$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/661c8d04-363f-3570-a954-980a5f777fb3.roa File: 661c8d04-363f-3570-a954-980a5f777fb3.roa (raw, json) Hash identifier: TlHrPMl/w3NVVPT+52hMufxYpR7ae3JteC+jK19xDgc= Subject key identifier: F2:71:CE:76:ED:68:18:EF:FA:4A:57:74:25:36:0B:40:5B:57:46:32 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7CDC72D0F7783718C3530 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/661c8d04-363f-3570-a954-980a5f777fb3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 130.174.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cd:c7:2d:0f:77:83:71:8c:35:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=50fe7cff-56f3-41b1-a70a-0caf2abc9e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:8b:93:8c:54:86:78:e6:93:82:cd:c9:09: d6:14:8e:49:63:fc:6f:80:47:f0:9b:45:ae:0b:60: 80:c6:3a:2f:6a:cd:87:14:09:2d:2e:62:e6:21:dd: c4:ed:15:da:b4:30:f2:52:44:17:71:37:1b:c3:96: b6:f9:36:28:31:bd:8c:cc:5d:b9:3f:14:12:3b:14: 38:a1:23:02:e3:50:81:71:9e:de:76:e8:10:50:6e: af:1f:fb:36:9e:60:21:3a:ed:af:ef:54:77:ad:0a: 09:82:88:67:db:be:f8:77:dd:81:34:11:e2:a8:3b: a5:12:08:9d:f1:b5:e9:6f:d4:97:56:c1:f4:59:bf: ca:c6:f7:07:5a:a9:57:d8:02:57:40:ff:1e:61:bd: df:c0:b7:f5:12:b8:20:25:12:24:d6:6c:90:1e:e5: e9:da:6d:b2:48:45:68:41:69:0c:0e:f0:cd:42:b8: f0:b2:49:02:03:e4:86:d0:9b:68:1b:74:fc:dc:44: 37:8e:b9:cc:d4:21:93:cb:90:c1:6a:aa:79:bf:e4: cb:e4:74:67:80:ee:8c:27:fe:a1:23:f7:96:ba:ed: d8:3a:87:2b:2a:fd:23:0a:35:c9:c7:e9:d4:fc:ca: 00:4f:bd:cf:82:04:63:23:72:2d:9e:5f:93:fc:92: 4b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:71:CE:76:ED:68:18:EF:FA:4A:57:74:25:36:0B:40:5B:57:46:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/661c8d04-363f-3570-a954-980a5f777fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:42:a7:e4:b3:cc:ac:d4:c4:69:c7:e4:5a:4a:db:68:0b:b4: bf:7b:39:da:24:03:db:13:d7:ce:22:ec:7a:7d:c2:97:8d:bc: a6:9f:ca:27:69:e2:00:27:d0:70:da:43:58:5c:b8:da:a5:c8: 91:03:de:36:f5:8e:73:9d:4e:b6:8d:23:fd:05:79:51:cc:ea: 6e:74:aa:74:d2:76:c9:f7:35:5b:6c:b0:9b:1b:fe:9b:01:8d: 41:0c:49:ef:4b:72:39:b0:cb:14:92:73:4f:31:d0:e8:4d:6b: 8c:19:4e:51:82:02:7f:4c:c7:f6:0f:e7:fd:8a:85:30:6a:17: a5:cf:aa:52:ea:d4:d8:76:d3:e0:54:1e:23:9e:b7:c2:d5:03: 9d:4d:6c:a9:8a:cd:c5:fc:99:4b:56:7c:b6:cc:d3:9b:b1:9d: 71:ad:ff:16:a6:de:25:99:95:da:8b:85:84:ee:4e:91:23:8e: b6:20:42:fd:0c:8d:a2:29:35:b6:68:20:7d:03:7d:7a:9b:91: e7:e1:7e:8a:9e:d8:60:2f:e5:e6:7f:eb:10:1f:93:4b:20:84: c7:57:67:7b:82:b0:c1:ad:f2:9f:1c:ff:84:c6:94:11:9a:1c: a4:90:c7:89:c4:9f:cc:2f:6f:a7:37:e0:dd:7b:d9:9f:0c:10: 27:fa:b0:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy983HLQ93g3GMNTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTBmZTdjZmYtNTZmMy00MWIxLWE3MGEtMGNhZjJhYmM5ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza6Lk4xUhnjmk4LNyQnWFI5JY/xvgEfwm0Wu C2CAxjovas2HFAktLmLmId3E7RXatDDyUkQXcTcbw5a2+TYoMb2MzF25PxQSOxQ4 oSMC41CBcZ7edugQUG6vH/s2nmAhOu2v71R3rQoJgohn2774d92BNBHiqDulEgid 8bXpb9SXVsH0Wb/KxvcHWqlX2AJXQP8eYb3fwLf1ErggJRIk1myQHuXp2m2ySEVo QWkMDvDNQrjwskkCA+SG0JtoG3T83EQ3jrnM1CGTy5DBaqp5v+TL5HRngO6MJ/6h I/eWuu3YOocrKv0jCjXJx+nU/MoAT73PggRjI3Itnl+T/JJLFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJxznbtaBjv+kpXdCU2C0BbV0YyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjYxYzhkMDQtMzYzZi0z NTcwLWE5NTQtOTgwYTVmNzc3ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJCp+SzzKzUxGnH5FpK22gLtL97OdokA9sT184i7Hp9wpeNvKafyidp 4gAn0HDaQ1hcuNqlyJED3jb1jnOdTraNI/0FeVHM6m50qnTSdsn3NVtssJsb/psB jUEMSe9LcjmwyxSSc08x0OhNa4wZTlGCAn9Mx/YP5/2KhTBqF6XPqlLq1Nh20+BU HiOet8LVA51NbKmKzcX8mUtWfLbM05uxnXGt/xam3iWZldqLhYTuTpEjjrYgQv0M jaIpNbZoIH0DfXqbkefhfoqe2GAv5eZ/6xAfk0sghMdXZ3uCsMGt8p8c/4TGlBGa HKSQx4nEn8wvb6c34N172Z8MECf6sCs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:47 2025 by rpki-client