$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa File: 38d06ae0-9690-34fa-a93a-db5e0debc30a.roa (raw, json) Hash identifier: 9xALSlPIhPMWUpRtYq+SZvqJAxv0sKjwG0+udkwFAxI= Subject key identifier: EC:78:81:C1:6F:9F:CF:49:06:DB:87:1A:B3:22:7D:E4:01:77:09:47 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD32C98D1ADFBF7514600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d3:2c:98:d1:ad:fb:f7:51:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=1a07c6b9-1793-4e5b-a1c5-c9fa8da058f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:0f:b7:96:96:7d:d6:a1:a2:c0:c0:8a:b2: ab:8c:ba:31:71:38:22:1c:38:86:98:58:c3:19:00: f2:6c:3f:7a:89:89:18:b5:08:01:00:14:af:47:4d: 43:e1:29:c7:1e:e9:16:55:e0:56:97:94:b6:c4:2e: 76:dd:25:f6:4a:2c:3b:6b:7e:f6:c2:ce:a2:56:19: d6:44:e9:26:c4:06:8d:87:24:4d:ba:e7:00:50:92: f7:17:3c:fc:ad:30:71:73:df:3a:ea:ab:2a:7f:a9: b7:61:b2:d4:e4:4d:18:a2:8d:75:83:84:d3:2d:cb: c9:85:9b:a5:81:5c:1d:a1:a5:fe:a9:47:59:cc:a4: e9:6c:a4:6a:b3:ea:04:52:ca:bc:ae:44:2e:00:aa: cf:0f:40:81:ac:9a:ef:eb:60:29:40:0e:43:dd:ba: 1c:7d:09:19:d2:11:a3:f2:50:4e:bc:0a:c3:a9:7d: 46:1a:a2:cd:00:6a:78:74:5e:80:c7:d9:e5:5e:87: d1:e2:b5:b8:7e:f1:9a:45:af:6f:27:e6:13:eb:07: 36:71:7c:ff:25:a7:b3:c1:0e:29:13:07:8f:48:c0: 70:71:3c:fd:70:f4:43:1e:2f:e2:fe:24:01:4e:ba: d6:49:04:ef:37:a2:ee:2e:11:97:9a:29:e4:0d:46: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:81:C1:6F:9F:CF:49:06:DB:87:1A:B3:22:7D:E4:01:77:09:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:70:dc:c3:8e:47:74:ba:5f:66:2f:02:68:ef:07:59:ae:0c: 71:fd:3d:5b:1a:6e:ad:be:61:b3:0a:ee:dd:62:d9:94:86:91: 97:79:15:56:ad:ab:c4:8a:42:fb:8a:89:b7:ee:fe:e0:18:23: 9a:11:ae:c4:ee:8a:1e:5d:b5:6b:ef:25:1f:88:28:d7:2e:33: 87:39:b7:b6:09:8b:5f:9c:a2:ce:bc:c2:38:e7:ff:40:26:90: ed:eb:35:10:b3:2c:3c:57:12:99:27:14:60:bf:a7:b7:55:11: cc:01:df:05:b7:d7:09:54:11:ba:43:9f:67:a2:31:33:f5:f6: 20:be:05:8b:18:92:a0:f4:0a:99:c7:0e:34:da:98:86:cc:a1: 8d:7b:1e:0c:f7:8e:d6:5d:c7:84:d3:09:c6:b7:ad:30:28:fb: 46:54:a9:79:76:4a:64:bd:75:9d:11:76:78:6f:a2:40:59:71: 5e:f7:ac:ba:7b:24:a7:a3:a7:89:bf:09:5b:8c:ea:8a:0f:88: ec:48:ba:7f:1a:95:c2:ab:52:83:45:91:f7:ec:66:38:88:e2: 6f:2b:e9:60:8e:f5:99:9b:07:47:ae:ad:81:ab:5b:ff:bd:97: 7a:91:2a:87:aa:c1:1c:1e:5b:06:b9:d3:58:18:3a:54:25:2e: 87:67:2f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9MsmNGt+/dRRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MWEwN2M2YjktMTc5My00ZTViLWExYzUtYzlmYThkYTA1OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd4Pt5aWfdahosDAirKrjLoxcTgiHDiGmFjD GQDybD96iYkYtQgBABSvR01D4SnHHukWVeBWl5S2xC523SX2Siw7a372ws6iVhnW ROkmxAaNhyRNuucAUJL3Fzz8rTBxc9866qsqf6m3YbLU5E0Yoo11g4TTLcvJhZul gVwdoaX+qUdZzKTpbKRqs+oEUsq8rkQuAKrPD0CBrJrv62ApQA5D3bocfQkZ0hGj 8lBOvArDqX1GGqLNAGp4dF6Ax9nlXofR4rW4fvGaRa9vJ+YT6wc2cXz/JaezwQ4p EwePSMBwcTz9cPRDHi/i/iQBTrrWSQTvN6LuLhGXminkDUbTjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx4gcFvn89JBtuHGrMifeQBdwlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhkMDZhZTAtOTY5MC0z NGZhLWE5M2EtZGI1ZTBkZWJjMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9w3MOOR3S6X2YvAmjvB1muDHH9PVsabq2+YbMK7t1i2ZSGkZd5FVat q8SKQvuKibfu/uAYI5oRrsTuih5dtWvvJR+IKNcuM4c5t7YJi1+cos68wjjn/0Am kO3rNRCzLDxXEpknFGC/p7dVEcwB3wW31wlUEbpDn2eiMTP19iC+BYsYkqD0CpnH DjTamIbMoY17Hgz3jtZdx4TTCca3rTAo+0ZUqXl2SmS9dZ0RdnhvokBZcV73rLp7 JKejp4m/CVuM6ooPiOxIun8alcKrUoNFkffsZjiI4m8r6WCO9ZmbB0eurYGrW/+9 l3qRKoeqwRweWwa501gYOlQlLodnL/8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:57 2026 by rpki-client