$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa File: 5d25b70a-e567-368f-a19d-98f652cf6c50.roa (raw, json) Hash identifier: 9C+9CLTA05GI7rqAmn3li2V0eEXl1On2/QjGPV/MJio= Subject key identifier: C9:9A:C9:26:B7:02:8C:C1:57:0F:B6:D2:F3:09:45:19:3B:3F:AC:20 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF71769B31B681F98D10835A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3360 IP address blocks: 130.174.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:69:b3:1b:68:1f:98:d1:08:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=fcbf44b4-898e-4c70-89a0-6a53e23935f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:c0:c2:f3:fa:c0:2d:74:38:44:a7:4b:8d: ff:6e:1d:83:a4:72:8f:b8:cb:50:83:bf:1a:23:aa: e8:45:e2:97:0d:87:20:53:93:98:22:0d:95:db:86: 7f:05:00:a4:47:c4:dd:e6:47:d6:6c:ff:62:73:e6: 4b:90:1b:e5:51:56:59:c6:72:b6:0d:2e:54:64:1c: 7a:e5:66:39:7a:c0:14:0a:6f:35:d3:74:59:91:ce: 9e:c9:5c:6f:c9:cf:18:89:7d:b3:db:16:a4:05:8d: ab:2a:9a:ed:dc:62:5e:6a:17:c5:f9:59:e6:b9:9e: 58:ee:7d:3f:94:67:27:e1:88:02:9f:cd:b5:ce:a3: be:bc:3f:2e:16:fc:59:49:cd:85:9a:a5:b7:f3:d5: 0b:ce:b3:45:77:53:e9:f2:88:e9:75:26:cb:69:dc: df:93:c3:b1:46:3a:41:1d:4a:58:b8:c4:c4:fb:a2: c1:c9:cb:c3:31:89:b7:48:de:fb:c0:c1:d7:2d:0d: 88:e0:1a:d7:9b:58:56:2e:c4:5c:85:16:48:88:40: 6e:91:18:db:7a:8e:de:0e:ae:a0:c8:5a:eb:18:5f: 73:34:be:c2:7a:ce:93:bc:25:7d:14:5d:94:df:66: 31:9d:f1:67:22:e4:7d:2c:f1:5c:32:44:7a:b0:2a: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9A:C9:26:B7:02:8C:C1:57:0F:B6:D2:F3:09:45:19:3B:3F:AC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d25b70a-e567-368f-a19d-98f652cf6c50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:92:40:e7:4b:e6:a9:c2:6a:74:9e:e1:27:8a:33:57:6a:12: 90:82:e0:53:c8:28:d7:7a:2a:26:b6:56:f8:fd:1b:b0:27:63: f0:a2:20:35:d1:32:26:1e:80:bb:02:fe:1b:91:20:17:41:50: 39:00:a9:b4:58:7f:f2:2e:4c:b5:e0:13:45:e3:72:62:d6:9a: f4:7a:91:e5:9b:15:7a:47:cf:ed:0b:8d:6a:f2:9f:9b:fe:5e: ac:07:fe:30:30:c2:cf:5c:ac:c3:6d:d2:29:0f:4c:ab:c8:eb: f3:93:e2:57:9b:39:2f:da:c7:7e:95:44:28:b3:6c:20:a2:0b: 93:f3:0e:bb:75:5b:b0:44:c6:2c:0f:a6:19:fa:ae:d7:f1:82: 19:d4:c0:92:cd:dc:70:b4:c0:a8:18:37:be:88:65:94:06:be: 81:18:04:23:6e:7a:2a:ec:37:a4:42:8d:8d:f2:29:55:69:dd: 5a:2c:9b:17:a4:8a:b9:bd:2b:f3:a6:03:3b:14:ba:97:da:f8: ec:53:16:82:1e:54:6c:49:b2:97:7d:41:78:71:1b:4c:b1:13: 30:8b:be:68:2e:28:ba:6f:29:a1:41:f1:a1:53:20:f9:af:be: ea:b6:63:5a:65:a2:e7:51:20:09:53:af:13:30:fd:93:a9:c2: 14:cc:7c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2mzG2gfmNEINaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmNiZjQ0YjQtODk4ZS00YzcwLTg5YTAtNmE1M2UyMzkzNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSHAwvP6wC10OESnS43/bh2DpHKPuMtQg78a I6roReKXDYcgU5OYIg2V24Z/BQCkR8Td5kfWbP9ic+ZLkBvlUVZZxnK2DS5UZBx6 5WY5esAUCm8103RZkc6eyVxvyc8YiX2z2xakBY2rKprt3GJeahfF+VnmuZ5Y7n0/ lGcn4YgCn821zqO+vD8uFvxZSc2FmqW389ULzrNFd1Pp8ojpdSbLadzfk8OxRjpB HUpYuMTE+6LBycvDMYm3SN77wMHXLQ2I4BrXm1hWLsRchRZIiEBukRjbeo7eDq6g yFrrGF9zNL7Ces6TvCV9FF2U32YxnfFnIuR9LPFcMkR6sCo+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmaySa3AozBVw+20vMJRRk7P6wgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWQyNWI3MGEtZTU2Ny0z NjhmLWExOWQtOThmNjUyY2Y2YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6SQOdL5qnCanSe4SeKM1dqEpCC4FPIKNd6Kia2Vvj9G7AnY/CiIDXR MiYegLsC/huRIBdBUDkAqbRYf/IuTLXgE0XjcmLWmvR6keWbFXpHz+0LjWryn5v+ XqwH/jAwws9crMNt0ikPTKvI6/OT4lebOS/ax36VRCizbCCiC5PzDrt1W7BExiwP phn6rtfxghnUwJLN3HC0wKgYN76IZZQGvoEYBCNueirsN6RCjY3yKVVp3Vosmxek irm9K/OmAzsUupfa+OxTFoIeVGxJspd9QXhxG0yxEzCLvmguKLpvKaFB8aFTIPmv vuq2Y1ploudRIAlTrxMw/ZOpwhTMfKY= -----END CERTIFICATE-----Generated at Sun Sep 20 17:33:15 2026 by rpki-client