$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/91be3849-e703-31ac-97b4-e1fda7340f99.roa File: 91be3849-e703-31ac-97b4-e1fda7340f99.roa (raw, json) Hash identifier: ONVvCIZkFzWmr6lpbMFSy7RPnHmB9zaiGDUT8fktMEQ= Subject key identifier: E8:3D:E1:08:D0:E0:25:0F:35:3B:45:50:4F:24:48:42:A3:30:FD:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD431DC527F157188DAC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/91be3849-e703-31ac-97b4-e1fda7340f99.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 130.174.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d4:31:dc:52:7f:15:71:88:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=bdbf18ba-8e52-42e0-ac57-498628f141dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:a0:b1:90:70:e2:f4:b5:87:5e:04:10:21: 26:b4:36:1e:ae:c1:86:26:e1:ca:53:e8:08:1f:81: a3:6e:a7:f9:2c:78:8d:8c:eb:48:c9:22:db:a2:7a: 4f:66:3a:94:7a:7c:78:e5:6e:77:4a:45:e9:59:37: 07:68:78:58:1c:30:7f:dd:e9:40:1e:10:57:61:3c: f2:c9:0f:17:f3:81:ca:6b:e8:66:fa:fb:93:50:0d: 68:e5:2b:c1:da:ee:e4:3a:c6:d1:ad:15:e9:8a:aa: 68:29:20:69:5d:00:56:ec:ed:45:a1:0d:cf:13:91: b4:84:f6:4a:ce:4f:89:fa:2c:8d:fd:b4:cd:36:c3: f7:7a:98:75:80:59:61:7f:8f:be:bd:63:3d:61:6a: 27:2d:e5:b3:79:a5:57:98:75:4a:8c:84:04:45:f1: 0c:86:11:4d:06:6e:f3:01:db:7a:f6:5a:87:24:15: 58:23:6b:2e:3a:29:cd:d3:e4:32:cc:db:5b:d8:d0: 41:e6:79:d9:4d:91:b0:9c:9e:e2:50:a2:17:41:54: 5a:95:ab:36:8a:b5:6c:30:c5:1b:8f:e8:4f:c3:76: 2a:06:60:b2:74:de:91:54:47:f6:8d:89:bf:02:c3: d1:82:7e:e1:16:54:0c:40:e8:2e:b5:65:e2:d2:22: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3D:E1:08:D0:E0:25:0F:35:3B:45:50:4F:24:48:42:A3:30:FD:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/91be3849-e703-31ac-97b4-e1fda7340f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:56:be:35:3f:02:2a:7d:2d:96:3c:86:73:69:2e:64:11:13: 5d:6c:db:98:b6:c9:b2:cf:ff:be:6a:32:02:c9:ba:d0:98:44: a2:e6:76:35:ad:19:53:c0:b0:be:25:28:7b:f5:0f:46:a3:f3: ed:80:5c:f1:fb:ce:46:dc:26:40:2e:e2:da:ba:73:c4:d2:6d: 43:af:c9:46:b3:43:0f:d5:36:fc:71:1c:aa:62:05:6e:6c:32: 42:43:2e:4e:1c:70:b2:5a:03:fd:b1:00:fa:40:6d:33:56:39: d5:8a:c8:d4:17:f5:77:c3:dd:35:29:8d:e3:7f:2e:8d:b5:40: 29:e3:fe:2c:63:ce:cb:89:c7:8c:68:b3:5f:ba:19:ec:3a:a8: 17:35:68:e9:91:23:f8:51:f1:c4:a2:b8:5f:61:f3:2e:95:f5: 1c:c5:30:b7:74:14:1e:25:82:59:3c:4a:2f:7e:59:43:66:cb: d0:ac:57:92:c8:8c:27:84:4e:f7:8a:47:80:09:09:b0:aa:ca: 8a:b3:75:eb:c5:7c:af:29:a0:7b:d2:ff:3d:df:94:cd:f4:2b: d2:80:25:65:84:13:bb:20:c6:b4:79:eb:ac:e4:e5:92:ee:8f: dc:df:c9:e5:ac:24:a7:28:a0:2b:66:69:15:6c:c6:99:c3:8c: 30:da:76:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9Qx3FJ/FXGI2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YmRiZjE4YmEtOGU1Mi00MmUwLWFjNTctNDk4NjI4ZjE0MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiECgsZBw4vS1h14EECEmtDYersGGJuHKU+gI H4Gjbqf5LHiNjOtIySLbonpPZjqUenx45W53SkXpWTcHaHhYHDB/3elAHhBXYTzy yQ8X84HKa+hm+vuTUA1o5SvB2u7kOsbRrRXpiqpoKSBpXQBW7O1FoQ3PE5G0hPZK zk+J+iyN/bTNNsP3eph1gFlhf4++vWM9YWonLeWzeaVXmHVKjIQERfEMhhFNBm7z Adt69lqHJBVYI2suOinN0+QyzNtb2NBB5nnZTZGwnJ7iUKIXQVRalas2irVsMMUb j+hPw3YqBmCydN6RVEf2jYm/AsPRgn7hFlQMQOgutWXi0iLFfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg94QjQ4CUPNTtFUE8kSEKjMP0wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTFiZTM4NDktZTcwMy0z MWFjLTk3YjQtZTFmZGE3MzQwZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpWvjU/Aip9LZY8hnNpLmQRE11s25i2ybLP/75qMgLJutCYRKLmdjWt GVPAsL4lKHv1D0aj8+2AXPH7zkbcJkAu4tq6c8TSbUOvyUazQw/VNvxxHKpiBW5s MkJDLk4ccLJaA/2xAPpAbTNWOdWKyNQX9XfD3TUpjeN/Lo21QCnj/ixjzsuJx4xo s1+6Gew6qBc1aOmRI/hR8cSiuF9h8y6V9RzFMLd0FB4lglk8Si9+WUNmy9CsV5LI jCeETveKR4AJCbCqyoqzdevFfK8poHvS/z3flM30K9KAJWWEE7sgxrR566zk5ZLu j9zfyeWsJKcooCtmaRVsxpnDjDDadig= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:58 2026 by rpki-client