$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa File: 5af3f919-f57e-33a2-9b2b-392746a4669f.roa (raw, json) Hash identifier: eATZWFLJj8t0FDqr/uFoGp+9GOdTQxAgH+/t1i2ebI8= Subject key identifier: D2:50:A0:99:CC:85:72:EC:CC:98:D5:B0:A4:86:FB:5D:45:6D:DC:7F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD0F4779E7FE65C981580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 130.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d0:f4:77:9e:7f:e6:5c:98:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=605915a1-dfb7-413c-9a83-62b98aa21301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:fc:ba:d1:3b:20:d6:83:81:ef:e8:4b:e2: f5:c6:05:a0:12:51:89:0e:00:42:a0:8d:c4:94:a6: 1b:52:ac:af:c0:9a:7d:74:ca:3c:d7:c5:3f:e3:7c: 75:a8:7f:3c:54:f0:d3:24:f2:99:17:ca:06:8d:5f: 87:44:53:ba:c0:b7:61:79:0d:ef:21:41:69:20:6f: 9a:be:4b:31:dc:93:c7:81:e8:09:96:96:42:e8:8f: 26:4d:57:1d:ff:6d:74:9d:dd:4a:b8:94:00:33:cd: e5:8f:77:fb:24:3c:d8:a2:41:f0:dc:13:72:bb:05: 03:bf:4a:b9:21:78:fe:41:8b:9b:99:62:55:f4:e1: 89:af:0b:b1:7e:b6:76:f4:1a:92:26:21:49:99:2d: ba:a7:6f:e7:e0:84:ef:66:82:13:b4:ef:97:fc:d9: f1:49:e5:a0:94:7a:2b:d9:2f:6a:e2:5e:87:40:d2: c2:4d:d3:11:b1:50:16:5a:d6:53:c5:dd:3b:23:72: 6d:da:1c:90:5f:77:80:2a:07:67:2f:8c:38:3f:48: f8:eb:fd:7a:ef:a4:c9:b6:cc:c2:55:19:73:c2:aa: 20:9c:68:4f:20:4d:dc:5f:58:37:70:15:8e:c2:59: 09:2c:50:48:0d:42:d0:de:aa:8f:f2:db:f1:16:12: 5e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:A0:99:CC:85:72:EC:CC:98:D5:B0:A4:86:FB:5D:45:6D:DC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0c:16:49:e8:3f:f6:e8:e8:28:61:01:a4:d9:82:2c:f5:38: 4d:3b:64:02:3f:69:da:1c:86:66:05:4f:cc:82:c5:d7:c7:47: 64:fd:fe:66:50:6f:3a:b6:0b:ec:79:b7:ac:88:57:11:85:47: 4b:5a:1d:dc:7f:2d:42:45:f1:6b:8b:cf:04:08:10:47:3b:34: f8:96:d6:ca:97:5e:d8:d0:5e:31:1f:5d:c2:a9:c6:48:92:a3: bb:b3:71:c9:ba:02:a3:eb:6d:5c:fe:44:28:62:57:d9:55:05: 48:d1:77:94:43:1c:f1:72:24:be:86:44:ae:89:ca:36:6f:43: 65:35:36:14:1a:4a:ea:9b:f2:6c:c3:e2:ed:98:83:e6:8f:9a: 58:76:70:0f:8f:dc:14:26:90:4e:1b:91:bc:3d:c4:09:f8:38: 80:42:ca:f2:3b:67:f6:0d:f7:55:00:a6:52:c5:8e:64:b6:3d: dd:f1:39:1e:bb:b9:85:55:ad:8a:80:aa:95:e6:a6:1f:54:cb: 8c:d5:e7:7e:0b:3e:cb:78:26:99:a3:63:81:5c:65:b6:16:cb: 52:cb:e7:5d:31:c5:fa:92:8f:51:ee:21:2a:2f:eb:6d:93:a2: 03:1b:de:c1:d4:66:70:5d:b0:33:bb:dc:32:be:c3:2d:02:68: c9:81:d3:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9D0d55/5lyYFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NjA1OTE1YTEtZGZiNy00MTNjLTlhODMtNjJiOThhYTIxMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv/8utE7INaDge/oS+L1xgWgElGJDgBCoI3E lKYbUqyvwJp9dMo818U/43x1qH88VPDTJPKZF8oGjV+HRFO6wLdheQ3vIUFpIG+a vksx3JPHgegJlpZC6I8mTVcd/210nd1KuJQAM83lj3f7JDzYokHw3BNyuwUDv0q5 IXj+QYubmWJV9OGJrwuxfrZ29BqSJiFJmS26p2/n4ITvZoITtO+X/NnxSeWglHor 2S9q4l6HQNLCTdMRsVAWWtZTxd07I3Jt2hyQX3eAKgdnL4w4P0j46/1676TJtszC VRlzwqognGhPIE3cX1g3cBWOwlkJLFBIDULQ3qqP8tvxFhJezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJQoJnMhXLszJjVsKSG+11Fbdx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWFmM2Y5MTktZjU3ZS0z M2EyLTliMmItMzkyNzQ2YTQ2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUMFknoP/bo6ChhAaTZgiz1OE07ZAI/adochmYFT8yCxdfHR2T9/mZQ bzq2C+x5t6yIVxGFR0taHdx/LUJF8WuLzwQIEEc7NPiW1sqXXtjQXjEfXcKpxkiS o7uzccm6AqPrbVz+RChiV9lVBUjRd5RDHPFyJL6GRK6JyjZvQ2U1NhQaSuqb8mzD 4u2Yg+aPmlh2cA+P3BQmkE4bkbw9xAn4OIBCyvI7Z/YN91UAplLFjmS2Pd3xOR67 uYVVrYqAqpXmph9Uy4zV534LPst4JpmjY4FcZbYWy1LL510xxfqSj1HuISov622T ogMb3sHUZnBdsDO73DK+wy0CaMmB0zU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:05 2026 by rpki-client