$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa File: 3cb8e548-696d-3518-b3fe-4e1df2101a23.roa (raw, json) Hash identifier: hJC9tTgb7rkpxlm8lav8N60uBAxajintmejGp62M8kw= Subject key identifier: 91:6D:B5:7D:64:64:74:A2:7E:B5:8A:C4:0C:BB:3A:7F:82:CF:70:79 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FC9722BB5CF0D65607400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 130.174.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c9:72:2b:b5:cf:0d:65:60:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=f7b7ab4b-770f-4332-9482-268cbfa685bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:93:27:a4:bb:41:f9:f6:83:b6:7c:58:6b: e3:c2:0f:58:32:f5:e1:44:1a:f9:ca:63:cb:89:ff: 1f:d6:47:5d:da:e8:7d:f7:3f:d9:9a:a2:96:33:61: d5:f3:b9:3a:a2:d7:c7:ca:b7:3e:ea:9d:5a:31:64: 24:2c:e5:62:b2:da:fc:65:a6:4b:6b:90:24:30:9b: e4:dd:cd:cd:63:47:03:66:b5:0b:35:af:25:a3:d1: 9f:e2:66:3e:7a:cd:96:bf:5c:b0:a0:e7:23:f0:46: e4:bd:ee:cd:02:9a:aa:a6:1a:ca:b5:1e:79:69:5b: 9d:7a:0e:6f:53:dc:33:c7:88:7b:12:be:f8:52:a0: 0a:d6:97:8e:9e:cf:e4:41:b7:d9:34:3b:db:e5:c8: 7e:d3:8e:7b:cb:75:06:88:c1:52:c2:f2:a1:ef:d5: eb:58:82:c7:bd:3a:2f:d7:75:91:a8:76:07:ea:67: 18:da:79:0e:95:5a:db:3e:03:d5:a0:ec:7b:6a:21: b4:09:4e:84:8b:95:23:6e:b6:c9:b0:76:fe:a4:45: 56:d6:01:ac:aa:a1:18:2e:60:1c:3e:07:a8:d2:85: e7:41:0f:f0:ef:30:f6:e9:50:c2:89:d3:58:b5:5e: 88:09:26:1b:7b:0a:51:be:62:a5:07:5a:29:c8:fe: bd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:B5:7D:64:64:74:A2:7E:B5:8A:C4:0C:BB:3A:7F:82:CF:70:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3cb8e548-696d-3518-b3fe-4e1df2101a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:42:08:a7:09:b1:3f:a5:92:ee:19:cb:4c:3d:de:55:05:67: 6c:7e:b0:ec:d5:c0:97:65:4f:a2:25:bc:ea:d5:bd:fd:ba:88: 9b:89:02:46:87:af:7c:3d:2d:e2:fe:ea:f8:ef:9f:e9:6e:1b: dd:c2:93:04:a5:6d:d1:2e:15:08:ae:dc:70:22:d0:51:d8:a6: 3f:fd:12:f6:2b:9c:5d:77:d5:d7:06:09:e5:78:b1:45:43:eb: 57:9b:a5:17:0a:c1:7a:1a:b5:b5:09:b2:94:40:c0:d9:f0:99: b5:c1:33:ee:0c:0e:29:c8:4e:7a:5a:0f:94:fe:78:87:b6:72: 14:34:fd:b6:f8:1b:0b:24:31:32:8a:d0:f8:59:a7:b3:f4:e7: 31:33:33:6b:fe:15:25:f1:93:f6:cc:19:a4:00:c6:d4:58:54: b2:0b:d1:40:e9:49:81:ac:08:f5:26:af:f6:20:d4:40:4d:2c: 1d:f7:a6:f9:05:f0:77:ec:75:ca:71:33:59:2f:bc:dc:28:34: b0:04:5c:c7:4f:7d:78:df:d9:cb:4f:06:98:7c:3f:3d:f6:c9: f9:65:70:0a:e8:34:f8:85:c5:58:7d:15:80:45:ba:18:f2:a8: fd:43:68:aa:50:28:3a:36:97:dd:a7:6a:9f:c9:cf:2f:d9:f9: ad:7e:5a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8lyK7XPDWVgdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZjdiN2FiNGItNzcwZi00MzMyLTk0ODItMjY4Y2JmYTY4NWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsKTJ6S7Qfn2g7Z8WGvjwg9YMvXhRBr5ymPL if8f1kdd2uh99z/ZmqKWM2HV87k6otfHyrc+6p1aMWQkLOVistr8ZaZLa5AkMJvk 3c3NY0cDZrULNa8lo9Gf4mY+es2Wv1ywoOcj8Ebkve7NApqqphrKtR55aVudeg5v U9wzx4h7Er74UqAK1peOns/kQbfZNDvb5ch+0457y3UGiMFSwvKh79XrWILHvTov 13WRqHYH6mcY2nkOlVrbPgPVoOx7aiG0CU6Ei5UjbrbJsHb+pEVW1gGsqqEYLmAc Pgeo0oXnQQ/w7zD26VDCidNYtV6ICSYbewpRvmKlB1opyP69uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFttX1kZHSifrWKxAy7On+Cz3B5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2NiOGU1NDgtNjk2ZC0z NTE4LWIzZmUtNGUxZGYyMTAxYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJCCKcJsT+lku4Zy0w93lUFZ2x+sOzVwJdlT6IlvOrVvf26iJuJAkaH r3w9LeL+6vjvn+luG93CkwSlbdEuFQiu3HAi0FHYpj/9EvYrnF131dcGCeV4sUVD 61ebpRcKwXoatbUJspRAwNnwmbXBM+4MDinITnpaD5T+eIe2chQ0/bb4GwskMTKK 0PhZp7P05zEzM2v+FSXxk/bMGaQAxtRYVLIL0UDpSYGsCPUmr/Yg1EBNLB33pvkF 8HfsdcpxM1kvvNwoNLAEXMdPfXjf2ctPBph8Pz32yfllcAroNPiFxVh9FYBFuhjy qP1DaKpQKDo2l92nap/Jzy/Z+a1+WnA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:24:31 2026 by rpki-client