$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa File: 665189d6-ce51-375d-9fcd-5cdadec449ec.roa (raw, json) Hash identifier: 78k5Nh6CY+vybrwpKsxagGWySE1rwWQsdWrJzat2utM= Subject key identifier: 06:3B:1C:28:26:78:02:11:54:0B:9C:6E:16:D5:06:8A:3E:2D:A2:4F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF71770D45ADD63D820B5C2B8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 130.174.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:70:d4:5a:dd:63:d8:20:b5:c2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=e205008c-2761-42e0-8374-0f511ee01845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:6f:fe:48:22:0c:b4:cb:47:5c:b4:fd:03: 68:ab:ff:86:2c:bd:49:34:68:bd:fd:91:6e:39:69: aa:d2:7f:8d:40:3f:78:c0:2a:ed:5c:73:b7:74:c8: 89:3e:51:fd:d1:1f:35:f4:7b:34:e8:07:29:c8:55: ac:d1:72:d3:90:b0:c1:87:6d:1d:01:04:31:61:39: fe:ba:da:6f:34:3c:65:b0:06:ac:d5:30:1e:0c:ed: 68:54:94:b8:95:01:6f:14:08:7a:d7:99:8c:93:5c: 9a:5c:54:90:68:5b:50:8d:a8:48:2f:d8:f3:49:f4: 98:20:e7:7e:a7:02:4b:8c:1e:c7:48:36:09:27:e5: f8:76:b3:80:7c:64:c8:82:a1:c3:10:54:66:dd:bf: 89:4b:a8:00:4e:0a:ac:92:60:a8:30:66:fb:fe:b4: ce:89:41:be:93:04:e1:da:e8:6f:50:05:bf:2b:ad: 5e:1d:c9:bd:7d:62:12:01:ec:59:a8:3c:15:18:30: 86:65:bf:89:0d:c7:96:e8:17:b3:7d:3c:0d:69:bb: 51:e5:f3:81:8e:9b:c1:23:f7:69:8a:e8:1e:d7:6b: d9:87:fa:32:0c:8e:8f:33:c2:85:38:c6:e4:9c:1e: c3:7b:3d:48:c3:05:8d:13:21:3f:73:23:a1:e5:da: 24:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:1C:28:26:78:02:11:54:0B:9C:6E:16:D5:06:8A:3E:2D:A2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/665189d6-ce51-375d-9fcd-5cdadec449ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:54:64:98:c8:f9:3c:66:9a:33:cb:d5:b1:69:39:a1:e7:26: 5a:34:5d:11:fc:7a:00:f2:b7:cd:9a:54:05:4d:a6:5c:c0:aa: b6:70:2f:07:41:d4:66:ea:96:bc:3b:85:89:ef:e9:18:ef:91: 98:90:a8:ce:44:b4:a1:58:34:bd:b9:68:50:5f:2d:f1:38:f1: 39:22:84:6e:f3:9e:13:ae:58:8f:c0:4e:f0:59:9f:e4:14:1d: ba:98:fc:5b:bf:0c:dd:e3:d8:67:5e:66:c4:4c:63:fd:79:75: 76:39:cf:72:31:05:aa:0c:62:cd:ed:d2:82:6c:45:4f:84:e8: fb:e4:de:1b:34:5f:b3:b0:ff:af:7e:c3:9b:33:84:23:25:86: 6a:bf:dd:4d:e1:fc:74:ae:9c:3b:1d:49:ff:50:59:d4:ba:4d: b6:ef:cd:4a:3f:56:3d:d2:2f:5a:3c:76:67:cd:cd:c1:e7:23: 83:97:b3:1c:61:9d:a0:98:f2:f7:02:60:61:6e:cd:89:41:76: 00:8b:5f:80:96:af:39:5b:d7:a1:8d:65:0b:24:11:1e:cb:a9: 92:54:e9:49:ec:56:14:b0:4b:11:0e:51:2b:51:d0:88:1c:3b: 6b:9c:71:4c:e5:67:50:54:03:f7:36:fe:4d:46:91:90:4f:31: 12:e0:6c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3DUWt1j2CC1wrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTIwNTAwOGMtMjc2MS00MmUwLTgzNzQtMGY1MTFlZTAxODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1v/kgiDLTLR1y0/QNoq/+GLL1JNGi9/ZFu OWmq0n+NQD94wCrtXHO3dMiJPlH90R819Hs06AcpyFWs0XLTkLDBh20dAQQxYTn+ utpvNDxlsAas1TAeDO1oVJS4lQFvFAh615mMk1yaXFSQaFtQjahIL9jzSfSYIOd+ pwJLjB7HSDYJJ+X4drOAfGTIgqHDEFRm3b+JS6gATgqskmCoMGb7/rTOiUG+kwTh 2uhvUAW/K61eHcm9fWISAexZqDwVGDCGZb+JDceW6BezfTwNabtR5fOBjpvBI/dp iuge12vZh/oyDI6PM8KFOMbknB7Dez1IwwWNEyE/cyOh5dokMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY7HCgmeAIRVAucbhbVBoo+LaJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjY1MTg5ZDYtY2U1MS0z NzVkLTlmY2QtNWNkYWRlYzQ0OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhUZJjI+TxmmjPL1bFpOaHnJlo0XRH8egDyt82aVAVNplzAqrZwLwdB 1Gbqlrw7hYnv6RjvkZiQqM5EtKFYNL25aFBfLfE48TkihG7znhOuWI/ATvBZn+QU HbqY/Fu/DN3j2GdeZsRMY/15dXY5z3IxBaoMYs3t0oJsRU+E6Pvk3hs0X7Ow/69+ w5szhCMlhmq/3U3h/HSunDsdSf9QWdS6TbbvzUo/Vj3SL1o8dmfNzcHnI4OXsxxh naCY8vcCYGFuzYlBdgCLX4CWrzlb16GNZQskER7LqZJU6UnsVhSwSxEOUStR0Igc O2uccUzlZ1BUA/c2/k1GkZBPMRLgbF8= -----END CERTIFICATE-----Generated at Sun Sep 20 19:14:12 2026 by rpki-client