$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa File: 38d06ae0-9690-34fa-a93a-db5e0debc30a.roa (raw, json) Hash identifier: vo8/vItoLa+t9ZyZ3Mek6hyKTSWvvRxOTZrs1Z8dPpI= Subject key identifier: 53:43:38:AE:95:81:1A:B2:45:B2:C8:F6:10:C3:CB:E2:A6:64:7E:71 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C6B494364BCDE93CA040 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c6:b4:94:36:4b:cd:e9:3c:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a91975b4-2570-4dd2-8fab-4ef88ff3baa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3c:26:f2:fd:71:ab:c0:c9:d9:86:02:71:f4: 97:ac:59:17:57:cc:47:af:20:1e:29:14:98:b6:cb: a0:26:da:77:0e:8e:87:d0:96:a4:13:37:88:83:46: b9:89:01:23:34:4b:96:0f:4a:29:d9:31:14:d4:19: 3d:86:62:39:65:5e:d4:c1:7d:f8:ed:f4:4e:4b:8c: 95:00:81:4c:0a:b2:92:3c:d9:a9:ce:95:b6:3b:9c: dd:22:b4:85:d2:6c:20:aa:80:61:4f:f7:78:c1:b2: bf:62:04:ef:c8:0a:bc:c6:09:b7:8d:b5:d5:09:ed: 22:00:59:7a:c4:59:06:61:5e:0d:6f:1d:9b:b6:e4: 67:17:39:fb:2f:40:59:73:0d:38:89:96:dc:2c:e4: f3:8a:01:f7:b7:3c:0c:fe:4d:95:ef:ef:dd:31:ea: 99:e1:8e:9b:99:e8:41:f9:79:77:d1:cb:a4:69:88: 5e:29:47:5c:fa:5f:1f:97:e9:f6:f7:b9:28:34:03: 11:df:8c:ea:00:5a:dd:b7:97:5f:2c:a3:a3:34:bc: b4:cc:13:35:37:ba:12:a1:b0:fa:14:6e:b9:b0:3e: f2:fe:16:e4:4e:6e:17:b6:79:e1:ca:71:a1:da:95: 44:5d:f2:e8:7b:fb:89:36:fa:85:1c:ad:cf:3d:2e: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:43:38:AE:95:81:1A:B2:45:B2:C8:F6:10:C3:CB:E2:A6:64:7E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:16:e9:13:6d:2f:74:c8:f5:d0:46:ac:80:e0:2c:7e:17:c5: 5c:d4:cc:22:aa:8e:39:26:31:89:29:f6:bc:29:44:b1:b1:d5: 5a:27:a7:cf:7f:5f:9e:74:eb:2a:da:e5:4d:99:fc:5a:45:24: 01:a7:3c:0c:37:cb:49:6b:08:73:0b:9a:f2:ae:02:7b:7c:75: 37:07:eb:91:e7:e9:7d:49:97:14:ff:cf:eb:52:bd:4c:2a:6d: e9:f5:19:78:ba:45:2f:c3:a3:cb:c6:7c:47:7c:b9:c5:39:06: dd:09:9e:19:7d:a9:ab:3f:ed:ff:3e:13:36:8b:5c:b8:94:b3: ce:99:46:ab:49:32:52:8f:29:05:b0:be:2c:12:04:ff:6e:5e: e8:7a:a8:ad:5e:c5:40:13:25:47:28:d8:57:8c:c2:fb:6b:35: 3b:6e:d1:10:70:74:1a:b8:a3:8c:92:a8:0e:75:3d:92:a3:a9: 25:e6:9a:05:1a:cb:63:5f:5f:22:34:34:0d:f7:7a:e9:df:17: dc:64:13:5a:fe:c0:e5:2a:68:3d:77:38:d3:4a:79:d2:37:aa: e1:0c:24:4d:6a:17:fa:af:71:db:18:0b:cd:7e:d1:7c:1b:78: ce:4b:b8:a0:0f:37:7d:fe:b1:c5:a0:ae:fd:0f:a9:65:3d:ed: 6d:d1:7e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98a0lDZLzek8oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTkxOTc1YjQtMjU3MC00ZGQyLThmYWItNGVmODhmZjNiYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljwm8v1xq8DJ2YYCcfSXrFkXV8xHryAeKRSY tsugJtp3Do6H0JakEzeIg0a5iQEjNEuWD0op2TEU1Bk9hmI5ZV7UwX347fROS4yV AIFMCrKSPNmpzpW2O5zdIrSF0mwgqoBhT/d4wbK/YgTvyAq8xgm3jbXVCe0iAFl6 xFkGYV4Nbx2btuRnFzn7L0BZcw04iZbcLOTzigH3tzwM/k2V7+/dMeqZ4Y6bmehB +Xl30cukaYheKUdc+l8fl+n297koNAMR34zqAFrdt5dfLKOjNLy0zBM1N7oSobD6 FG65sD7y/hbkTm4XtnnhynGh2pVEXfLoe/uJNvqFHK3PPS5BmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNDOK6VgRqyRbLI9hDDy+KmZH5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhkMDZhZTAtOTY5MC0z NGZhLWE5M2EtZGI1ZTBkZWJjMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMW6RNtL3TI9dBGrIDgLH4XxVzUzCKqjjkmMYkp9rwpRLGx1Vonp89/ X5506yra5U2Z/FpFJAGnPAw3y0lrCHMLmvKuAnt8dTcH65Hn6X1JlxT/z+tSvUwq ben1GXi6RS/Do8vGfEd8ucU5Bt0Jnhl9qas/7f8+EzaLXLiUs86ZRqtJMlKPKQWw viwSBP9uXuh6qK1exUATJUco2FeMwvtrNTtu0RBwdBq4o4ySqA51PZKjqSXmmgUa y2NfXyI0NA33eunfF9xkE1r+wOUqaD13ONNKedI3quEMJE1qF/qvcdsYC81+0Xwb eM5LuKAPN33+scWgrv0PqWU97W3Rfrw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:18:51 2025 by rpki-client