$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42b371d1-d036-3292-9ef4-c8dba6c7abd1.roa File: 42b371d1-d036-3292-9ef4-c8dba6c7abd1.roa (raw, json) Hash identifier: lX0qigMDfmej3hjaXuhGIuSckiIfYxtCzcNu9QksVUU= Subject key identifier: 36:BD:99:88:37:BF:13:60:90:22:97:D5:B2:33:F1:58:2C:6C:EA:70 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C7E1749F3CA59B099280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42b371d1-d036-3292-9ef4-c8dba6c7abd1.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c7:e1:74:9f:3c:a5:9b:09:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=04e5d708-fac2-4314-bde1-102d0869cd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:75:fb:e0:38:bb:51:31:5a:3b:ba:46:ef: f3:04:ac:b5:bd:31:c0:4a:a6:7e:5c:64:98:46:95: ac:e5:24:e5:bc:e9:b7:f4:bc:27:3b:1c:9c:02:79: 0a:4c:8c:91:21:a1:59:85:26:53:b7:96:6c:1b:d8: 5c:23:c6:bc:83:cd:74:96:76:76:49:74:6e:d9:c9: 5f:bd:b6:4f:73:50:7a:74:a6:d4:8d:e5:1d:f3:32: 71:15:93:ed:0b:01:d3:16:e7:ed:17:85:9f:b7:37: 61:e5:c3:01:69:03:b8:86:7a:b1:e9:55:2d:7d:c7: 90:47:a0:e1:c3:06:e8:a8:4f:7a:ce:2e:f2:de:b6: b7:83:bc:3e:ab:9b:c2:e5:16:62:d2:80:0c:09:c0: 81:48:89:ff:f7:7b:21:8b:4a:08:9d:95:6e:69:b8: 67:c2:b4:68:d3:d9:69:4b:1e:3a:16:45:85:4a:b6: 09:a4:8e:3d:46:ee:71:ac:66:82:e2:59:ac:3d:34: e5:ea:34:66:1a:4e:0a:91:91:d2:df:75:cd:9b:c6: c8:79:a4:d0:68:79:fd:63:3f:8d:0b:5c:82:9d:8a: 84:14:eb:99:84:f5:56:28:98:3c:54:9f:43:3e:bd: f3:bb:06:0f:a0:c5:64:08:5e:92:cb:81:8f:31:7f: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BD:99:88:37:BF:13:60:90:22:97:D5:B2:33:F1:58:2C:6C:EA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42b371d1-d036-3292-9ef4-c8dba6c7abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f3:a9:eb:ab:76:d5:e3:ef:e8:c4:2d:14:d8:e5:7e:09:af: e5:3b:b2:b6:c4:4c:64:e6:20:91:41:bf:ba:4f:05:8a:83:49: 18:c6:fa:67:47:f5:60:27:67:ab:bc:7c:80:a5:e0:56:cd:7a: 39:c2:9a:66:4d:5d:6a:e3:8b:7b:fa:7a:52:6c:0a:5c:20:44: a7:a3:ed:69:82:28:3f:fb:75:8a:23:1d:04:93:ff:bb:5f:d0: 59:87:ba:b7:9f:08:15:5b:1f:bf:54:d7:a1:6b:7d:43:ca:aa: 9f:3a:fd:e3:f4:cf:89:f0:4e:d4:f4:2a:cd:9d:6e:4c:b4:93: b5:cf:90:91:d0:cb:63:df:ad:b5:eb:66:e4:6f:1c:2f:94:18: 52:63:e9:7e:bd:07:34:a0:72:d7:52:95:de:01:bc:33:f2:9a: 73:a1:c0:db:48:4a:74:81:b4:1d:44:8e:34:c3:02:97:37:5e: 7a:52:cf:25:06:48:58:e7:e8:65:eb:dd:22:ec:ca:3b:f1:d9: 50:60:02:2e:d4:0c:c8:a4:2c:e8:29:f5:42:90:a8:6f:06:39: 38:e8:15:12:ef:c8:2c:1c:ed:7b:41:1c:58:8c:96:bf:69:25: cd:cb:fe:2e:9e:df:b3:15:2b:d4:9d:58:c7:86:f4:85:4c:27: cd:16:f3:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98fhdJ88pZsJkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MDRlNWQ3MDgtZmFjMi00MzE0LWJkZTEtMTAyZDA4NjljZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0h1++A4u1ExWju6Ru/zBKy1vTHASqZ+XGSY RpWs5STlvOm39LwnOxycAnkKTIyRIaFZhSZTt5ZsG9hcI8a8g810lnZ2SXRu2clf vbZPc1B6dKbUjeUd8zJxFZPtCwHTFuftF4Wftzdh5cMBaQO4hnqx6VUtfceQR6Dh wwboqE96zi7y3ra3g7w+q5vC5RZi0oAMCcCBSIn/93shi0oInZVuabhnwrRo09lp Sx46FkWFSrYJpI49Ru5xrGaC4lmsPTTl6jRmGk4KkZHS33XNm8bIeaTQaHn9Yz+N C1yCnYqEFOuZhPVWKJg8VJ9DPr3zuwYPoMVkCF6Sy4GPMX+pswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDa9mYg3vxNgkCKX1bIz8VgsbOpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDJiMzcxZDEtZDAzNi0z MjkyLTllZjQtYzhkYmE2YzdhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHzqeurdtXj7+jELRTY5X4Jr+U7srbETGTmIJFBv7pPBYqDSRjG+mdH 9WAnZ6u8fICl4FbNejnCmmZNXWrji3v6elJsClwgRKej7WmCKD/7dYojHQST/7tf 0FmHurefCBVbH79U16FrfUPKqp86/eP0z4nwTtT0Ks2dbky0k7XPkJHQy2PfrbXr ZuRvHC+UGFJj6X69BzSgctdSld4BvDPymnOhwNtISnSBtB1EjjTDApc3XnpSzyUG SFjn6GXr3SLsyjvx2VBgAi7UDMikLOgp9UKQqG8GOTjoFRLvyCwc7XtBHFiMlr9p Jc3L/i6e37MVK9SdWMeG9IVMJ80W8yI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:47 2025 by rpki-client