$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa File: 9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa (raw, json) Hash identifier: 2xPC/Xy2lgPg3cR0MdWGH2uQ8Jt1A4mD3HF+20S3ICA= Subject key identifier: 61:A9:C9:CA:E9:D0:CB:19:28:BB:62:ED:8D:75:4B:7B:1B:36:19:C4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7CB9734F36AB0905CF980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 130.174.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cb:97:34:f3:6a:b0:90:5c:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=cbc553b2-9892-49ad-abad-2ba3c459dca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f9:78:3b:cd:ce:a5:74:ac:9a:6d:14:53:60: 20:63:ce:cc:fb:54:71:08:6e:20:e3:91:8f:fa:e1: 3f:9a:f6:d1:bb:a0:42:5a:c2:da:c0:d2:85:66:70: 39:e7:98:70:7c:8c:a7:02:88:4e:98:8b:9e:d1:42: 8d:0b:03:87:24:a0:43:da:fd:f1:5b:42:bc:a1:b6: fd:a4:d2:18:c5:ca:92:7c:eb:63:a2:d0:8b:d0:2c: 00:d4:5d:4a:eb:cc:f1:66:02:ba:5d:da:6c:c4:f3: 1d:e4:ae:b3:c5:69:54:7e:14:8e:4b:ed:3f:8d:9f: 14:b9:91:b2:d8:73:b4:04:07:24:44:67:28:28:be: ce:0a:65:f4:62:91:6b:25:b4:32:45:bf:1a:6a:28: 45:03:fa:07:6a:36:63:a6:7c:f3:a7:66:eb:10:33: e0:40:97:d9:24:f3:d0:3c:41:16:21:3e:fe:da:0a: ca:e9:9e:b1:23:04:bb:75:33:56:0e:8c:69:bc:f9: d4:96:af:e2:c4:1d:5d:cd:bb:2b:f3:c8:db:c1:d9: 5e:be:e3:30:cb:41:97:c8:41:06:d1:55:32:f4:93: 49:f1:db:ac:17:36:42:2d:cf:d0:0d:b7:39:6f:9c: bf:29:4e:88:ef:e6:cd:6c:54:19:85:2a:11:69:6c: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A9:C9:CA:E9:D0:CB:19:28:BB:62:ED:8D:75:4B:7B:1B:36:19:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9204b26e-3f2c-3b3a-b759-31b3d7e58f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:41:e4:aa:6e:f9:69:92:e3:5a:1e:2b:04:38:f7:c5:38:f3: c1:51:dc:f3:c8:29:8d:c6:42:8b:59:39:e3:0c:db:fd:35:9e: 1b:97:32:ac:7f:e3:f8:b2:a3:a0:8e:ce:48:fc:9a:b0:35:31: 16:0e:32:98:98:f9:39:c0:f4:3d:52:24:bb:89:89:bf:a0:9e: fb:51:61:fa:56:12:70:a5:0d:3f:93:b4:73:18:91:ed:7c:bf: a0:5a:ba:3c:27:ec:83:32:22:0b:6a:8a:a1:00:85:a9:b5:2f: a1:a8:3c:42:bb:c7:f4:37:65:64:0a:01:60:2b:ee:37:8d:d5: d6:cb:48:b2:0f:9e:59:24:e2:5f:ec:07:cf:87:bf:80:83:6e: 98:44:6b:67:c3:1c:5c:47:92:3c:b8:26:81:04:eb:c4:1b:ec: 9f:4b:6e:be:29:fd:19:46:95:8a:f1:f8:5a:f4:5d:3f:cf:c0: 39:3a:58:7e:b9:d9:0c:f3:8a:c4:c7:5b:78:01:0b:74:93:14: 35:8c:2d:f1:af:bd:f2:c9:af:8b:2d:25:ef:b3:54:ab:c4:fc: c8:92:27:21:96:dd:fe:21:87:90:7c:97:2c:35:da:47:c7:e6: 21:9d:de:48:8b:f8:d3:b8:7e:70:6a:8c:4a:52:70:6d:4e:34: 90:5f:5f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98uXNPNqsJBc+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Y2JjNTUzYjItOTg5Mi00OWFkLWFiYWQtMmJhM2M0NTlkY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvl4O83OpXSsmm0UU2AgY87M+1RxCG4g45GP +uE/mvbRu6BCWsLawNKFZnA555hwfIynAohOmIue0UKNCwOHJKBD2v3xW0K8obb9 pNIYxcqSfOtjotCL0CwA1F1K68zxZgK6XdpsxPMd5K6zxWlUfhSOS+0/jZ8UuZGy 2HO0BAckRGcoKL7OCmX0YpFrJbQyRb8aaihFA/oHajZjpnzzp2brEDPgQJfZJPPQ PEEWIT7+2grK6Z6xIwS7dTNWDoxpvPnUlq/ixB1dzbsr88jbwdlevuMwy0GXyEEG 0VUy9JNJ8dusFzZCLc/QDbc5b5y/KU6I7+bNbFQZhSoRaWzjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGpycrp0MsZKLti7Y11S3sbNhnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTIwNGIyNmUtM2YyYy0z YjNhLWI3NTktMzFiM2Q3ZTU4ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFB5Kpu+WmS41oeKwQ498U488FR3PPIKY3GQotZOeMM2/01nhuXMqx/ 4/iyo6COzkj8mrA1MRYOMpiY+TnA9D1SJLuJib+gnvtRYfpWEnClDT+TtHMYke18 v6Baujwn7IMyIgtqiqEAham1L6GoPEK7x/Q3ZWQKAWAr7jeN1dbLSLIPnlkk4l/s B8+Hv4CDbphEa2fDHFxHkjy4JoEE68Qb7J9Lbr4p/RlGlYrx+Fr0XT/PwDk6WH65 2QzzisTHW3gBC3STFDWMLfGvvfLJr4stJe+zVKvE/MiSJyGW3f4hh5B8lyw12kfH 5iGd3kiL+NO4fnBqjEpScG1ONJBfXzA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:55 2025 by rpki-client