$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa File: 14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa (raw, json) Hash identifier: eKjkKsbO2Y7Kr/Sj5FOcIbWy4MPjZ5JsJ77mJ08DWvA= Subject key identifier: 38:4C:E2:F0:16:56:89:D8:9B:8D:80:3A:4A:48:BE:FA:EA:71:40:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2286376C2E8FB4A56C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 130.174.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:22:86:37:6c:2e:8f:b4:a5:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=2566ed96-ba19-4fb4-b940-0faa81d85a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:9d:69:33:56:2a:57:2f:f4:56:ee:65:11: 56:1d:a6:53:47:41:9a:75:4e:3a:c5:d3:74:04:16: 07:6d:96:a5:c5:29:c7:17:d9:e2:4e:e6:8d:40:d1: aa:92:c0:81:d4:0d:7f:76:71:51:26:ee:7e:1d:1e: 50:95:b2:97:74:0c:ac:d3:74:6a:e5:e7:ee:e5:5e: ba:2a:7c:2d:50:13:b2:93:e9:42:c8:1f:f8:3d:a3: 3a:3f:d1:05:f8:29:56:c5:9d:38:f5:52:b7:b4:8d: 3f:f0:ef:d7:8b:96:07:1e:9c:45:7f:dc:7a:0c:7f: 55:dd:de:bd:1c:0c:aa:c5:34:fa:33:04:7d:f7:71: a2:13:59:20:30:74:af:b4:d4:c6:10:02:e5:f5:8d: c8:71:c2:ad:e8:cb:a2:d9:bf:52:e4:19:1f:5e:47: 8e:1f:ef:45:9f:1d:75:5a:c9:9f:de:ad:f7:93:75: 1c:2a:2e:6f:9b:1c:85:d9:29:8f:25:8d:33:bf:51: 3b:7f:51:8d:2f:a7:44:03:c1:08:32:84:46:d9:b8: af:ff:73:99:08:94:a3:76:1b:a0:d3:51:e0:d9:0c: 51:93:4a:3d:8d:ec:ce:21:b9:09:1d:e5:ca:c4:95: 61:a8:e2:a4:a5:99:0b:c4:26:b7:6a:a2:56:0f:18: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:E2:F0:16:56:89:D8:9B:8D:80:3A:4A:48:BE:FA:EA:71:40:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9d:4c:a4:d5:ca:0c:ba:0f:50:4d:55:b5:74:e3:89:11:bc: fc:4b:12:af:86:b5:fe:3f:be:e9:0e:6d:66:fa:f9:5a:4d:e8: 70:ff:84:6d:45:8d:4b:7f:58:6e:d4:83:f6:60:5f:0d:34:52: b1:77:1b:dc:e7:66:78:4e:10:6f:e0:61:2c:f9:02:6e:12:2e: 34:c9:4d:1b:8d:f1:6e:4e:fa:18:0f:26:8d:ad:62:3e:e9:cd: 3d:aa:90:1e:91:b2:a4:24:10:4a:05:d8:d0:75:94:57:11:32: 18:32:b9:66:81:97:64:a2:a7:ec:fd:62:b9:5a:73:e1:0a:85: dd:ee:2d:9b:be:bb:71:ad:e2:ce:3b:ca:60:8b:42:a8:0b:3b: 85:8d:fc:50:74:02:e4:59:be:a9:d8:7d:8a:23:f8:86:bd:7c: 51:a5:af:27:29:15:2a:b2:6c:f2:0f:a3:35:40:92:ea:44:a5: 69:06:df:e8:45:d3:07:cb:53:c6:a1:0f:35:24:26:b0:84:fb: 4d:37:3c:8d:52:18:1b:48:c6:ad:61:47:bf:a6:d3:32:e6:8e: ff:c2:73:95:8d:ed:ea:17:60:18:da:ab:30:6e:5e:82:f4:80: b0:1f:24:8a:29:95:e8:a2:36:cb:2a:71:0b:f9:1c:47:6c:37: 9b:31:24:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSKGN2wuj7SlbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MjU2NmVkOTYtYmExOS00ZmI0LWI5NDAtMGZhYTgxZDg1YTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaKdaTNWKlcv9FbuZRFWHaZTR0GadU46xdN0 BBYHbZalxSnHF9niTuaNQNGqksCB1A1/dnFRJu5+HR5QlbKXdAys03Rq5efu5V66 KnwtUBOyk+lCyB/4PaM6P9EF+ClWxZ049VK3tI0/8O/Xi5YHHpxFf9x6DH9V3d69 HAyqxTT6MwR993GiE1kgMHSvtNTGEALl9Y3IccKt6Mui2b9S5BkfXkeOH+9Fnx11 Wsmf3q33k3UcKi5vmxyF2SmPJY0zv1E7f1GNL6dEA8EIMoRG2biv/3OZCJSjdhug 01Hg2QxRk0o9jezOIbkJHeXKxJVhqOKkpZkLxCa3aqJWDxhXHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhM4vAWVonYm42AOkpIvvrqcUDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTRlN2Y4NDQtZmI2ZS0z MzkyLWE3ZGItOWIyOGU3NDk5YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKdTKTVygy6D1BNVbV044kRvPxLEq+Gtf4/vukObWb6+VpN6HD/hG1F jUt/WG7Ug/ZgXw00UrF3G9znZnhOEG/gYSz5Am4SLjTJTRuN8W5O+hgPJo2tYj7p zT2qkB6RsqQkEEoF2NB1lFcRMhgyuWaBl2Sip+z9Yrlac+EKhd3uLZu+u3Gt4s47 ymCLQqgLO4WN/FB0AuRZvqnYfYoj+Ia9fFGlrycpFSqybPIPozVAkupEpWkG3+hF 0wfLU8ahDzUkJrCE+003PI1SGBtIxq1hR7+m0zLmjv/Cc5WN7eoXYBjaqzBuXoL0 gLAfJIopleiiNssqcQv5HEdsN5sxJNo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:55:32 2025 by rpki-client