$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa File: 2801e688-4d9d-3c40-acd7-497ab7904fd5.roa (raw, json) Hash identifier: kiLtgVRNelkDKL4oV3O5Il11O+Cgu3FZYMx0JJS3kEo= Subject key identifier: BB:CB:1C:68:A4:07:44:10:AF:9D:6A:A2:9B:03:9A:79:00:B2:92:E0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD4E802EDA601903EC500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 202 IP address blocks: 130.174.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d4:e8:02:ed:a6:01:90:3e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=5b6b45f4-512b-41f5-90e3-0531c5ca652e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:1c:b0:d7:db:d3:42:a3:72:b8:03:0d:b8: 00:9f:c5:07:46:fa:10:75:ff:64:f6:20:aa:4b:e7: de:2c:9d:7e:eb:6c:ed:d9:33:04:f2:ef:78:06:d9: c4:74:5f:94:73:37:ab:f5:ac:b3:25:22:f9:26:48: 0b:19:ad:27:4a:81:72:46:1d:c1:2f:7e:ec:04:43: c3:18:bd:b6:3e:dc:a1:8a:28:87:8c:06:7d:dc:1f: 45:f2:c0:e8:0a:4a:f8:82:93:28:5e:73:3c:4b:7f: 44:e6:44:ac:31:42:c2:4d:77:69:8b:e7:2c:c9:b8: 5c:be:e5:c5:57:88:bb:f8:c9:b8:7c:45:77:a4:62: 38:7a:5d:35:9a:f4:60:5d:b6:80:19:4d:36:5a:6d: 98:90:e4:38:38:98:47:ec:58:bf:03:90:a7:0e:dd: 83:1e:81:c6:48:11:10:d7:3e:37:8c:df:54:81:2b: 32:70:fb:b4:50:3a:d5:8c:f5:d5:3a:22:c7:40:4c: 96:01:c8:a1:2f:a0:4b:b0:76:9c:15:06:1c:4b:77: 09:72:fc:55:2b:44:af:d9:37:eb:9a:e4:93:4a:02: 94:1d:06:df:2c:9e:95:8d:1d:5d:b6:1f:b7:8b:20: 37:a0:8e:4a:79:24:f8:b9:8e:16:93:37:da:64:21: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CB:1C:68:A4:07:44:10:AF:9D:6A:A2:9B:03:9A:79:00:B2:92:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2801e688-4d9d-3c40-acd7-497ab7904fd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2c:fc:a4:cd:eb:13:ef:6e:0d:39:d6:31:7d:bf:29:1e:46: 6f:65:7e:53:23:c3:75:cd:70:67:2e:2a:97:2a:f4:8b:cd:26: 6d:5c:45:09:d1:6d:f3:bc:eb:cb:1e:4b:62:96:1b:dc:33:fc: 30:51:55:c3:8b:f2:5e:b3:fb:8e:7b:c1:1b:05:ec:6c:2c:d8: 66:23:24:59:2b:92:ad:a4:fa:fd:f6:62:62:22:ef:65:65:19: 10:71:3e:23:72:6e:37:7d:6c:78:35:0d:17:a2:d9:0d:87:c7: 5c:99:85:12:e4:7e:46:82:c7:9d:1f:a6:8e:56:ef:18:ff:07: c0:61:47:dd:c5:02:ff:61:35:47:bd:00:b9:67:1e:4f:e5:23: 51:32:4d:35:0a:88:c1:3d:5b:99:fe:74:9d:e1:de:05:6e:47: 01:a6:3b:b3:72:bc:fc:21:7c:af:08:17:e9:a7:9f:0b:0c:03: ec:9e:48:3a:78:f3:8f:b7:36:4b:76:28:38:a6:c5:94:95:45: f4:5b:8f:3e:0f:79:cd:74:4a:1d:1c:88:49:ea:a5:e3:ff:1f: 3a:61:65:a8:72:8f:99:9c:0c:28:cc:56:2a:46:82:f8:89:2f: 91:0e:5f:9f:23:44:dc:4c:6b:fc:ec:0f:8f:f3:76:52:68:6d: e4:27:0d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9ToAu2mAZA+xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NWI2YjQ1ZjQtNTEyYi00MWY1LTkwZTMtMDUzMWM1Y2E2NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGkcsNfb00KjcrgDDbgAn8UHRvoQdf9k9iCq S+feLJ1+62zt2TME8u94BtnEdF+Uczer9ayzJSL5JkgLGa0nSoFyRh3BL37sBEPD GL22PtyhiiiHjAZ93B9F8sDoCkr4gpMoXnM8S39E5kSsMULCTXdpi+csybhcvuXF V4i7+Mm4fEV3pGI4el01mvRgXbaAGU02Wm2YkOQ4OJhH7Fi/A5CnDt2DHoHGSBEQ 1z43jN9UgSsycPu0UDrVjPXVOiLHQEyWAcihL6BLsHacFQYcS3cJcvxVK0Sv2Tfr muSTSgKUHQbfLJ6VjR1dth+3iyA3oI5KeST4uY4WkzfaZCGSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvLHGikB0QQr51qopsDmnkAspLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjgwMWU2ODgtNGQ5ZC0z YzQwLWFjZDctNDk3YWI3OTA0ZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEs/KTN6xPvbg051jF9vykeRm9lflMjw3XNcGcuKpcq9IvNJm1cRQnR bfO868seS2KWG9wz/DBRVcOL8l6z+457wRsF7Gws2GYjJFkrkq2k+v32YmIi72Vl GRBxPiNybjd9bHg1DRei2Q2Hx1yZhRLkfkaCx50fpo5W7xj/B8BhR93FAv9hNUe9 ALlnHk/lI1EyTTUKiME9W5n+dJ3h3gVuRwGmO7NyvPwhfK8IF+mnnwsMA+yeSDp4 84+3Nkt2KDimxZSVRfRbjz4Pec10Sh0ciEnqpeP/HzphZahyj5mcDCjMVipGgviJ L5EOX58jRNxMa/zsD4/zdlJobeQnDec= -----END CERTIFICATE-----Generated at Fri Apr 17 22:22:29 2026 by rpki-client