$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa File: 2921d5a0-167c-34e7-ad92-c580bbdb9441.roa (raw, json) Hash identifier: jU4P9DsTol8Y2A9M8b0iE+5eUrXIxEuO27mJRYetHjo= Subject key identifier: DA:8B:9B:C8:E9:1D:91:CA:27:A5:D8:63:74:E2:18:FC:C5:FD:9A:E8 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD313A53A344184CCEC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d3:13:a5:3a:34:41:84:cc:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=d740bda1-45a5-4a94-822e-18c2a4b8ff0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:15:65:9d:38:96:ac:41:a4:f8:4b:f5:45: 96:50:ae:b6:88:f7:e4:37:2b:70:cc:dd:1d:57:f6: 15:0f:a9:f9:2e:02:c5:6a:08:33:be:9b:a3:19:dc: b1:11:b8:89:02:5c:38:de:bf:6c:4f:de:45:35:35: 60:85:e7:7b:f3:2e:41:f0:33:5e:a1:79:f1:ad:f0: ea:b9:ed:6a:be:ea:de:af:74:60:b5:6d:b7:54:fa: bd:86:30:9c:58:38:db:9e:75:79:f9:61:9d:f1:09: 1e:5f:2c:aa:da:47:91:66:0d:f0:ad:84:d8:59:b6: a3:e3:a5:74:7f:b8:3e:e1:16:66:d8:2d:63:81:3d: 12:39:35:23:bc:3b:01:59:6d:93:1e:e4:39:74:04: 70:80:49:be:4e:e9:c7:4a:fb:bf:cd:53:13:c9:8d: c8:55:14:52:fe:1d:f8:71:b8:7c:3c:b2:16:60:f3: 56:2a:23:0a:f0:23:09:77:90:3c:b8:91:fa:e1:48: 62:f0:b7:a6:d0:0a:06:4c:ab:f5:bb:22:6a:36:5e: 0f:8b:ce:04:bf:fe:60:8c:4f:59:b1:f9:8d:71:90: dc:93:92:1d:13:dc:a0:41:81:f1:d9:e5:fb:21:87: 32:58:96:7e:1e:81:e8:25:4e:3b:a5:b4:b9:7f:ca: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:9B:C8:E9:1D:91:CA:27:A5:D8:63:74:E2:18:FC:C5:FD:9A:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2921d5a0-167c-34e7-ad92-c580bbdb9441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:18:ab:ad:1c:f6:93:0a:6c:1a:01:2d:bf:eb:65:c6:27:82: c9:09:3e:a5:35:76:e2:79:f3:81:0a:a7:f6:cd:55:ad:8e:df: a7:91:51:9e:1e:a6:6f:f9:4c:14:e2:31:d3:c4:41:68:5a:03: 00:24:bd:50:c0:a0:4c:68:80:65:e1:be:63:5b:72:e8:d6:57: fb:77:d4:bf:ff:f4:02:53:80:c5:1d:ff:c1:ab:42:9b:6b:ec: 3b:da:62:3f:b4:29:a9:11:d7:ae:8c:c8:e2:ef:51:a8:8a:69: 5e:41:ba:a8:e8:a2:e0:60:f0:7d:67:a9:b6:48:07:b7:07:d5: 31:aa:7b:e6:43:e9:e3:64:d7:9e:90:5e:6d:58:64:96:15:6e: 55:08:fe:89:de:34:d7:0b:e4:25:c1:27:83:41:d7:a6:e1:5d: df:2c:20:61:24:1e:31:f6:a6:c8:cb:65:b4:dc:b6:e7:0b:ff: 8c:c8:1c:6f:42:13:a4:4b:c2:64:68:79:91:1f:6a:27:09:d9: a6:56:38:1d:8d:4e:ba:dd:99:47:41:ec:94:44:0d:ba:ab:31: 69:a0:39:f6:4a:ce:78:5a:23:1e:c8:f7:02:9b:ae:6e:2f:14: 4f:1d:d1:e5:7f:a1:24:8d:2e:fd:66:be:de:5e:50:62:57:2b: 83:5c:9e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9MTpTo0QYTM7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDc0MGJkYTEtNDVhNS00YTk0LTgyMmUtMThjMmE0YjhmZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RYVZZ04lqxBpPhL9UWWUK62iPfkNytwzN0d V/YVD6n5LgLFaggzvpujGdyxEbiJAlw43r9sT95FNTVghed78y5B8DNeoXnxrfDq ue1qvurer3RgtW23VPq9hjCcWDjbnnV5+WGd8QkeXyyq2keRZg3wrYTYWbaj46V0 f7g+4RZm2C1jgT0SOTUjvDsBWW2THuQ5dARwgEm+TunHSvu/zVMTyY3IVRRS/h34 cbh8PLIWYPNWKiMK8CMJd5A8uJH64Uhi8Lem0AoGTKv1uyJqNl4Pi84Ev/5gjE9Z sfmNcZDck5IdE9ygQYHx2eX7IYcyWJZ+HoHoJU47pbS5f8qIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqLm8jpHZHKJ6XYY3TiGPzF/ZroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjkyMWQ1YTAtMTY3Yy0z NGU3LWFkOTItYzU4MGJiZGI5NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8Yq60c9pMKbBoBLb/rZcYngskJPqU1duJ584EKp/bNVa2O36eRUZ4e pm/5TBTiMdPEQWhaAwAkvVDAoExogGXhvmNbcujWV/t31L//9AJTgMUd/8GrQptr 7DvaYj+0KakR166MyOLvUaiKaV5BuqjoouBg8H1nqbZIB7cH1TGqe+ZD6eNk156Q Xm1YZJYVblUI/oneNNcL5CXBJ4NB16bhXd8sIGEkHjH2psjLZbTctucL/4zIHG9C E6RLwmRoeZEfaicJ2aZWOB2NTrrdmUdB7JREDbqrMWmgOfZKznhaIx7I9wKbrm4v FE8d0eV/oSSNLv1mvt5eUGJXK4Ncnsg= -----END CERTIFICATE-----Generated at Fri Apr 17 18:34:13 2026 by rpki-client