$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9fe5b9-c79c-3420-885c-793bba793e20.roa File: 8a9fe5b9-c79c-3420-885c-793bba793e20.roa (raw, json) Hash identifier: 9wAgGgtvYNmvk3FHcZSOKtpfq26Z/LKTRY3vzFL4H/s= Subject key identifier: 31:AF:64:81:FD:1C:80:EC:4D:44:D7:96:46:C9:53:C6:B5:1B:3C:BA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CC876D71872C83CC29480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9fe5b9-c79c-3420-885c-793bba793e20.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 202 IP address blocks: 130.174.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c8:76:d7:18:72:c8:3c:c2:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=520391d5-daa7-4028-b102-f535a893f41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:a3:c1:96:86:19:ec:e6:ab:27:a6:80:74: 62:05:c9:e5:70:eb:a2:eb:8f:5b:6e:bb:0e:2a:a1: 19:52:84:45:af:03:b6:d5:bf:61:26:92:e8:66:cc: 90:78:7a:5c:f0:67:b8:66:ef:e3:ee:a4:7c:0d:73: be:f1:63:9c:22:39:d0:49:de:9d:60:f9:c5:32:bc: 3b:87:3d:9e:41:8b:0c:55:d7:13:02:53:04:21:ef: 9f:0a:b4:3c:d7:18:dd:a3:95:91:32:65:2d:36:e6: 65:e5:83:4d:1b:ad:c3:97:7e:5c:a4:a1:11:07:b6: 80:bc:63:c6:e5:fe:80:b7:c4:cb:ce:93:9b:c5:26: 51:f9:af:e6:9d:4a:5d:03:03:ac:5b:45:58:68:76: 42:24:4c:16:51:c3:45:77:05:f5:10:63:78:91:1f: 9d:fe:40:e9:ec:f0:19:83:0c:03:39:71:9b:e5:b3: 57:66:1c:24:c3:52:15:78:d5:df:45:fc:ef:f3:e1: 08:d6:af:a1:c3:b4:9e:15:01:fd:a9:f5:9b:f6:90: 01:59:75:08:d5:bc:cb:0a:8e:29:02:06:2a:b1:bd: d0:00:0b:18:7c:94:2b:b8:c0:51:b0:6e:a9:5b:8b: bd:be:16:5c:0b:2b:ea:f5:16:11:06:cb:25:f3:17: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AF:64:81:FD:1C:80:EC:4D:44:D7:96:46:C9:53:C6:B5:1B:3C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8a9fe5b9-c79c-3420-885c-793bba793e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7f:df:c2:52:b4:d9:b3:50:66:56:36:7e:da:47:31:71:eb: 34:c1:4f:7d:58:c2:d6:1d:f9:a4:1a:4d:01:7a:f0:93:22:df: ff:f9:1c:fa:eb:11:39:a8:12:e8:b2:03:33:4c:b7:d1:5c:1c: 1c:e3:07:57:32:a0:10:7c:a1:bd:91:44:c8:29:a7:a6:ef:4c: c8:e5:ba:9a:98:06:cd:7f:25:f9:f2:ec:0d:10:78:25:c2:4d: 08:1a:cd:84:96:15:23:5f:23:e1:fc:a1:ce:3b:28:be:d0:c7: 74:63:df:40:ba:7e:6e:8e:a6:b4:34:5b:a0:53:d0:75:bf:74: 97:07:5b:b7:33:22:ac:0c:68:a7:42:5b:be:e2:71:11:0c:a2: 34:1c:77:26:01:f9:26:c8:79:6a:33:82:5e:bf:b3:83:a5:29: 7c:97:60:e0:ca:cb:c0:d8:54:ef:a6:04:77:2d:90:a3:95:43: 16:5d:f7:0c:90:9d:b4:a7:1e:3e:ab:aa:13:d4:c6:77:53:c5: 84:5f:d5:4e:99:f1:fa:99:d2:a1:c5:5c:40:1a:68:36:13:27: ef:b2:b9:f2:1f:21:4c:08:ee:0c:2f:eb:79:4f:13:68:23:a2: c1:1c:33:e7:1a:44:bf:9f:73:56:95:f3:57:aa:a7:21:44:14: 31:5f:67:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMh21xhyyDzClIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTIwMzkxZDUtZGFhNy00MDI4LWIxMDItZjUzNWE4OTNmNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLKjwZaGGezmqyemgHRiBcnlcOui649bbrsO KqEZUoRFrwO21b9hJpLoZsyQeHpc8Ge4Zu/j7qR8DXO+8WOcIjnQSd6dYPnFMrw7 hz2eQYsMVdcTAlMEIe+fCrQ81xjdo5WRMmUtNuZl5YNNG63Dl35cpKERB7aAvGPG 5f6At8TLzpObxSZR+a/mnUpdAwOsW0VYaHZCJEwWUcNFdwX1EGN4kR+d/kDp7PAZ gwwDOXGb5bNXZhwkw1IVeNXfRfzv8+EI1q+hw7SeFQH9qfWb9pABWXUI1bzLCo4p AgYqsb3QAAsYfJQruMBRsG6pW4u9vhZcCyvq9RYRBssl8xfhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGvZIH9HIDsTUTXlkbJU8a1Gzy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGE5ZmU1YjktYzc5Yy0z NDIwLTg4NWMtNzkzYmJhNzkzZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB/38JStNmzUGZWNn7aRzFx6zTBT31YwtYd+aQaTQF68JMi3//5HPrr ETmoEuiyAzNMt9FcHBzjB1cyoBB8ob2RRMgpp6bvTMjlupqYBs1/Jfny7A0QeCXC TQgazYSWFSNfI+H8oc47KL7Qx3Rj30C6fm6OprQ0W6BT0HW/dJcHW7czIqwMaKdC W77icREMojQcdyYB+SbIeWozgl6/s4OlKXyXYODKy8DYVO+mBHctkKOVQxZd9wyQ nbSnHj6rqhPUxndTxYRf1U6Z8fqZ0qHFXEAaaDYTJ++yufIfIUwI7gwv63lPE2gj osEcM+caRL+fc1aV81eqpyFEFDFfZzQ= -----END CERTIFICATE-----Generated at Sun Sep 20 17:55:50 2026 by rpki-client