$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa File: de674802-9a74-35e8-9256-21bde92f984a.roa (raw, json) Hash identifier: PQmOF4/i5j0dZEJp0W2yI5Oncu2FB/LdPUyu7YedDgQ= Subject key identifier: 07:41:42:AB:03:DA:77:AE:21:8D:A4:A5:A9:31:78:44:C5:5A:4A:F6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A0FC7DC68AEE3FD1286B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 130.174.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:fc:7d:c6:8a:ee:3f:d1:28:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=8d99f388-a54e-47c1-98a1-420cec1af204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:68:4c:78:71:c7:cd:c6:24:ad:2b:47:4c: f6:e8:ae:a7:1a:30:91:00:48:ae:01:a7:1c:02:a6: ab:d6:11:de:09:a8:40:9e:34:d8:46:5b:0a:48:95: 5a:74:21:e6:4c:ba:34:29:cc:5d:0e:84:8c:0e:dd: fe:16:a3:77:9a:c4:68:65:bd:46:8f:64:de:36:b9: 11:d0:6a:1a:dc:07:ab:c6:80:0b:44:20:5c:05:aa: 22:15:19:c3:28:81:a9:53:fd:10:c2:56:05:93:e1: 28:df:b4:3f:d1:37:93:65:49:2d:60:65:cf:f2:b8: 00:09:2f:c1:85:88:59:2b:5e:ad:e0:08:7b:cf:9d: 62:5b:8d:29:86:16:25:fe:7a:e6:d3:d9:68:80:95: e6:14:8a:b6:2d:44:a8:64:e5:78:17:74:d0:e0:2f: a3:b2:a3:8f:1d:d5:fc:0f:c3:2a:19:02:29:9e:6d: 28:09:b5:33:69:b4:3a:77:93:51:02:2d:51:db:72: d9:74:dd:8d:d6:39:26:42:47:85:7f:f2:51:f8:69: 6e:ba:25:01:a6:72:2b:0e:0e:d9:c8:c1:b0:c6:6b: 96:c6:60:f2:67:11:24:95:de:05:de:13:13:52:77: 7e:45:1c:2e:e3:7f:f2:57:6e:5e:95:07:ba:8a:f9: 65:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:42:AB:03:DA:77:AE:21:8D:A4:A5:A9:31:78:44:C5:5A:4A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de674802-9a74-35e8-9256-21bde92f984a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:5b:41:68:70:c9:f2:34:c9:de:a9:ea:a4:4c:a0:f0:f4:63: 32:02:09:41:c4:fe:22:7b:c1:3d:90:f8:b8:b6:d8:23:79:61: db:83:ae:21:9d:48:8c:2f:30:3e:33:44:8f:0a:a9:45:44:ee: 5a:42:00:fd:ba:42:f8:62:7d:93:e1:8c:d8:eb:86:e3:b8:af: a5:4a:d9:50:21:40:58:60:be:06:2e:1e:f5:9c:23:d8:c7:13: c8:a0:27:55:14:ec:a6:2e:62:72:0d:68:fc:56:ab:cc:27:0a: ee:d2:73:10:e7:bf:68:46:3f:13:54:79:d4:ce:5d:7a:cc:ca: 4f:4a:f1:c7:db:51:5c:d7:43:23:15:7e:48:dd:4e:46:0e:d1: c3:65:32:46:a2:38:ba:07:21:11:bf:86:d9:23:a3:30:12:11: 26:89:cc:c7:ce:65:cb:7e:29:78:dd:c9:89:70:1d:69:d6:8c: 80:51:4d:77:99:16:2e:46:9e:d9:67:fc:8b:a8:e1:0f:e4:8d: 7b:46:6f:b8:0a:53:5a:e5:b5:62:57:2f:d5:13:87:e4:7d:35: a1:b1:37:d2:1e:27:f0:11:3d:bc:56:2f:d5:88:9a:3d:9f:2b: ca:ef:52:24:c6:bc:62:aa:d3:7a:32:14:cd:fc:5a:84:eb:5a: b3:12:9e:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPx9xoruP9EoawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OGQ5OWYzODgtYTU0ZS00N2MxLTk4YTEtNDIwY2VjMWFmMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiStoTHhxx83GJK0rR0z26K6nGjCRAEiuAacc Aqar1hHeCahAnjTYRlsKSJVadCHmTLo0KcxdDoSMDt3+FqN3msRoZb1Gj2TeNrkR 0Goa3AerxoALRCBcBaoiFRnDKIGpU/0QwlYFk+Eo37Q/0TeTZUktYGXP8rgACS/B hYhZK16t4Ah7z51iW40phhYl/nrm09logJXmFIq2LUSoZOV4F3TQ4C+jsqOPHdX8 D8MqGQIpnm0oCbUzabQ6d5NRAi1R23LZdN2N1jkmQkeFf/JR+GluuiUBpnIrDg7Z yMGwxmuWxmDyZxEkld4F3hMTUnd+RRwu43/yV25elQe6ivllywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdBQqsD2neuIY2kpakxeETFWkr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGU2NzQ4MDItOWE3NC0z NWU4LTkyNTYtMjFiZGU5MmY5ODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJbQWhwyfI0yd6p6qRMoPD0YzICCUHE/iJ7wT2Q+Li22CN5YduDriGd SIwvMD4zRI8KqUVE7lpCAP26QvhifZPhjNjrhuO4r6VK2VAhQFhgvgYuHvWcI9jH E8igJ1UU7KYuYnINaPxWq8wnCu7ScxDnv2hGPxNUedTOXXrMyk9K8cfbUVzXQyMV fkjdTkYO0cNlMkaiOLoHIRG/htkjozASESaJzMfOZct+KXjdyYlwHWnWjIBRTXeZ Fi5Gntln/Iuo4Q/kjXtGb7gKU1rltWJXL9UTh+R9NaGxN9IeJ/ARPbxWL9WImj2f K8rvUiTGvGKq03oyFM38WoTrWrMSntQ= -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:30 2025 by rpki-client