$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa File: 9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa (raw, json) Hash identifier: t21Cd4ZheaVkFg8yTZJYuzNSth1cchmVR+QLPudssGg= Subject key identifier: 2C:C2:A5:E7:B6:8D:DC:63:89:56:78:4A:9C:AF:26:48:B6:B1:9E:B4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C3420BA673C0CEAB5180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 130.174.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c3:42:0b:a6:73:c0:ce:ab:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=71f716dc-f4f3-4551-9182-ec16e0c51a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:4c:c6:02:80:cb:ae:d0:e1:5c:a1:51:68: da:02:a7:87:96:33:d0:3b:36:9d:f9:2f:45:95:f9: 53:71:b5:d3:19:0d:bd:36:ca:e7:5a:52:5f:49:29: 02:4e:06:81:de:3b:c2:c8:5b:6a:5a:ea:0a:07:0f: 94:86:84:87:d5:20:fa:f9:e0:d0:88:4d:45:16:8e: 0f:40:64:d1:ff:ef:f4:86:bd:45:dc:a3:09:cc:ed: 79:bb:5a:7e:2f:c4:a0:1e:46:b1:93:2b:75:84:ca: 24:95:90:1e:87:85:c2:2a:a7:e7:b4:ee:16:04:94: 14:7c:3c:29:f8:36:7a:43:77:e0:91:92:e8:da:a7: a9:d4:45:3e:e7:97:5e:e0:76:ef:ce:19:8e:b8:66: dc:06:89:24:e7:56:ed:c9:38:de:ee:f4:17:5e:bc: 0f:82:f7:9a:78:9b:ab:b1:2e:8d:73:9e:05:f3:54: 1e:3a:06:8a:2d:fe:fa:47:3d:0f:c8:f2:f8:67:f8: 97:65:31:f4:0f:16:71:73:ac:9a:6a:7a:cd:8e:d8: cc:8f:e5:0c:29:ed:e0:ef:d3:be:70:30:55:a1:a8: 5d:72:96:58:fd:d0:e1:2f:b2:b2:47:0e:c7:c4:bc: 5e:63:36:3d:7d:ac:b5:64:8b:a7:98:18:64:cd:db: c8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C2:A5:E7:B6:8D:DC:63:89:56:78:4A:9C:AF:26:48:B6:B1:9E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9cf65e0b-1c98-3ca4-ada3-becc25696d2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b8:eb:1f:f5:15:eb:8f:51:58:4e:91:7a:06:3c:35:12:90: 21:61:1e:e9:15:d3:7d:9c:d9:32:de:5b:ff:f8:9d:8f:ad:d3: 7a:6f:69:5a:e8:9b:07:1d:ca:58:11:4f:1a:e8:93:a0:dc:69: e4:ba:67:e4:d7:8d:82:ec:11:33:be:3e:a8:0d:92:be:bc:ee: 2e:f4:a3:30:0c:f0:e9:ea:08:00:20:4e:18:52:b6:99:10:50: 5e:49:31:ba:24:95:d5:d5:fd:61:b1:a0:53:c1:82:90:20:70: 27:6b:de:93:eb:6d:29:0a:56:48:6d:17:05:ad:ce:54:4c:22: ee:b0:e3:84:7b:eb:fb:a8:4b:0c:ff:c6:16:bf:68:96:23:fa: e8:fe:38:72:50:d4:99:e1:00:50:88:bc:05:04:af:f3:d3:ee: aa:e2:ca:3e:4e:5f:c0:7b:7c:b3:b1:24:57:83:3b:5e:b4:72: 81:f0:dd:dd:ae:2e:92:88:bb:e7:cf:90:3b:8e:7a:b3:3f:0b: c0:43:36:9b:65:02:4f:dd:b6:41:1f:03:83:69:5f:9f:da:4d: 35:34:48:77:fa:1c:d9:8e:69:bc:70:94:e2:2d:87:3e:1d:ec: 8b:c6:89:fc:e8:56:a8:99:cd:30:95:2e:a0:ba:83:d3:17:59: b9:54:45:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98NCC6ZzwM6rUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NzFmNzE2ZGMtZjRmMy00NTUxLTkxODItZWMxNmUwYzUxYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmftMxgKAy67Q4VyhUWjaAqeHljPQOzad+S9F lflTcbXTGQ29NsrnWlJfSSkCTgaB3jvCyFtqWuoKBw+UhoSH1SD6+eDQiE1FFo4P QGTR/+/0hr1F3KMJzO15u1p+L8SgHkaxkyt1hMoklZAeh4XCKqfntO4WBJQUfDwp +DZ6Q3fgkZLo2qep1EU+55de4HbvzhmOuGbcBokk51btyTje7vQXXrwPgveaeJur sS6Nc54F81QeOgaKLf76Rz0PyPL4Z/iXZTH0DxZxc6yaanrNjtjMj+UMKe3g79O+ cDBVoahdcpZY/dDhL7KyRw7HxLxeYzY9fay1ZIunmBhkzdvIQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzCpee2jdxjiVZ4SpyvJki2sZ60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWNmNjVlMGItMWM5OC0z Y2E0LWFkYTMtYmVjYzI1Njk2ZDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+46x/1FeuPUVhOkXoGPDUSkCFhHukV032c2TLeW//4nY+t03pvaVro mwcdylgRTxrok6DcaeS6Z+TXjYLsETO+PqgNkr687i70ozAM8OnqCAAgThhStpkQ UF5JMbokldXV/WGxoFPBgpAgcCdr3pPrbSkKVkhtFwWtzlRMIu6w44R76/uoSwz/ xha/aJYj+uj+OHJQ1JnhAFCIvAUEr/PT7qriyj5OX8B7fLOxJFeDO160coHw3d2u LpKIu+fPkDuOerM/C8BDNptlAk/dtkEfA4NpX5/aTTU0SHf6HNmOabxwlOIthz4d 7IvGifzoVqiZzTCVLqC6g9MXWblURTw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:17 2025 by rpki-client