$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa File: 0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa (raw, json) Hash identifier: IUWDofNQvx9/P05cqA3fStugh/dC2uITBfbLos2U1UQ= Subject key identifier: F4:3E:6B:23:94:C4:30:4B:BC:88:95:5C:77:19:C5:EB:27:77:42:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF717701848715A6B4035BA80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3360 IP address blocks: 130.174.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:70:18:48:71:5a:6b:40:35:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=384d85f0-982f-4065-a491-850f0770c6d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:9a:23:d8:45:8f:01:e1:57:99:5b:38:64: fa:6a:05:03:d1:4b:c0:c9:00:2c:95:fd:61:7e:61: 3c:49:ad:59:bc:50:32:08:ee:de:2f:8a:76:17:fd: 30:68:e7:a5:07:3e:32:a2:15:3d:fd:2c:ef:bf:60: 2b:ca:66:59:c8:7e:2f:d2:7f:08:30:35:75:13:ca: 8f:37:74:cf:98:80:3b:aa:20:42:62:94:43:ab:63: e1:6e:db:96:d5:10:c5:55:de:5e:1b:a8:1a:a5:b1: b9:40:be:9d:2f:a5:6f:b3:83:31:62:e9:ba:40:3a: 70:4a:e2:91:c7:3b:0d:1b:48:86:79:39:f3:a2:4e: 7b:44:08:fd:a2:56:b8:3f:6b:18:28:b7:ec:9b:c9: 22:1f:02:d1:22:88:eb:0e:6e:42:49:08:64:08:c0: 7f:f4:a0:49:fc:59:ce:b7:5d:a1:ed:74:35:6c:e2: d5:df:77:86:f3:1a:4e:dc:39:05:31:0a:e2:17:44: 10:00:30:43:6b:66:1f:3b:5b:e1:09:de:19:32:c0: d2:ed:32:ae:fe:cb:4c:56:35:2a:b8:a6:f2:44:d9: 46:e7:f0:de:91:df:c8:da:b2:0e:6d:11:09:8b:44: b0:da:8a:95:1e:d9:74:c5:0b:9c:2f:a3:8b:82:de: de:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3E:6B:23:94:C4:30:4B:BC:88:95:5C:77:19:C5:EB:27:77:42:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0cf7fe9b-8ff2-3e9f-9288-5d2e5a203083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:00:7c:26:63:ec:a2:c6:c4:1d:1a:a0:60:d9:3a:eb:9d: 9d:17:e0:89:c7:4b:2a:29:29:e5:e6:9f:e0:20:6e:14:bd:37: 9c:d3:c8:1a:bf:77:56:14:1c:df:52:f6:fb:85:68:76:2a:7f: 73:db:3e:53:bd:87:e8:93:8c:39:9c:2f:0a:37:c9:d0:a5:09: a6:a8:0a:31:cd:e6:88:cb:47:f9:4f:70:bb:57:cc:40:b5:9b: 0b:01:87:7f:e5:5a:ae:9d:8d:74:e6:95:07:c0:fa:ca:cc:06: 41:41:87:6e:14:1b:8c:a7:a6:c8:18:e8:85:31:97:9f:26:df: a2:27:8f:0a:e3:51:19:15:14:d8:27:35:c6:94:e8:ae:43:94: cb:36:5f:c3:9a:d3:9a:2a:19:91:4a:37:c9:19:6c:b8:b0:93: a9:f1:af:5c:ee:30:1b:1c:4d:0b:bd:a1:3a:c2:97:1f:28:41: 85:a5:94:a7:79:68:63:16:16:a6:2b:a5:48:0d:47:99:c6:0f: fc:ba:44:52:e2:89:bb:cf:28:a6:3f:ee:b5:da:cb:2d:72:f3: 8e:5e:71:ab:c9:98:ee:dc:33:26:eb:e7:b9:fb:23:4a:73:fd: 10:2b:ef:13:48:e3:eb:79:fc:dd:c8:6d:6f:71:9e:56:7f:31: 2a:71:df:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3AYSHFaa0A1uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Mzg0ZDg1ZjAtOTgyZi00MDY1LWE0OTEtODUwZjA3NzBjNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP2aI9hFjwHhV5lbOGT6agUD0UvAyQAslf1h fmE8Sa1ZvFAyCO7eL4p2F/0waOelBz4yohU9/Szvv2ArymZZyH4v0n8IMDV1E8qP N3TPmIA7qiBCYpRDq2PhbtuW1RDFVd5eG6gapbG5QL6dL6Vvs4MxYum6QDpwSuKR xzsNG0iGeTnzok57RAj9ola4P2sYKLfsm8kiHwLRIojrDm5CSQhkCMB/9KBJ/FnO t12h7XQ1bOLV33eG8xpO3DkFMQriF0QQADBDa2YfO1vhCd4ZMsDS7TKu/stMVjUq uKbyRNlG5/Dekd/I2rIObREJi0Sw2oqVHtl0xQucL6OLgt7eWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ+ayOUxDBLvIiVXHcZxesnd0IZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGNmN2ZlOWItOGZmMi0z ZTlmLTkyODgtNWQyZTVhMjAzMDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvAHwmY+yixsQdGqBg2TrrnZ0X4InHSyopKeXmn+AgbhS9N5zTyBq/ d1YUHN9S9vuFaHYqf3PbPlO9h+iTjDmcLwo3ydClCaaoCjHN5ojLR/lPcLtXzEC1 mwsBh3/lWq6djXTmlQfA+srMBkFBh24UG4ynpsgY6IUxl58m36InjwrjURkVFNgn NcaU6K5DlMs2X8Oa05oqGZFKN8kZbLiwk6nxr1zuMBscTQu9oTrClx8oQYWllKd5 aGMWFqYrpUgNR5nGD/y6RFLiibvPKKY/7rXayy1y845ecavJmO7cMybr57n7I0pz /RAr7xNI4+t5/N3IbW9xnlZ/MSpx30s= -----END CERTIFICATE-----Generated at Tue Sep 22 22:19:43 2026 by rpki-client