$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa File: 2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa (raw, json) Hash identifier: FGbhUkgEu74pHD49uKqFpP9J49wi6BmCD61BjmFJSbA= Subject key identifier: D7:59:D2:87:9A:7E:BF:E8:D2:3E:C1:23:34:15:7E:0F:85:08:67:74 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D1CB029D0EC84DCE38380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3360 IP address blocks: 130.174.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1c:b0:29:d0:ec:84:dc:e3:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=724bd284-67dc-47ea-912a-d5927e8db9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:59:a3:a0:a8:54:67:35:10:35:12:c3:19: 01:b3:f2:e1:4b:6a:2e:63:95:69:cc:4d:29:23:a8: 61:f0:f9:3b:a5:00:9a:f6:e9:e8:2c:ff:6e:ea:79: 97:79:1e:fd:6d:75:16:5a:a8:02:ee:94:70:89:79: df:be:ac:62:02:27:df:ab:23:5f:78:8b:13:97:89: 26:55:74:98:03:d8:dc:ae:08:90:ad:09:03:5c:ba: cd:a9:56:42:8b:2b:51:f0:5c:1b:78:9b:71:dc:66: 59:5f:fa:bd:97:4c:fb:47:ae:1f:17:ce:8d:06:93: 80:e0:52:ce:e9:37:d1:5a:f0:56:f1:66:7a:64:77: 53:4c:60:d6:d4:af:43:cc:75:bc:57:db:5a:79:d7: 93:f1:1b:87:f8:6f:6b:a8:04:8d:5a:ab:f5:dc:f0: cf:f9:79:f5:92:aa:11:eb:63:d0:f7:b5:f1:2d:ab: bb:b2:66:34:3a:93:fc:91:c1:e3:9c:c8:e5:d3:eb: 59:91:93:df:89:c1:86:2e:fd:ff:2c:d9:36:66:bd: 99:d5:95:7d:11:4e:31:42:64:24:7a:b1:d6:54:bf: f5:ec:17:31:68:f4:eb:9e:15:35:ca:d0:9a:38:2f: 7a:67:df:b6:9c:cb:c9:64:fa:b5:7f:c7:23:8b:04: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:59:D2:87:9A:7E:BF:E8:D2:3E:C1:23:34:15:7E:0F:85:08:67:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2488c410-34c2-386d-b6d6-0f2e8bf3e6ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c6:47:e0:3c:48:db:17:61:cf:1d:93:5f:aa:ef:61:9d:eb: a3:44:3a:d2:d1:00:53:aa:dc:61:cb:0b:33:75:7d:78:b1:5c: 57:37:f2:90:08:e4:34:d9:b5:f0:d9:0b:01:d6:4e:07:9c:9b: 40:34:e7:d3:04:65:9e:ec:c6:46:be:f1:e1:26:67:78:9e:fe: cb:06:a2:7c:a5:60:c6:e1:0d:3c:81:74:d3:b6:7d:3c:f8:9c: 08:01:2a:5b:52:7d:99:cd:ed:76:1e:db:27:d5:94:0a:29:00: 8e:5b:c1:a4:11:45:8e:ac:55:31:2c:f7:51:51:cf:ed:85:d8: 30:6b:7a:10:dd:a9:2f:35:6f:f4:45:23:4e:c4:e9:0d:4d:5a: 77:5a:c2:a3:fb:33:a9:91:47:08:07:2c:3b:b7:2f:3c:f0:18: df:0a:c5:58:60:82:8f:36:18:c7:2c:4a:b0:1c:d5:a8:5b:23: 6b:4b:3b:fe:21:19:a6:8e:75:c9:82:17:29:b8:1d:ea:57:23: e2:cb:47:34:fe:31:aa:19:a5:dc:d2:37:10:a9:85:d9:14:0a: 13:04:be:08:7b:50:0f:fa:79:b1:66:86:60:46:89:e7:53:5a: 13:f4:2c:0c:71:44:20:4f:87:4b:6f:1b:58:fd:99:22:62:34: 4a:e2:76:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRywKdDshNzjg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NzI0YmQyODQtNjdkYy00N2VhLTkxMmEtZDU5MjdlOGRiOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHBZo6CoVGc1EDUSwxkBs/LhS2ouY5VpzE0p I6hh8Pk7pQCa9unoLP9u6nmXeR79bXUWWqgC7pRwiXnfvqxiAiffqyNfeIsTl4km VXSYA9jcrgiQrQkDXLrNqVZCiytR8FwbeJtx3GZZX/q9l0z7R64fF86NBpOA4FLO 6TfRWvBW8WZ6ZHdTTGDW1K9DzHW8V9taedeT8RuH+G9rqASNWqv13PDP+Xn1kqoR 62PQ97XxLau7smY0OpP8kcHjnMjl0+tZkZPficGGLv3/LNk2Zr2Z1ZV9EU4xQmQk erHWVL/17BcxaPTrnhU1ytCaOC96Z9+2nMvJZPq1f8cjiwSLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdZ0oeafr/o0j7BIzQVfg+FCGd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQ4OGM0MTAtMzRjMi0z ODZkLWI2ZDYtMGYyZThiZjNlNmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq49MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTGR+A8SNsXYc8dk1+q72Gd66NEOtLRAFOq3GHLCzN1fXixXFc38pAI 5DTZtfDZCwHWTgecm0A059MEZZ7sxka+8eEmZ3ie/ssGonylYMbhDTyBdNO2fTz4 nAgBKltSfZnN7XYe2yfVlAopAI5bwaQRRY6sVTEs91FRz+2F2DBrehDdqS81b/RF I07E6Q1NWndawqP7M6mRRwgHLDu3LzzwGN8KxVhggo82GMcsSrAc1ahbI2tLO/4h GaaOdcmCFym4HepXI+LLRzT+MaoZpdzSNxCphdkUChMEvgh7UA/6ebFmhmBGiedT WhP0LAxxRCBPh0tvG1j9mSJiNEridno= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:29 2025 by rpki-client