$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21fd1924-75aa-3708-ba0a-03f71ebb8708.roa File: 21fd1924-75aa-3708-ba0a-03f71ebb8708.roa (raw, json) Hash identifier: wltgbLrkZ/yUgwQmyCIytVMSRj43tlBbhvhScaSeFj0= Subject key identifier: 63:84:79:28:0B:70:09:CE:CC:28:DF:01:EB:E7:9B:47:32:B8:62:B4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7B6114E52A86B02E4B480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21fd1924-75aa-3708-ba0a-03f71ebb8708.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b6:11:4e:52:a8:6b:02:e4:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6c0352d3-ea78-4418-adb5-7ee882404c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:bd:ba:99:74:d3:8d:ae:1b:bb:46:12:ce: 4d:67:e9:17:72:76:55:9c:31:dc:98:bd:a0:03:3e: 63:05:bf:27:33:60:8c:83:b9:ed:91:dd:5a:68:ed: a3:24:b0:cf:2e:42:9e:32:6d:db:db:95:db:ed:5e: a3:be:68:4d:cf:3b:0d:5f:4b:cb:b0:9f:c8:25:6a: 11:23:4b:a2:3c:a9:6d:df:a7:50:5c:a5:62:46:f8: d0:fa:f7:57:53:0e:a9:71:35:d7:79:3b:30:e7:f4: f1:7c:b0:45:9e:8f:98:d9:d6:e5:28:85:c5:62:56: 96:56:aa:b2:2b:47:e7:22:0d:03:32:ca:46:9c:0e: 07:80:aa:0f:3c:97:3a:57:9c:12:67:f7:93:8b:24: 7e:88:c0:15:9b:50:aa:42:ae:42:38:d2:10:b2:d2: bf:57:5d:c2:8a:07:63:c2:95:d4:7f:a4:d4:c7:3f: c2:20:2f:b4:4b:6d:bd:18:76:05:f6:91:b2:94:09: 69:01:ed:7e:cf:cf:e4:40:94:5f:bc:6d:a7:d3:e1: f1:78:11:7c:fb:66:5f:d8:77:c2:fb:73:ac:a3:93: 6e:6c:95:c6:34:e6:e7:45:e8:89:18:16:cb:91:ae: 7b:9a:20:fe:05:f1:9f:16:df:f2:12:71:08:f0:6b: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:84:79:28:0B:70:09:CE:CC:28:DF:01:EB:E7:9B:47:32:B8:62:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/21fd1924-75aa-3708-ba0a-03f71ebb8708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:36:17:7e:8f:63:be:29:99:29:00:8a:69:f9:81:30:b8:1a: 9f:b5:eb:dc:44:8d:61:df:a5:e4:65:14:80:1f:1b:e8:72:d1: a3:96:54:4a:ce:45:c5:ba:f1:35:f3:22:42:33:27:c1:e9:97: f7:0f:d2:e5:24:e1:75:c4:8f:7c:72:d6:10:98:05:89:70:96: 12:3d:4c:99:48:3e:77:e0:44:e0:c0:ec:03:06:54:70:51:bb: 4d:f5:b0:d0:c4:6b:1d:87:1d:13:24:d5:ad:c6:e8:68:dc:af: 2e:ca:6d:f5:ea:48:23:02:6a:58:7e:06:09:5c:34:08:b5:cf: 09:0a:84:a0:aa:2f:96:2c:59:01:a5:9f:a8:26:b1:78:84:80: 73:b1:74:11:1b:84:58:2a:9a:a6:23:4f:2b:9b:ed:d6:00:82: 0d:35:ac:d2:c2:1f:14:7a:d8:ef:1e:ed:55:2e:0b:06:27:ef: 61:cd:18:84:58:98:07:37:b3:6d:5e:5f:af:90:ec:58:20:02: ed:b8:6a:8f:de:7c:c0:78:73:6b:ef:28:bf:ad:fd:bf:5a:3d: c0:b1:31:e1:76:68:25:9c:c3:55:e3:af:42:14:14:75:b6:de: d4:6e:c1:c0:e9:e3:75:1f:10:64:8b:3b:bd:9c:76:6f:d0:92: ff:26:c9:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97YRTlKoawLktIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NmMwMzUyZDMtZWE3OC00NDE4LWFkYjUtN2VlODgyNDA0YzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIW9upl0042uG7tGEs5NZ+kXcnZVnDHcmL2g Az5jBb8nM2CMg7ntkd1aaO2jJLDPLkKeMm3b25Xb7V6jvmhNzzsNX0vLsJ/IJWoR I0uiPKlt36dQXKViRvjQ+vdXUw6pcTXXeTsw5/TxfLBFno+Y2dblKIXFYlaWVqqy K0fnIg0DMspGnA4HgKoPPJc6V5wSZ/eTiyR+iMAVm1CqQq5CONIQstK/V13Cigdj wpXUf6TUxz/CIC+0S229GHYF9pGylAlpAe1+z8/kQJRfvG2n0+HxeBF8+2Zf2HfC +3Oso5NubJXGNObnReiJGBbLka57miD+BfGfFt/yEnEI8GufSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOEeSgLcAnOzCjfAevnm0cyuGK0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjFmZDE5MjQtNzVhYS0z NzA4LWJhMGEtMDNmNzFlYmI4NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE02F36PY74pmSkAimn5gTC4Gp+169xEjWHfpeRlFIAfG+hy0aOWVErO RcW68TXzIkIzJ8Hpl/cP0uUk4XXEj3xy1hCYBYlwlhI9TJlIPnfgRODA7AMGVHBR u031sNDEax2HHRMk1a3G6Gjcry7KbfXqSCMCalh+BglcNAi1zwkKhKCqL5YsWQGl n6gmsXiEgHOxdBEbhFgqmqYjTyub7dYAgg01rNLCHxR62O8e7VUuCwYn72HNGIRY mAc3s21eX6+Q7FggAu24ao/efMB4c2vvKL+t/b9aPcCxMeF2aCWcw1Xjr0IUFHW2 3tRuwcDp43UfEGSLO72cdm/Qkv8mya8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:45 2025 by rpki-client