:22:20:03:4e:a2:e0:42:ed:8c:55:58:57: 92:82:9d:13:1f:44:57:10:6c:35:3f:fe:e2:76:b1:9d:fb:7f: 2f:46:53:50:bb:06:27:f5:32:e8:82:cb:81:f9:1c:e5:6e:8a: d9:d0:53:ac:60:0d:0f:4f:fa:f5:a6:98:73:5b:99:91:25:d8: bb:17:30:c9:fa:5b:ec:d6:1b:cd:22:c3:58:33:30:0b:3a:d5: 0e:2b:64:09:23:b1:8e:df:a2:77:cd:63:7f:b7:b8:c1:b1:11: 04:07:cf:8d:bf:5b:4d:1c:3e:e0:2d:e4:3a:42:ba:fc:d9:e4: 9c:f4:cc:72:1b:44:3a:9e:8b:96:bb:fe:de:d0:e1:5e:0c:72: 34:6d:be:0a:34:e9:aa:81:49:78:01:21:46:26:a6:98:cd:fe: c8:53:15:a4:96:18:38:44:d9:1e:49:38:a5:5b:58:04:cb:a2: ff:06:9c:1d:33:ff:f2:2c:74:a3:b2:51:1f:71:67:54:7f:ad: 5d:9c:df:f0:82:05:90:91:6f:4a:c3:4e:98:91:27:64:7a:fe: 0a:79:1f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7YqdKFnA3HEK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk YzAxNGNlOTYtYzM4MC00OGEwLWJmYjktYTUyZGIyYjk1NTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7Y/5r6SsSMETTTRZEN3oSpmjfuI7s6D/k9M Mb8eCvrnuj5CWB4x16NfInt0Fz983jL9TC0kGe2GA1KZzby0M0/k+s26kxu45bOH YaStS4gqDTJD26GJ7FXJh1NlRunJZIkSrq9XsoynZyQsOfo0GoNDb1ztXQmn4c2w q/wwaF6MuMWyxZ4oS7R0LFNBD6QMYsx8rG0RZQA+n5tL2SI3QYkMPexvivDOwT14 3CDfymm39faHq9lda2v+OmWaL417fiyF6M+YuLHVtFzZkiLtujjQiqI11VKEa0/b FBSlx61TyE/0I7WjN/hSsyAWAlsoUsExPMY4FTtpTKXxfjcfsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOELEnDxE/Qo/r2L0aK4XJMwbRQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDY0NTZjNWYtMzVmNi0z NGEzLTg4ZTYtMDkyOTZjYjcwNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSZqiOybpdAlPbIwT87vAwsklLch20ZGvAUoFefhAwAvBvIxZQUOoX7 XSIgA06i4ELtjFVYV5KCnRMfRFcQbDU//uJ2sZ37fy9GU1C7Bif1MuiCy4H5HOVu itnQU6xgDQ9P+vWmmHNbmZEl2LsXMMn6W+zWG80iw1gzMAs61Q4rZAkjsY7fonfN Y3+3uMGxEQQHz42/W00cPuAt5DpCuvzZ5Jz0zHIbRDqei5a7/t7Q4V4McjRtvgo0 6aqBSXgBIUYmppjN/shTFaSWGDhE2R5JOKVbWATLov8GnB0z//IsdKOyUR9xZ1R/ rV2c3/CCBZCRb0rDTpiRJ2R6/gp5H5g= -----END CERTIFICATE-----Generated at Sat Aug 23 18:17:56 2025 by rpki-client