$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3aa6c437-ed3d-36b5-81b6-8d7301e74a30.roa File: 3aa6c437-ed3d-36b5-81b6-8d7301e74a30.roa (raw, json) Hash identifier: 1MUzG+n/UN4lz8eof4SCzxVd/gbh2i+12OaCQTLh3xM= Subject key identifier: 6C:2E:3E:D4:84:9C:BE:1D:60:7E:54:07:F3:94:D7:2A:AB:E0:18:1C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D6AAA5CEEFAE83E463D767DE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3aa6c437-ed3d-36b5-81b6-8d7301e74a30.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 3360 IP address blocks: 130.174.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:5c:ee:fa:e8:3e:46:3d:76:7d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=145092d4-d3b0-46ee-8fa0-fe1036e9f540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ab:94:42:5a:5e:27:c9:21:ca:5f:b6:34:f3: c6:cd:c4:00:5c:fb:9a:f4:bd:c0:6a:5c:19:9b:47: dc:01:95:86:a6:5f:36:df:8d:38:14:cf:67:0d:ff: 3f:6d:de:17:35:25:b5:e3:f3:62:e8:b9:6f:83:49: 40:09:d7:6e:8c:84:57:4f:71:ea:61:82:00:c4:6f: a8:8d:82:39:17:4d:3d:00:fa:d1:f9:39:55:55:2e: c5:42:b1:ed:a4:83:7f:d7:46:7a:04:cb:51:b2:87: 66:77:ff:8d:95:db:89:95:a9:c6:3d:48:aa:08:bb: e8:0f:b5:37:47:1a:bd:1c:72:fd:1d:0b:5c:5b:ed: 08:f6:2d:90:8e:c5:9e:bb:2e:9d:f5:31:06:0b:40: 11:2b:2c:a4:74:cb:49:bb:50:e5:06:39:cb:db:06: 95:3c:1f:32:ed:44:72:6b:8a:4d:65:dd:55:f0:4b: 83:62:6b:9c:4f:19:12:78:5d:38:5f:97:1b:ab:db: 8e:00:3f:c9:ae:8f:79:47:12:42:6f:42:9a:91:11: 2c:0d:17:86:66:09:0b:82:9c:f7:93:dc:d1:32:a8: bc:c6:ad:23:3e:68:a0:2f:60:e3:a6:03:84:18:f4: bd:6a:50:62:06:51:3d:b7:3f:d9:c9:b3:90:c1:c9: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2E:3E:D4:84:9C:BE:1D:60:7E:54:07:F3:94:D7:2A:AB:E0:18:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3aa6c437-ed3d-36b5-81b6-8d7301e74a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f2:79:25:6e:6f:d6:36:a5:4c:99:76:1e:fb:5a:5c:7d:16: 3e:3a:0c:10:38:8d:3f:a9:2d:d6:72:e8:e2:d7:c9:cb:a9:b1: bb:e5:62:a2:99:ae:59:a2:55:52:68:48:80:83:02:42:d3:84: 1c:ef:69:a1:42:27:e2:0e:59:3a:85:c5:70:6c:6b:67:28:4b: e2:28:c2:2a:c4:e2:61:9f:0f:b1:d2:02:c5:c7:87:70:81:fb: f2:0d:f5:1d:b3:c8:10:f1:c4:25:b8:ae:e6:5a:c9:cd:7d:81: 4f:e4:c1:1e:4d:83:f7:fc:07:2d:9f:d0:eb:f5:de:1e:b0:66: e0:5f:fe:b4:34:fa:20:c0:75:f7:87:98:af:66:f2:80:57:16: 42:7d:22:b5:59:14:b4:a2:44:c6:d3:1a:85:e8:d9:b6:48:10: ed:be:c7:56:38:16:b6:fd:50:be:a1:24:04:82:34:bf:e9:78: 33:77:56:04:39:51:07:2d:b1:60:a9:15:5a:21:1a:ee:39:21: 24:3b:16:d3:e2:04:fe:c7:b9:5a:02:f9:09:9b:dd:5f:88:6b: d4:32:2c:6b:6f:e1:e5:12:5d:84:ad:61:0c:f2:18:de:63:fb: 98:dc:64:ca:98:05:91:70:83:54:78:62:c2:93:63:88:25:4e: 12:e9:ef:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqlzu+ug+Rj12feAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk MTQ1MDkyZDQtZDNiMC00NmVlLThmYTAtZmUxMDM2ZTlmNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6uUQlpeJ8khyl+2NPPGzcQAXPua9L3AalwZ m0fcAZWGpl823404FM9nDf8/bd4XNSW14/Ni6Llvg0lACddujIRXT3HqYYIAxG+o jYI5F009APrR+TlVVS7FQrHtpIN/10Z6BMtRsodmd/+NlduJlanGPUiqCLvoD7U3 Rxq9HHL9HQtcW+0I9i2QjsWeuy6d9TEGC0ARKyykdMtJu1DlBjnL2waVPB8y7URy a4pNZd1V8EuDYmucTxkSeF04X5cbq9uOAD/Jro95RxJCb0KakREsDReGZgkLgpz3 k9zRMqi8xq0jPmigL2DjpgOEGPS9alBiBlE9tz/ZybOQwcnlxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwuPtSEnL4dYH5UB/OU1yqr4BgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2FhNmM0MzctZWQzZC0z NmI1LTgxYjYtOGQ3MzAxZTc0YTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADryeSVub9Y2pUyZdh77Wlx9Fj46DBA4jT+pLdZy6OLXycupsbvlYqKZ rlmiVVJoSICDAkLThBzvaaFCJ+IOWTqFxXBsa2coS+IowirE4mGfD7HSAsXHh3CB +/IN9R2zyBDxxCW4ruZayc19gU/kwR5Ng/f8By2f0Ov13h6wZuBf/rQ0+iDAdfeH mK9m8oBXFkJ9IrVZFLSiRMbTGoXo2bZIEO2+x1Y4Frb9UL6hJASCNL/peDN3VgQ5 UQctsWCpFVohGu45ISQ7FtPiBP7HuVoC+Qmb3V+Ia9QyLGtv4eUSXYStYQzyGN5j +5jcZMqYBZFwg1R4YsKTY4glThLp77g= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:03 2026 by rpki-client