$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa File: e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa (raw, json) Hash identifier: lIs5bcr4NUPN532VjbVi6sImOgD1W2ra4/FF+TVDqps= Subject key identifier: 95:CD:22:BD:12:B8:5A:0C:2D:52:91:49:54:A5:4F:70:5E:E1:42:95 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BC979563A0B4F3128A100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 3360 IP address blocks: 130.174.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:c9:79:56:3a:0b:4f:31:28:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=cc7ee717-7da8-462f-bd90-e69259a3c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:87:5d:13:d0:d0:ff:40:db:12:f5:fc:39: fe:08:6d:35:67:21:86:98:72:a0:7d:3f:b9:4b:c7: 55:73:3e:86:16:ca:e6:68:6d:6f:95:43:df:6d:6f: b5:64:8d:80:45:73:83:e0:21:3a:61:68:3b:9a:51: 10:b6:f8:0f:82:d6:b0:77:c2:ec:4e:06:69:ec:fa: ac:86:e0:fc:e9:e0:5f:1c:15:27:db:ee:24:34:57: 78:b6:d6:c1:af:62:b8:ac:f7:7b:81:d3:24:08:8a: 89:01:ed:2c:cb:ea:b0:fe:b2:f6:21:db:44:e4:1b: a5:6b:66:05:ec:30:b6:d1:af:ac:7a:51:96:a8:ed: b3:54:b7:0c:4c:69:7c:ae:78:be:d0:60:21:79:54: d9:b2:01:6b:f9:bf:e0:6b:a8:29:bd:8a:b6:c4:d2: 98:d7:9d:ff:01:01:48:07:5a:1b:7e:6a:dd:fb:a2: e7:66:9b:41:4c:df:59:69:67:71:7e:30:a4:21:3b: f1:9b:c6:dc:25:3b:d7:59:e9:65:f3:43:e6:6f:9e: 61:7b:36:58:72:55:86:c3:cf:4e:57:56:a0:6a:e4: 2a:df:18:12:83:3c:4a:5d:e2:e7:45:71:57:37:f1: 53:88:09:f2:67:3d:ff:3f:56:b0:41:ef:70:c4:21: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CD:22:BD:12:B8:5A:0C:2D:52:91:49:54:A5:4F:70:5E:E1:42:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f7:4d:9c:91:89:53:ff:01:3e:69:fb:e3:68:c2:9d:0f:0f: 15:1c:5c:1b:6e:56:95:ad:4d:e0:a7:c2:47:e5:6d:bf:7d:6c: 85:3b:b9:89:70:35:fb:82:3f:26:e7:6f:82:ca:80:42:a7:2f: 3f:44:07:95:d4:9e:33:21:26:f1:94:26:cb:a3:8a:a8:21:6c: 72:e3:03:50:f3:f9:d8:10:72:0a:7b:72:72:bf:66:8f:26:50: 68:eb:28:fd:96:fb:4d:f2:02:62:7e:9f:1e:0d:4e:a5:f9:eb: cb:ed:d8:3b:66:23:d7:13:9f:e5:42:1e:bd:24:02:86:ae:31: 93:e1:13:6f:95:f9:01:97:f3:77:97:c9:80:d8:a9:62:ad:0d: a3:bf:df:74:29:e6:a2:fe:28:6d:e9:9b:38:f0:c6:e9:4b:09: cb:bf:a7:f3:28:38:70:cf:75:5f:9f:f4:05:b6:cf:a8:c8:60: fa:cf:e3:e7:d5:5f:c7:cb:55:f6:87:e1:2b:8a:0d:17:96:47: 53:38:30:d3:38:dc:55:b3:1e:7b:15:61:76:39:3f:e9:fe:90: 0a:81:27:8a:de:fb:f2:c0:68:fe:12:38:87:e1:fa:f1:4f:d4: 39:b1:1b:95:e2:87:4c:38:7a:f5:c4:1a:f5:b8:51:d2:80:04: b0:5f:08:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8l5VjoLTzEooQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk Y2M3ZWU3MTctN2RhOC00NjJmLWJkOTAtZTY5MjU5YTNjMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+HXRPQ0P9A2xL1/Dn+CG01ZyGGmHKgfT+5 S8dVcz6GFsrmaG1vlUPfbW+1ZI2ARXOD4CE6YWg7mlEQtvgPgtawd8LsTgZp7Pqs huD86eBfHBUn2+4kNFd4ttbBr2K4rPd7gdMkCIqJAe0sy+qw/rL2IdtE5Bula2YF 7DC20a+selGWqO2zVLcMTGl8rni+0GAheVTZsgFr+b/ga6gpvYq2xNKY153/AQFI B1obfmrd+6LnZptBTN9ZaWdxfjCkITvxm8bcJTvXWell80Pmb55hezZYclWGw89O V1agauQq3xgSgzxKXeLnRXFXN/FTiAnyZz3/P1awQe9wxCH6mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXNIr0SuFoMLVKRSVSlT3Be4UKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTg4ZTcxMjAtZjFmNi0z MWJlLWIwZmItMmQxMzc3ZTA5YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX3TZyRiVP/AT5p++Nowp0PDxUcXBtuVpWtTeCnwkflbb99bIU7uYlw NfuCPybnb4LKgEKnLz9EB5XUnjMhJvGUJsujiqghbHLjA1Dz+dgQcgp7cnK/Zo8m UGjrKP2W+03yAmJ+nx4NTqX568vt2DtmI9cTn+VCHr0kAoauMZPhE2+V+QGX83eX yYDYqWKtDaO/33Qp5qL+KG3pmzjwxulLCcu/p/MoOHDPdV+f9AW2z6jIYPrP4+fV X8fLVfaH4SuKDReWR1M4MNM43FWzHnsVYXY5P+n+kAqBJ4re+/LAaP4SOIfh+vFP 1DmxG5Xih0w4evXEGvW4UdKABLBfCMQ= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:59 2025 by rpki-client