$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa File: 3a14a4fb-67a7-3a3e-8054-6165db358899.roa (raw, json) Hash identifier: HjugFO4CG0dRNnQJJ7yBGo7Dn5p0NtqC/pchOI1Y/OI= Subject key identifier: 3D:A7:72:F7:6F:AC:B2:AB:43:D0:C5:45:E6:6B:08:48:89:E7:F7:4F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D25D698AADBF0C9A2AFC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 130.174.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:25:d6:98:aa:db:f0:c9:a2:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d8de5ec4-06ad-48a9-b977-8b17f3933fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:86:bf:be:8e:e5:24:16:f4:0d:92:48:ba:c6: 23:2f:18:29:b0:f4:46:c5:76:10:b2:7a:75:bb:57: af:25:0c:e7:82:7d:22:5c:41:8a:5c:eb:91:df:2a: c1:c8:8e:21:04:50:0c:b1:f5:40:23:6b:47:2a:12: b6:c9:b8:91:f0:a7:98:62:f4:a2:02:f3:4b:09:fa: f3:a7:2a:d5:5f:20:1d:86:e8:74:ba:34:06:40:e5: 78:b9:77:dc:2d:b4:7f:4f:ea:a7:bf:e3:4a:06:60: 1d:82:27:cd:21:e3:b7:a2:dd:f4:9d:14:d7:15:c6: 24:2b:a9:45:2c:a5:23:d3:f7:44:81:b7:b0:55:ab: f9:fb:44:c7:20:ca:e8:57:23:ed:27:e8:c9:88:1e: 41:09:da:61:3e:cb:12:de:f8:1b:44:37:5c:7e:23: e8:a8:d6:2d:5e:5d:31:5e:76:dd:9b:e1:a8:6e:38: ea:d3:44:48:95:6e:36:dd:1e:ff:0a:66:0c:d1:e8: ae:1a:58:1d:49:80:c6:32:c6:a4:af:41:8f:34:dd: 0f:f7:92:4f:f2:12:53:b5:8c:0b:ce:99:c8:e7:b9: 04:8b:3f:35:2b:5d:23:90:fb:73:97:94:00:cf:fa: da:0d:46:f1:be:25:00:b7:0a:74:3b:66:fb:61:9d: c4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A7:72:F7:6F:AC:B2:AB:43:D0:C5:45:E6:6B:08:48:89:E7:F7:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ed:5f:11:97:41:a3:5a:5f:4b:7f:ff:3c:15:44:52:14:00: 08:f7:03:f2:e3:1b:f5:18:0c:0e:d3:de:c6:b3:6a:3d:ea:2a: c4:4e:84:b7:eb:15:ec:98:0f:75:75:be:49:8e:37:18:a4:54: 9d:15:3f:c1:da:10:d4:b7:93:d3:ae:dc:d7:0f:cb:db:29:d6: 27:b4:13:af:82:02:7b:43:9a:2b:5b:f0:d1:40:91:02:7c:a7: 9e:1d:be:6b:d3:59:03:4b:3a:a8:57:6f:e0:a0:b5:68:b5:df: e8:5a:84:f9:45:ff:dd:cb:67:71:b7:71:16:57:04:9f:64:37: 3b:1b:b4:ce:47:25:32:a2:13:de:c2:5c:19:21:5a:4e:35:d8: 89:96:70:41:c6:df:ab:26:80:bd:07:e3:be:11:b6:65:77:e7: e3:6a:3c:c3:11:f7:91:3f:53:91:1a:80:62:b9:e0:59:54:7b: 30:3c:af:e0:c0:5b:17:09:57:ad:c8:9f:ab:2f:4b:d2:96:a1: 4c:76:b4:a9:cc:e4:89:af:15:15:ea:a6:cd:fe:05:a4:32:79: b6:bb:2a:3e:b9:d9:d3:34:46:9c:da:3c:94:9d:fe:c9:39:c0: 11:e7:7e:43:66:a9:0d:fc:42:f1:0d:6d:f8:cc:9f:83:ff:fa: 7c:f5:d8:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSXWmKrb8Mmir8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDhkZTVlYzQtMDZhZC00OGE5LWI5NzctOGIxN2YzOTMzZmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloa/vo7lJBb0DZJIusYjLxgpsPRGxXYQsnp1 u1evJQzngn0iXEGKXOuR3yrByI4hBFAMsfVAI2tHKhK2ybiR8KeYYvSiAvNLCfrz pyrVXyAdhuh0ujQGQOV4uXfcLbR/T+qnv+NKBmAdgifNIeO3ot30nRTXFcYkK6lF LKUj0/dEgbewVav5+0THIMroVyPtJ+jJiB5BCdphPssS3vgbRDdcfiPoqNYtXl0x Xnbdm+Gobjjq00RIlW423R7/CmYM0eiuGlgdSYDGMsakr0GPNN0P95JP8hJTtYwL zpnI57kEiz81K10jkPtzl5QAz/raDUbxviUAtwp0O2b7YZ3EAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2ncvdvrLKrQ9DFReZrCEiJ5/dPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2ExNGE0ZmItNjdhNy0z YTNlLTgwNTQtNjE2NWRiMzU4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7tXxGXQaNaX0t//zwVRFIUAAj3A/LjG/UYDA7T3sazaj3qKsROhLfr FeyYD3V1vkmONxikVJ0VP8HaENS3k9Ou3NcPy9sp1ie0E6+CAntDmitb8NFAkQJ8 p54dvmvTWQNLOqhXb+CgtWi13+hahPlF/93LZ3G3cRZXBJ9kNzsbtM5HJTKiE97C XBkhWk412ImWcEHG36smgL0H474RtmV35+NqPMMR95E/U5EagGK54FlUezA8r+DA WxcJV63In6svS9KWoUx2tKnM5ImvFRXqps3+BaQyeba7Kj652dM0RpzaPJSd/sk5 wBHnfkNmqQ38QvENbfjMn4P/+nz12Ps= -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:50 2025 by rpki-client