$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/258491a2-fd1a-3fe5-8d53-658e8507511d.roa File: 258491a2-fd1a-3fe5-8d53-658e8507511d.roa (raw, json) Hash identifier: 8STBCeMBluIoaZ8AA/6iS0M1jEvNscLCHJRGWOaIYc8= Subject key identifier: 1C:8C:78:74:17:78:EE:B7:66:6B:9B:DA:74:53:00:6C:70:8F:9B:BE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D86957C479287144771BA0600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/258491a2-fd1a-3fe5-8d53-658e8507511d.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 3356 IP address blocks: 130.174.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7c:47:92:87:14:47:71:ba:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=70ca8c4b-81ec-4225-94fb-3caa8938a5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ec:2a:4a:a2:63:a2:23:2c:0f:7c:39:e9:5f: 6b:73:ce:81:0b:86:bc:05:21:04:32:98:f7:9c:73: f6:c6:81:2c:b4:b4:46:68:5e:35:79:f1:5d:ac:3a: 9b:02:7b:9d:64:18:e7:84:a2:80:e2:24:2c:94:05: 18:8f:b3:26:d7:79:86:27:1a:12:b8:43:69:80:f1: 6e:7f:be:0b:b6:3b:dd:d4:e1:3b:a7:0f:19:4e:11: eb:7d:ac:36:3a:87:5f:6d:39:bc:e9:66:e2:7a:93: fe:be:10:3c:85:f5:2e:97:76:0e:52:58:80:19:29: 84:77:36:8a:6d:46:ea:ab:30:af:27:92:c9:78:ff: a4:97:42:45:75:4e:6f:02:62:72:8f:d8:a6:61:d5: 17:26:7f:64:e4:a4:20:39:ef:ce:1f:1e:18:65:68: 9c:3e:32:e1:7e:6d:98:35:f6:93:53:f5:13:f0:70: ce:e5:ec:cc:4a:f2:1c:27:17:5c:2d:6c:b1:ab:2a: 3f:d3:60:bc:3a:f2:59:8b:c4:86:72:36:c5:cd:a3: d8:79:77:39:5e:e4:2b:b1:66:23:16:65:ea:73:b2: e8:17:33:20:0c:12:24:0f:39:5b:c1:24:50:a0:0a: af:f3:18:ca:e4:fe:0d:f9:be:e9:f5:9e:c0:72:c6: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8C:78:74:17:78:EE:B7:66:6B:9B:DA:74:53:00:6C:70:8F:9B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/258491a2-fd1a-3fe5-8d53-658e8507511d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:51:65:97:7e:74:fd:57:d2:45:b3:b1:26:55:ff:12:92:d6: 81:df:79:19:63:63:77:a2:bd:40:67:8f:0c:51:f3:d1:56:17: c3:93:88:26:e5:1e:6f:03:5a:5c:a6:85:b3:46:0f:40:ec:e6: fe:f7:9b:76:2a:1a:8e:36:a8:f0:4c:dc:80:32:5d:b4:f7:e5: 07:5e:b5:d8:1c:53:84:36:fd:64:14:73:b8:74:91:d0:99:ca: dc:66:02:f6:d0:7d:9d:8f:d1:51:3d:b8:fd:38:44:ff:ae:bb: 5b:06:8c:35:4f:66:42:07:25:8e:2d:93:57:3c:f5:b8:b8:ed: 25:13:63:4b:fd:77:45:96:da:6f:da:2a:b5:b5:5f:a9:e1:07: 3c:5b:f8:a3:99:a6:34:fe:d8:50:49:e8:de:11:3b:7a:2b:db: ce:3a:7b:00:6a:6b:2a:e6:1e:ae:6f:58:8f:f4:0b:76:1b:63: 59:be:22:60:8f:7c:31:e2:68:cb:93:13:b2:71:e7:5b:82:f5: da:d0:46:fb:07:e4:e3:0a:a8:27:ef:e2:bf:9c:52:46:97:79: fb:72:37:ed:7b:f1:b3:bb:7b:13:cd:24:35:30:57:46:af:12: b1:4f:82:78:36:b7:bd:b1:83:7e:ce:11:7e:89:ab:13:af:00: e4:1c:1a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlXxHkocUR3G6BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NzBjYThjNGItODFlYy00MjI1LTk0ZmItM2NhYTg5MzhhNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOwqSqJjoiMsD3w56V9rc86BC4a8BSEEMpj3 nHP2xoEstLRGaF41efFdrDqbAnudZBjnhKKA4iQslAUYj7Mm13mGJxoSuENpgPFu f74Ltjvd1OE7pw8ZThHrfaw2OodfbTm86WbiepP+vhA8hfUul3YOUliAGSmEdzaK bUbqqzCvJ5LJeP+kl0JFdU5vAmJyj9imYdUXJn9k5KQgOe/OHx4YZWicPjLhfm2Y NfaTU/UT8HDO5ezMSvIcJxdcLWyxqyo/02C8OvJZi8SGcjbFzaPYeXc5XuQrsWYj FmXqc7LoFzMgDBIkDzlbwSRQoAqv8xjK5P4N+b7p9Z7Acsb/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByMeHQXeO63Zmub2nRTAGxwj5u+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjU4NDkxYTItZmQxYS0z ZmU1LThkNTMtNjU4ZTg1MDc1MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVRZZd+dP1X0kWzsSZV/xKS1oHfeRljY3eivUBnjwxR89FWF8OTiCbl Hm8DWlymhbNGD0Ds5v73m3YqGo42qPBM3IAyXbT35QdetdgcU4Q2/WQUc7h0kdCZ ytxmAvbQfZ2P0VE9uP04RP+uu1sGjDVPZkIHJY4tk1c89bi47SUTY0v9d0WW2m/a KrW1X6nhBzxb+KOZpjT+2FBJ6N4RO3or2846ewBqayrmHq5vWI/0C3YbY1m+ImCP fDHiaMuTE7Jx51uC9drQRvsH5OMKqCfv4r+cUkaXeftyN+178bO7exPNJDUwV0av ErFPgng2t72xg37OEX6JqxOvAOQcGiM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:21:13 2026 by rpki-client