$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa File: 104038a4-0b27-3ddd-924e-b238fc38a0d9.roa (raw, json) Hash identifier: mLUqtbNPMDr7tmXfpcrU+ptvxdoFHKD8tlSE0Zf2deU= Subject key identifier: B7:E3:A2:BD:58:58:8D:BE:CA:E9:C7:9F:56:A0:44:84:7A:B7:0B:48 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C969E7028831DDFE6B30 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c9:69:e7:02:88:31:dd:fe:6b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3bbb7997-104c-44f4-b324-0abe371071df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:47:74:45:7a:2d:38:82:53:d8:ed:35:64: 3f:6e:16:61:88:8e:1c:2e:3e:64:79:2a:f4:33:2c: 74:ab:f0:8e:46:00:75:1f:81:14:61:88:79:56:17: d0:83:18:3d:49:e0:14:f7:95:a8:d9:4d:52:1b:0d: 6a:88:ff:4d:ed:4a:28:8f:d7:ad:29:d2:bd:e6:06: 6f:02:b0:f3:43:6a:16:de:ea:df:eb:a6:c9:53:4d: 42:6f:35:0c:29:e4:c4:72:1c:29:d6:f8:58:91:eb: 9a:8b:a3:e9:e4:5e:f5:0e:88:58:a9:7e:59:91:9b: 1b:f1:08:e2:b1:18:44:8e:fd:c9:e0:27:a0:bc:42: f8:4d:d5:f5:17:3b:2c:d6:ff:6d:fb:2e:e8:64:9e: 8f:87:72:b1:21:2a:9c:f2:75:2b:88:d0:e6:1b:58: 4b:b0:55:19:4b:64:58:f4:f5:f9:67:9c:3f:1b:fa: 0b:1d:18:9c:a6:84:a2:d5:d3:bb:33:c2:ed:5f:03: f3:6c:c5:a4:1d:ca:2c:94:d4:97:84:45:23:9f:b9: 0d:90:f2:82:bf:f8:da:e5:df:65:3c:1c:a6:38:06: a5:27:76:16:c2:69:46:6c:ec:40:f0:94:de:33:d7: 79:b9:f6:42:c4:92:44:ac:d1:00:cf:a8:e5:f1:5b: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E3:A2:BD:58:58:8D:BE:CA:E9:C7:9F:56:A0:44:84:7A:B7:0B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:41:95:fa:e3:78:86:bb:a8:ab:b6:87:cc:07:d4:c0:fc:eb: 73:10:d7:19:57:23:61:a0:f2:87:bf:42:bd:d6:48:e3:c7:25: 33:be:24:b6:88:fc:7d:11:a3:6d:db:97:b1:ac:40:73:93:bf: 02:33:b7:f9:44:0e:54:73:8c:31:0b:a0:ab:4b:6a:7d:d0:13: 01:7e:dd:7f:e7:17:b6:d0:47:27:e9:a8:f1:bd:04:1b:4d:fc: 17:1a:b2:c0:e4:61:e3:b1:cb:a1:20:3e:aa:63:26:c5:46:5f: 9a:2e:29:ac:7a:e3:d5:f2:7c:a4:7f:84:55:cb:dd:b7:4e:31: f7:e7:54:ce:5f:35:8a:c3:01:cc:76:f5:12:58:b1:7b:ea:c9: 07:57:dc:6d:4e:f5:da:ff:ef:95:f4:14:dd:83:b4:5d:0e:d9: c3:8e:45:d6:d8:da:f9:ad:69:3a:83:c9:14:c1:a9:b3:25:02: 86:da:b0:8f:6c:d7:e0:fa:7b:26:c4:57:47:12:ba:7b:33:cf: 0d:77:10:7c:b6:4e:db:63:7d:15:fa:75:eb:5a:42:29:7a:3f: 6d:45:41:a1:4b:a5:0c:9f:23:4c:c2:d9:c3:76:c5:f6:57:c0: 91:49:3b:44:8b:2b:19:06:fe:24:d5:04:b6:03:d3:04:1c:fe: b9:76:8b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98lp5wKIMd3+azAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2JiYjc5OTctMTA0Yy00NGY0LWIzMjQtMGFiZTM3MTA3MWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7xHdEV6LTiCU9jtNWQ/bhZhiI4cLj5keSr0 Myx0q/CORgB1H4EUYYh5VhfQgxg9SeAU95Wo2U1SGw1qiP9N7Uooj9etKdK95gZv ArDzQ2oW3urf66bJU01CbzUMKeTEchwp1vhYkeuai6Pp5F71DohYqX5ZkZsb8Qji sRhEjv3J4CegvEL4TdX1Fzss1v9t+y7oZJ6Ph3KxISqc8nUriNDmG1hLsFUZS2RY 9PX5Z5w/G/oLHRicpoSi1dO7M8LtXwPzbMWkHcoslNSXhEUjn7kNkPKCv/ja5d9l PBymOAalJ3YWwmlGbOxA8JTeM9d5ufZCxJJErNEAz6jl8Vv37QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfjor1YWI2+yunHn1agRIR6twtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTA0MDM4YTQtMGIyNy0z ZGRkLTkyNGUtYjIzOGZjMzhhMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBBlfrjeIa7qKu2h8wH1MD863MQ1xlXI2Gg8oe/Qr3WSOPHJTO+JLaI /H0Ro23bl7GsQHOTvwIzt/lEDlRzjDELoKtLan3QEwF+3X/nF7bQRyfpqPG9BBtN /BcassDkYeOxy6EgPqpjJsVGX5ouKax649XyfKR/hFXL3bdOMffnVM5fNYrDAcx2 9RJYsXvqyQdX3G1O9dr/75X0FN2DtF0O2cOORdbY2vmtaTqDyRTBqbMlAobasI9s 1+D6eybEV0cSunszzw13EHy2TttjfRX6detaQil6P21FQaFLpQyfI0zC2cN2xfZX wJFJO0SLKxkG/iTVBLYD0wQc/rl2i5A= -----END CERTIFICATE-----Generated at Tue Nov 4 22:43:55 2025 by rpki-client