$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa File: a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa (raw, json) Hash identifier: /o7VLECQ/GTwf8DcfojGoRgLvqB3l9lfszCPtIDFx9Y= Subject key identifier: 49:FB:D5:0A:70:E4:67:48:A2:99:9D:0C:65:97:C3:75:88:E0:BD:C3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D20763653C57F57EF5B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3360 IP address blocks: 130.174.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:20:76:36:53:c5:7f:57:ef:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=19aa52ae-52e6-4e41-8fcc-c072c1e07039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:d8:d8:12:3d:ed:7e:03:46:3b:c1:bf:cb: e9:b6:0a:8e:3e:03:3b:9f:c8:ef:19:dd:1b:e0:b8: 57:4f:04:d2:1f:14:8b:51:95:4e:9e:56:2c:02:26: 13:61:46:96:48:5c:06:21:7d:91:12:fa:97:dd:70: b0:62:22:ca:98:dc:9c:b1:9c:0a:8e:0a:09:7f:ba: af:dd:68:4c:a1:82:62:b1:7f:8a:69:17:eb:6c:d3: d0:ed:e4:01:9e:e8:65:b2:c8:0a:1a:f0:bd:4f:dd: c6:2b:86:33:aa:80:b4:ba:42:51:3f:11:73:fe:0e: 5d:19:89:ae:e8:f0:9d:4a:dd:a8:4c:9f:40:d3:20: f8:9b:70:2a:43:54:34:e1:06:01:b3:e1:4d:df:9f: ba:48:99:9e:20:ff:7b:6f:f0:a7:51:7e:83:50:64: 38:8e:0b:57:db:71:40:fe:be:b1:a0:a5:a1:85:cb: e6:ed:ba:19:28:a4:b8:b6:36:47:68:2e:76:ca:f5: 61:50:84:33:06:7c:b7:40:56:b3:11:d8:fc:4a:29: 40:8e:42:f8:51:2a:03:9f:12:1a:97:9b:9a:e8:46: fe:3e:33:7d:71:44:78:de:5b:a3:ae:d1:f5:51:86: 5e:c9:bc:6e:04:b8:6c:c4:84:fb:b8:72:b2:ce:72: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FB:D5:0A:70:E4:67:48:A2:99:9D:0C:65:97:C3:75:88:E0:BD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a064c8da-1191-3ee2-bd8e-0c68e23fc16d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c1:c8:73:af:60:d7:dc:21:68:bd:18:4c:bf:af:46:41:49: 8b:67:cd:c3:0c:5b:bd:78:c3:1a:96:30:cd:5c:25:c0:96:44: 25:d8:a2:90:13:6d:92:64:67:fd:dc:a5:34:58:5f:9d:3b:08: 20:75:13:5c:97:d4:c2:bc:a1:7f:b0:08:e4:9b:d2:61:af:5e: 12:63:6c:04:81:5d:80:9a:c3:80:23:cf:38:57:de:87:ef:6e: ac:fb:ef:96:25:a6:e9:a1:20:e2:9b:0e:c4:9c:78:c2:e9:9c: 8d:77:63:59:6d:50:01:2e:59:65:7e:41:5b:cf:79:aa:6b:28: cb:76:28:26:4e:e9:3f:5e:5f:b7:37:6e:42:8d:f5:a6:09:38: 82:07:f5:9b:b2:88:2d:4b:56:d6:56:eb:ab:92:5f:cb:65:e0: e3:98:cc:c4:d5:9d:88:83:fd:67:98:f3:c9:ce:5d:30:3d:92: b1:58:55:fd:00:5b:e7:e9:c4:57:5a:a7:fa:3c:a9:e1:a0:6c: 02:2f:a2:24:1b:e8:ac:7a:e0:77:4a:5e:bd:77:77:86:3f:26: e3:7c:5b:f5:7e:11:78:e9:ca:39:04:c1:9d:7f:47:ea:80:15: e9:96:00:61:73:da:d3:cb:a7:7e:c0:71:c1:08:c9:24:97:28: a1:0b:74:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSB2NlPFf1fvW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MTlhYTUyYWUtNTJlNi00ZTQxLThmY2MtYzA3MmMxZTA3MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBnY2BI97X4DRjvBv8vptgqOPgM7n8jvGd0b 4LhXTwTSHxSLUZVOnlYsAiYTYUaWSFwGIX2REvqX3XCwYiLKmNycsZwKjgoJf7qv 3WhMoYJisX+KaRfrbNPQ7eQBnuhlssgKGvC9T93GK4YzqoC0ukJRPxFz/g5dGYmu 6PCdSt2oTJ9A0yD4m3AqQ1Q04QYBs+FN35+6SJmeIP97b/CnUX6DUGQ4jgtX23FA /r6xoKWhhcvm7boZKKS4tjZHaC52yvVhUIQzBny3QFazEdj8SilAjkL4USoDnxIa l5ua6Eb+PjN9cUR43lujrtH1UYZeybxuBLhsxIT7uHKyznL3yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEn71Qpw5GdIopmdDGWXw3WI4L3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTA2NGM4ZGEtMTE5MS0z ZWUyLWJkOGUtMGM2OGUyM2ZjMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjByHOvYNfcIWi9GEy/r0ZBSYtnzcMMW714wxqWMM1cJcCWRCXYopAT bZJkZ/3cpTRYX507CCB1E1yX1MK8oX+wCOSb0mGvXhJjbASBXYCaw4AjzzhX3ofv bqz775YlpumhIOKbDsSceMLpnI13Y1ltUAEuWWV+QVvPeaprKMt2KCZO6T9eX7c3 bkKN9aYJOIIH9ZuyiC1LVtZW66uSX8tl4OOYzMTVnYiD/WeY88nOXTA9krFYVf0A W+fpxFdap/o8qeGgbAIvoiQb6Kx64HdKXr13d4Y/JuN8W/V+EXjpyjkEwZ1/R+qA FemWAGFz2tPLp37AccEIySSXKKELdO4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:10 2025 by rpki-client