$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa File: 9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa (raw, json) Hash identifier: cqnRjOsjklQ0pf3Y+6Vdf8rolP1Zf42x12BvQRXxV/w= Subject key identifier: 41:80:09:1F:F0:D4:CE:AB:3C:DC:BA:0D:5D:20:83:AC:D1:EA:35:28 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD6A8DDDCC923E12989C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 130.174.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d6:a8:dd:dc:c9:23:e1:29:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3a7f4265-b68a-49d8-bea0-8bafa75740f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:ba:38:4c:dc:e3:36:e4:42:a9:cf:2b:cd: a7:7f:4d:92:d5:b5:1a:cb:dc:0a:9f:92:ac:a7:83: 91:ac:7c:c3:91:cf:53:c2:3f:bd:3e:87:3e:41:d0: 8e:c8:49:e7:b7:d6:0b:ab:84:20:84:a2:55:09:14: d1:67:b7:5b:a3:07:c9:c1:fa:58:47:f9:72:e7:bf: 62:e4:9a:06:b1:be:8c:de:49:a3:d7:aa:32:cd:17: a8:b9:77:c0:57:e9:38:27:44:53:e7:37:82:6d:87: ef:6f:92:f9:34:62:1f:a5:87:3b:13:eb:b3:c7:0e: 6e:41:0c:8e:8a:24:3f:0c:27:38:25:35:5c:b8:0b: db:0d:83:2c:27:32:0c:55:f9:fe:7c:de:d3:e0:d0: 35:51:fb:4d:d8:ce:c1:80:0c:25:55:22:22:a3:b1: 41:db:fa:d2:6d:bb:af:34:2c:24:69:02:3a:fb:23: 4f:5b:c5:92:32:ed:75:66:8d:ae:6a:08:bf:bf:5d: d7:a3:49:1d:b4:c8:10:4c:e5:b2:ab:44:d0:47:81: bc:36:91:de:43:b7:21:c1:79:36:7b:db:af:f9:81: d4:9d:76:0d:fe:e1:54:a4:b2:e7:f8:c1:b4:10:99: ec:9d:21:13:59:da:67:4c:4a:ee:dc:6e:0d:76:57: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:80:09:1F:F0:D4:CE:AB:3C:DC:BA:0D:5D:20:83:AC:D1:EA:35:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4a:0f:5d:b0:92:ec:47:6a:a8:4f:a5:57:6f:ba:08:a9:3e: e1:47:ad:91:12:3a:78:bd:9e:90:ed:1b:8d:4e:06:0c:46:28: 20:d5:d0:4d:75:3a:ac:2b:78:37:14:6c:69:e1:8e:87:f3:61: 04:90:ea:99:fb:98:e8:36:e5:d6:d5:79:c1:23:5e:80:25:c7: 2d:e9:64:4a:96:05:e8:e1:18:a9:ef:ec:97:b9:32:79:70:c5: 26:35:b7:38:42:9d:da:d6:59:6a:a1:0a:43:57:75:98:f1:08: 76:19:2f:4e:87:f3:f4:56:b6:bb:34:12:e1:88:c3:07:d0:1b: e6:6f:3a:5a:22:0a:88:90:df:45:e4:b7:6a:94:07:c9:22:a6: ad:1a:eb:80:dd:9a:ec:04:e6:47:5f:02:26:a4:92:66:26:dd: dd:cc:67:d9:38:b6:0e:1d:72:34:54:20:c0:4c:93:7c:6a:2d: 61:aa:6d:97:bc:14:53:b4:2c:80:0d:73:4b:c0:7b:ad:e0:03: 5c:1d:a7:28:9a:98:55:b6:44:13:b8:d0:9c:90:4b:bd:fb:75: 1e:17:0d:d2:fd:53:19:49:15:f2:76:45:df:64:22:73:59:51: 42:83:98:d8:b9:c8:c2:92:81:c7:ef:fe:d1:4a:9d:15:ef:0b: b8:f6:93:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9ao3dzJI+EpicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2E3ZjQyNjUtYjY4YS00OWQ4LWJlYTAtOGJhZmE3NTc0MGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS66OEzc4zbkQqnPK82nf02S1bUay9wKn5Ks p4ORrHzDkc9Twj+9Poc+QdCOyEnnt9YLq4QghKJVCRTRZ7dbowfJwfpYR/ly579i 5JoGsb6M3kmj16oyzReouXfAV+k4J0RT5zeCbYfvb5L5NGIfpYc7E+uzxw5uQQyO iiQ/DCc4JTVcuAvbDYMsJzIMVfn+fN7T4NA1UftN2M7BgAwlVSIio7FB2/rSbbuv NCwkaQI6+yNPW8WSMu11Zo2uagi/v13Xo0kdtMgQTOWyq0TQR4G8NpHeQ7chwXk2 e9uv+YHUnXYN/uFUpLLn+MG0EJnsnSETWdpnTEru3G4NdlfiDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGACR/w1M6rPNy6DV0gg6zR6jUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTIwNGIyNmUtM2YyYy0z YjNhLWI3NTktMzFiM2Q3ZTU4ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFKD12wkuxHaqhPpVdvugipPuFHrZESOni9npDtG41OBgxGKCDV0E11 OqwreDcUbGnhjofzYQSQ6pn7mOg25dbVecEjXoAlxy3pZEqWBejhGKnv7Je5Mnlw xSY1tzhCndrWWWqhCkNXdZjxCHYZL06H8/RWtrs0EuGIwwfQG+ZvOloiCoiQ30Xk t2qUB8kipq0a64DdmuwE5kdfAiakkmYm3d3MZ9k4tg4dcjRUIMBMk3xqLWGqbZe8 FFO0LIANc0vAe63gA1wdpyiamFW2RBO40JyQS737dR4XDdL9UxlJFfJ2Rd9kInNZ UUKDmNi5yMKSgcfv/tFKnRXvC7j2kzU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:11:21 2026 by rpki-client