$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa File: d9a51967-3e86-39e8-9a0d-7c152c40e340.roa (raw, json) Hash identifier: znHIC8agjsEmc9DumgcO6t4OyaRv/mWr24Ca0jO1Qjo= Subject key identifier: 66:13:56:AF:B4:31:69:80:13:8D:4E:7F:26:50:BD:20:A4:27:22:FF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B44B1C4EE2A4119E3CFE9A100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 16509 IP address blocks: 130.174.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c4:ee:2a:41:19:e3:cf:e9:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=711a68cc-ee85-4f8b-b7a7-8a20fda43592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:21:b1:f8:1a:44:10:4e:22:4a:cb:f0:04: 4d:ca:79:d2:13:b5:94:cb:31:39:41:c7:02:08:8e: 2c:a4:f5:a8:0d:37:65:f6:a3:59:9a:6c:34:2c:89: 65:f0:cb:26:de:87:34:16:2d:3f:b5:d0:46:c0:45: 11:e8:da:21:32:25:48:4d:ce:9c:71:ac:29:dc:59: b9:18:e1:f2:9d:e5:00:c1:ac:1d:fb:c8:6d:f5:9f: 99:18:1f:61:8a:94:5e:34:8a:7e:92:df:38:69:31: 10:3a:98:f3:25:80:2f:6f:1f:56:3a:50:a1:00:8e: 7d:c6:c0:3f:c4:fc:bf:6d:81:41:c1:b5:fa:dc:b7: d3:26:e6:09:8d:2e:ee:88:6e:9b:0d:33:91:4a:5a: a6:b8:45:a2:45:c1:ea:e0:77:9d:0d:53:12:76:d2: fb:f9:2b:4f:70:d1:eb:fb:aa:a8:83:f0:60:44:8c: 05:67:5d:09:d1:1a:4b:df:b2:48:99:9c:cb:c4:5c: a2:48:66:74:d2:5b:cf:0a:6a:c6:d9:b6:fe:1d:83: ec:ae:1a:f1:51:ed:1f:8d:0e:bb:30:3b:d4:52:f8: 61:50:c4:a5:57:c4:02:11:4d:56:13:71:a2:31:41: 6e:cd:b7:7a:df:e2:8a:18:85:fc:af:fc:89:12:53: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:13:56:AF:B4:31:69:80:13:8D:4E:7F:26:50:BD:20:A4:27:22:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:0d:a6:d2:de:78:92:42:48:60:87:ff:90:8b:16:8e:07:2a: eb:86:a8:32:76:0c:dc:39:a6:03:2b:5e:d7:a8:44:e9:83:b2: ea:b2:e2:c8:5e:09:05:03:91:95:1c:3a:c5:b9:58:47:a8:76: eb:64:b3:06:f9:e3:5b:3a:80:0a:b5:1b:9c:17:44:bb:43:75: 5b:48:12:5e:98:fb:6b:0f:a5:17:a2:fd:bc:31:9e:b9:23:9b: e3:27:d4:85:98:07:b7:08:af:75:20:2c:89:e5:5a:ac:ee:cd: 31:84:77:9a:75:a4:b2:3c:7c:c2:8a:3e:c5:2f:d1:ff:1a:10: 14:11:8a:a0:a7:90:41:d4:8f:68:a0:05:40:56:7b:88:7e:cd: 4a:8a:be:4b:b5:93:7b:46:14:87:99:87:e6:df:7c:d6:48:69: 89:6a:87:de:b4:6c:48:f3:72:a9:35:ee:25:31:d1:82:11:58: 37:71:1f:ce:0c:ea:f2:37:94:a2:d2:b1:e7:cf:c4:ef:54:a5: c2:ce:1e:99:78:dc:d1:68:56:e4:77:3e:f3:41:79:0b:44:36: ac:a4:05:4b:14:79:07:06:95:3e:d2:34:1f:a2:d3:4c:56:d3: 62:2f:de:3a:ff:c5:b6:db:c3:54:72:8b:6d:c0:47:30:e7:7a: 32:28:e5:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscTuKkEZ48/poQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NzExYTY4Y2MtZWU4NS00ZjhiLWI3YTctOGEyMGZkYTQzNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuukhsfgaRBBOIkrL8ARNynnSE7WUyzE5QccC CI4spPWoDTdl9qNZmmw0LIll8Msm3oc0Fi0/tdBGwEUR6NohMiVITc6ccawp3Fm5 GOHyneUAwawd+8ht9Z+ZGB9hipReNIp+kt84aTEQOpjzJYAvbx9WOlChAI59xsA/ xPy/bYFBwbX63LfTJuYJjS7uiG6bDTORSlqmuEWiRcHq4HedDVMSdtL7+StPcNHr +6qog/BgRIwFZ10J0RpL37JImZzLxFyiSGZ00lvPCmrG2bb+HYPsrhrxUe0fjQ67 MDvUUvhhUMSlV8QCEU1WE3GiMUFuzbd63+KKGIX8r/yJElO+2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYTVq+0MWmAE41OfyZQvSCkJyL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDlhNTE5NjctM2U4Ni0z OWU4LTlhMGQtN2MxNTJjNDBlMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwNptLeeJJCSGCH/5CLFo4HKuuGqDJ2DNw5pgMrXteoROmDsuqy4she CQUDkZUcOsW5WEeodutkswb541s6gAq1G5wXRLtDdVtIEl6Y+2sPpRei/bwxnrkj m+Mn1IWYB7cIr3UgLInlWqzuzTGEd5p1pLI8fMKKPsUv0f8aEBQRiqCnkEHUj2ig BUBWe4h+zUqKvku1k3tGFIeZh+bffNZIaYlqh960bEjzcqk17iUx0YIRWDdxH84M 6vI3lKLSsefPxO9UpcLOHpl43NFoVuR3PvNBeQtENqykBUsUeQcGlT7SNB+i00xW 02Iv3jr/xbbbw1Ryi23ARzDnejIo5Xk= -----END CERTIFICATE-----Generated at Sun Oct 19 20:31:06 2025 by rpki-client