$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c29b6c2-8327-352a-aba5-02ae254d260c.roa File: 1c29b6c2-8327-352a-aba5-02ae254d260c.roa (raw, json) Hash identifier: rddwlzR38N4oY+LTWwcBSwIbjOxCVx4PRAAKqRPgfT4= Subject key identifier: C2:06:A0:64:E9:70:FE:3F:98:C9:44:B3:69:47:F8:62:9F:4A:0C:60 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A9D52F2ED4E2CCE6168191700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c29b6c2-8327-352a-aba5-02ae254d260c.roa Signing time: Wed 23 Jul 2025 14:09:48 +0000 ROA not before: Wed 23 Jul 2025 14:09:48 +0000 ROA not after: Tue 21 Oct 2025 14:09:48 +0000 asID: 202 IP address blocks: 130.174.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:52:f2:ed:4e:2c:ce:61:68:19:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 23 14:09:48 2025 GMT Not After : Oct 21 14:09:48 2025 GMT Subject: CN=7d92f642-4951-456b-852b-e50e6d9e8cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:e2:d1:0d:8c:06:22:af:5f:d8:21:b1:4f: 15:45:2f:a9:69:6c:73:35:d6:99:ff:ab:85:fe:4c: 6f:ed:e6:11:51:aa:14:7c:c4:37:24:8d:d9:03:b7: 46:4c:7c:2d:41:20:9c:3c:04:e2:d0:ff:a0:86:0b: e9:2a:68:cf:8d:60:5f:4a:c1:17:51:bd:22:c5:87: 8c:70:58:34:37:b2:64:d1:3e:ec:42:05:42:e6:39: 02:a9:50:d6:57:ec:be:57:17:1b:d2:25:db:a1:0b: 26:5b:eb:ac:a9:26:04:74:b7:00:56:5b:9e:05:12: 2f:ef:fc:cd:92:ff:b8:94:95:ad:c3:23:af:69:a1: 8d:7e:8b:2c:dc:37:f7:89:9f:c8:3c:80:87:ad:01: e4:73:84:f4:61:27:4b:e2:c9:ce:3c:46:e1:39:0f: 8c:5d:b5:33:cd:1b:16:8f:fd:7d:9a:2e:f9:06:40: 7f:85:44:26:b4:b6:0f:3f:87:57:60:5e:01:9a:33: 9f:69:c2:8b:07:12:bf:e9:0c:28:22:e6:0a:53:07: c2:3c:c7:39:37:2c:cc:ab:25:c0:d6:59:8e:60:cc: 6d:f1:52:eb:b3:9a:2d:bb:35:50:5f:4f:5e:b2:57: 8c:43:cb:29:c5:46:c9:a3:aa:bd:ed:6c:c8:cc:d7: f1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:A0:64:E9:70:FE:3F:98:C9:44:B3:69:47:F8:62:9F:4A:0C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c29b6c2-8327-352a-aba5-02ae254d260c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:85:64:75:af:b1:ee:09:2a:ba:46:21:ab:57:88:1c:13:f3: d2:8e:36:f7:95:a6:3c:75:cf:70:7c:d8:7e:1d:0a:50:e0:b8: a2:c8:87:79:83:84:97:90:8a:b9:47:a3:e0:d8:4d:07:89:1f: e1:9d:4d:b5:ed:e7:a6:e1:5d:32:e1:27:c8:d6:ca:ea:64:02: af:29:48:14:db:e4:4a:32:94:cc:3d:04:42:0c:4b:6c:58:59: 07:62:a7:ac:38:d5:65:3d:ad:91:74:38:46:ca:a8:31:7b:3d: b6:b5:a5:e0:57:ba:44:cd:73:3c:70:37:fc:6b:22:dc:0d:fd: 43:1e:76:70:6a:45:42:d4:fc:9e:0a:c0:d9:3d:40:51:d9:4f: ee:4e:d0:c3:a9:e3:53:4f:55:47:c3:67:59:5c:e6:51:4e:5d: aa:8d:1c:10:07:c8:da:df:24:1e:bf:92:b0:13:33:63:09:43: 7d:89:db:61:5a:a4:97:47:68:4d:b3:9c:52:64:4a:02:89:cc: 7c:b7:38:63:69:86:57:f5:74:97:42:67:e1:c9:48:e6:88:29: 2d:ba:bb:87:93:90:c3:2e:bd:f8:a4:af:10:45:e0:46:f2:56: a7:d2:4f:15:de:10:6a:2c:13:9a:c3:79:64:7a:40:46:ab:89: c4:3e:1d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdUvLtTizOYWgZFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcyMzE0MDk0OFoXDTI1MTAyMTE0MDk0OFowLzEtMCsGA1UEAxMk N2Q5MmY2NDItNDk1MS00NTZiLTg1MmItZTUwZTZkOWU4Y2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqni0Q2MBiKvX9ghsU8VRS+paWxzNdaZ/6uF /kxv7eYRUaoUfMQ3JI3ZA7dGTHwtQSCcPATi0P+ghgvpKmjPjWBfSsEXUb0ixYeM cFg0N7Jk0T7sQgVC5jkCqVDWV+y+Vxcb0iXboQsmW+usqSYEdLcAVlueBRIv7/zN kv+4lJWtwyOvaaGNfoss3Df3iZ/IPICHrQHkc4T0YSdL4snOPEbhOQ+MXbUzzRsW j/19mi75BkB/hUQmtLYPP4dXYF4BmjOfacKLBxK/6QwoIuYKUwfCPMc5NyzMqyXA 1lmOYMxt8VLrs5otuzVQX09esleMQ8spxUbJo6q97WzIzNfxfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIGoGTpcP4/mMlEs2lH+GKfSgxgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWMyOWI2YzItODMyNy0z NTJhLWFiYTUtMDJhZTI1NGQyNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6FZHWvse4JKrpGIatXiBwT89KONveVpjx1z3B82H4dClDguKLIh3mD hJeQirlHo+DYTQeJH+GdTbXt56bhXTLhJ8jWyupkAq8pSBTb5EoylMw9BEIMS2xY WQdip6w41WU9rZF0OEbKqDF7Pba1peBXukTNczxwN/xrItwN/UMednBqRULU/J4K wNk9QFHZT+5O0MOp41NPVUfDZ1lc5lFOXaqNHBAHyNrfJB6/krATM2MJQ32J22Fa pJdHaE2znFJkSgKJzHy3OGNphlf1dJdCZ+HJSOaIKS26u4eTkMMuvfikrxBF4Eby VqfSTxXeEGosE5rDeWR6QEaricQ+HSg= -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:06 2025 by rpki-client