$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa File: 8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa (raw, json) Hash identifier: 1IWbF3ETHP71rUvCcDa6K02kJgjvuzPcPpqbbKTsvtE= Subject key identifier: 3B:71:AC:FC:25:09:31:77:69:E4:9B:FF:E8:75:BC:C7:D1:DE:14:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7CAD26EE7C2447AF8C880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3356 IP address blocks: 130.174.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ca:d2:6e:e7:c2:44:7a:f8:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=7de7e591-0c62-446b-b385-064a07010e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:b9:23:ff:4a:3a:5f:2c:e0:16:59:82:00: ba:2c:1d:cb:eb:49:f7:6f:72:f5:08:b8:ac:b9:c3: ba:3e:13:3e:99:ff:a1:dc:9d:c8:da:58:83:09:95: 24:bc:22:f2:eb:c0:dd:af:00:0c:ac:4d:20:1b:0f: ca:ce:52:5c:58:ad:d1:9c:54:8a:e2:cb:6c:93:46: 8d:70:a9:53:ba:1b:76:dc:44:76:a2:c0:07:7f:a9: 0e:ce:04:1d:c9:66:f6:a5:47:76:7f:57:12:05:62: 21:f2:2f:f3:1e:b2:3d:fc:60:19:6a:13:79:53:06: 3f:e6:b3:4d:81:d0:2e:32:85:a7:65:ed:fe:8f:66: 72:34:d0:53:a1:cc:b2:a4:38:36:9b:9b:62:07:d3: 71:07:3d:50:ad:aa:b8:9f:4b:e4:46:cb:c9:d9:17: 00:b0:d7:c2:da:c7:4e:df:2b:d4:c9:d5:ea:49:41: fb:20:85:31:05:e0:b0:9d:7e:32:9a:57:25:03:55: d3:19:41:8a:50:1d:63:70:a3:9d:9c:8f:b7:98:f9: ad:b9:bc:e5:23:3d:ee:9e:e9:de:66:4a:b8:2a:1e: 08:69:8a:95:88:56:21:ae:d9:22:55:d6:e7:2d:03: 54:fa:92:e4:54:16:69:d8:2d:d0:66:a0:fc:8d:4a: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:71:AC:FC:25:09:31:77:69:E4:9B:FF:E8:75:BC:C7:D1:DE:14:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a5dbaa8-d4dd-34a5-9374-0fd3d904081e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:42:9c:08:80:7d:e1:be:4d:72:03:2c:b8:1a:7d:26:bb:14: 8c:2d:6d:ed:48:6a:e5:24:76:bb:11:80:2d:28:b1:18:00:54: f3:8b:a5:fc:36:02:69:27:5a:7d:8c:d4:f2:f5:7e:b6:e4:86: c4:b3:eb:ac:44:00:db:27:ea:4e:d6:c1:d9:46:4c:ef:f5:e6: a2:be:05:61:f7:e5:4c:7f:6a:d1:51:61:38:b1:0f:1a:51:97: 39:76:00:87:94:02:c5:52:96:e6:c5:c5:91:b4:0f:66:ec:ce: a4:a7:fd:18:02:d8:b9:f0:3c:dc:fe:3b:08:48:5f:90:87:7e: c6:97:4b:11:e3:f3:25:4c:d5:7a:b1:22:fb:46:fb:94:93:14: 5a:92:d3:c1:f7:5d:e7:6f:bb:dd:58:d7:dd:1b:98:6c:84:98: fa:a3:a5:6d:1b:0f:42:c9:93:ac:45:49:4a:60:13:24:25:06: c1:22:e3:65:7a:28:8b:1e:4c:2b:cf:f0:f1:b4:18:04:2b:a5: f3:1d:98:03:0d:89:af:15:b5:b8:55:84:22:2d:bd:b9:e0:73: 5b:fa:e8:de:d8:35:87:80:b0:f7:33:ea:dc:5f:60:f3:c5:69: 0d:39:ea:fe:b9:a4:ac:0e:07:3c:3f:b9:52:5f:73:d1:dd:b3: 0c:95:86:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98rSbufCRHr4yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk N2RlN2U1OTEtMGM2Mi00NDZiLWIzODUtMDY0YTA3MDEwZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtS5I/9KOl8s4BZZggC6LB3L60n3b3L1CLis ucO6PhM+mf+h3J3I2liDCZUkvCLy68DdrwAMrE0gGw/KzlJcWK3RnFSK4stsk0aN cKlTuht23ER2osAHf6kOzgQdyWb2pUd2f1cSBWIh8i/zHrI9/GAZahN5UwY/5rNN gdAuMoWnZe3+j2ZyNNBTocyypDg2m5tiB9NxBz1Qraq4n0vkRsvJ2RcAsNfC2sdO 3yvUydXqSUH7IIUxBeCwnX4ymlclA1XTGUGKUB1jcKOdnI+3mPmtubzlIz3unune Zkq4Kh4IaYqViFYhrtkiVdbnLQNU+pLkVBZp2C3QZqD8jUpSAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtxrPwlCTF3aeSb/+h1vMfR3hTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE1ZGJhYTgtZDRkZC0z NGE1LTkzNzQtMGZkM2Q5MDQwODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNCnAiAfeG+TXIDLLgafSa7FIwtbe1IauUkdrsRgC0osRgAVPOLpfw2 AmknWn2M1PL1frbkhsSz66xEANsn6k7WwdlGTO/15qK+BWH35Ux/atFRYTixDxpR lzl2AIeUAsVSlubFxZG0D2bszqSn/RgC2LnwPNz+OwhIX5CHfsaXSxHj8yVM1Xqx IvtG+5STFFqS08H3Xedvu91Y190bmGyEmPqjpW0bD0LJk6xFSUpgEyQlBsEi42V6 KIseTCvP8PG0GAQrpfMdmAMNia8VtbhVhCItvbngc1v66N7YNYeAsPcz6txfYPPF aQ056v65pKwOBzw/uVJfc9HdswyVhjI= -----END CERTIFICATE-----Generated at Wed Nov 5 00:44:23 2025 by rpki-client