$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa File: ff022184-8837-3a66-a5c1-7e1e7a988a09.roa (raw, json) Hash identifier: jOomt9vSnmmMCmEpjB/bTc+sV4y7pGEyJEWmSNJn7Lo= Subject key identifier: FA:5D:93:AC:CA:21:06:C8:89:E6:11:30:9D:C0:07:B0:20:63:49:92 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD23BCAF55AE4133BB01CF480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 202 IP address blocks: 130.174.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ca:f5:5a:e4:13:3b:b0:1c:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=24f250fb-850d-4c6b-8852-c69e0eb80d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c4:d9:c5:bd:26:d2:32:a7:49:d1:98:e5:3d: e8:89:b5:9b:40:78:e6:bb:38:7f:78:a3:b6:75:84: 98:65:1d:21:8a:0e:e7:48:21:0a:97:e5:cd:8d:fe: 18:2c:3c:ce:68:98:c2:81:04:5f:a5:95:ea:2b:cd: 2f:4f:57:97:be:2d:a7:20:ab:55:1f:7f:bf:c9:c9: dc:fe:0f:7e:17:55:ad:8a:7c:4f:ed:ce:5e:80:8c: fe:1e:38:91:8f:86:95:86:42:40:e4:e9:2b:37:f8: f5:58:4a:db:61:42:14:e5:33:c3:94:b2:cf:79:aa: ed:c4:18:c2:ab:5c:19:9b:6e:0f:7f:b4:f2:af:31: 2b:fe:38:8d:45:4f:ed:8f:05:88:eb:08:29:fb:73: 14:dc:39:a3:7d:3a:9d:21:ef:01:fd:36:b5:bd:69: 6b:29:4a:06:85:e7:1b:7c:93:17:ad:7a:b6:71:b1: 9b:ed:a6:bc:02:fb:0e:55:85:91:54:58:2b:cd:87: f9:5f:47:63:cb:a8:aa:43:70:5e:e2:01:b4:39:21: 3a:3b:8e:71:d7:ba:93:e2:33:88:d8:ae:a2:92:86: 78:8c:e7:33:b4:9a:72:28:ab:2a:38:ef:a8:ed:e9: 00:61:3a:8e:3f:04:00:ff:0a:a7:50:8f:c3:72:71: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5D:93:AC:CA:21:06:C8:89:E6:11:30:9D:C0:07:B0:20:63:49:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5c:15:6b:d7:de:d7:a5:c2:92:78:ba:49:43:f0:83:62:eb: 1f:e4:a5:97:48:48:e9:aa:69:33:eb:37:0d:61:cc:d3:70:ef: 9f:dd:22:7e:86:2a:86:38:6b:0c:84:df:3b:31:0a:00:42:51: 3c:6c:a8:ca:96:2f:98:71:0e:5a:42:f9:c2:16:f9:95:df:2b: e8:42:f0:c0:39:d6:a2:88:eb:b8:ed:e7:4f:4f:2e:f1:eb:f7: bb:50:b9:6e:e5:7e:90:82:23:ff:ca:d8:a4:c2:68:66:9b:ac: c3:73:19:28:34:43:3f:9f:76:e5:e6:5a:55:be:98:4f:e8:1f: 46:3f:4c:41:db:dd:ca:e2:1c:05:a0:d9:72:ab:97:b1:16:0f: 7a:1a:d4:08:1c:e9:f3:e9:6e:b9:00:06:26:1f:8f:8e:2b:eb: 6d:48:f9:d1:29:51:89:dc:21:2f:aa:0c:fc:54:6f:df:42:f5: 7d:c8:af:54:4e:ec:33:93:9e:b4:dc:6a:fb:84:43:c1:3f:94: be:58:61:1f:2b:c4:b7:07:a3:1a:24:5a:ef:31:91:97:ae:a6: 97:8c:90:98:a1:4a:c9:e7:f1:c5:b6:97:02:8a:c3:8d:77:65: 3b:c9:e0:c7:8a:43:66:4f:0a:3a:df:5d:21:3a:ba:34:51:09: ec:10:fd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO8r1WuQTO7Ac9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MjRmMjUwZmItODUwZC00YzZiLTg4NTItYzY5ZTBlYjgwZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMTZxb0m0jKnSdGY5T3oibWbQHjmuzh/eKO2 dYSYZR0hig7nSCEKl+XNjf4YLDzOaJjCgQRfpZXqK80vT1eXvi2nIKtVH3+/ycnc /g9+F1WtinxP7c5egIz+HjiRj4aVhkJA5OkrN/j1WErbYUIU5TPDlLLPeartxBjC q1wZm24Pf7TyrzEr/jiNRU/tjwWI6wgp+3MU3DmjfTqdIe8B/Ta1vWlrKUoGhecb fJMXrXq2cbGb7aa8AvsOVYWRVFgrzYf5X0djy6iqQ3Be4gG0OSE6O45x17qT4jOI 2K6ikoZ4jOcztJpyKKsqOO+o7ekAYTqOPwQA/wqnUI/DcnH8hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpdk6zKIQbIieYRMJ3AB7AgY0mSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmYwMjIxODQtODgzNy0z YTY2LWE1YzEtN2UxZTdhOTg4YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBcFWvX3telwpJ4uklD8INi6x/kpZdISOmqaTPrNw1hzNNw75/dIn6G KoY4awyE3zsxCgBCUTxsqMqWL5hxDlpC+cIW+ZXfK+hC8MA51qKI67jt509PLvHr 97tQuW7lfpCCI//K2KTCaGabrMNzGSg0Qz+fduXmWlW+mE/oH0Y/TEHb3criHAWg 2XKrl7EWD3oa1Agc6fPpbrkABiYfj44r621I+dEpUYncIS+qDPxUb99C9X3Ir1RO 7DOTnrTcavuEQ8E/lL5YYR8rxLcHoxokWu8xkZeuppeMkJihSsnn8cW2lwKKw413 ZTvJ4MeKQ2ZPCjrfXSE6ujRRCewQ/c8= -----END CERTIFICATE-----Generated at Sat Aug 23 18:08:56 2025 by rpki-client