$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa File: a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa (raw, json) Hash identifier: Xly6MWC5clQ3N524Nou8+ayUt5kh2yqyc0Qs3qxXmUQ= Subject key identifier: 97:2B:3A:55:63:8A:68:48:6F:34:89:33:20:62:FD:22:D8:FA:C1:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FC810B2D90BDAB7A07140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 130.174.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c8:10:b2:d9:0b:da:b7:a0:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=af68c8a1-8945-473a-a910-fc3bc10ab8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:f4:34:62:46:f1:4b:76:58:4e:20:f0:9a: f8:75:b9:36:b5:6b:f9:b4:a1:f8:e1:52:d5:08:59: b1:40:bf:46:23:71:1b:c9:f9:4c:6e:79:d5:cb:80: 05:59:ff:7a:40:b5:30:e9:04:e4:17:19:2c:3a:2a: 4e:80:5a:41:b2:b8:d1:4c:e2:9e:ad:47:e6:fd:3a: 99:3e:35:c1:31:dc:a4:ba:89:59:b3:2d:cd:c5:64: 8e:c7:11:d4:a5:ec:f4:b3:c1:5f:95:6d:47:5a:9d: fc:77:8f:2f:24:87:d2:dc:da:6c:25:25:25:67:52: 54:00:f3:4e:7e:f0:a0:4f:67:af:de:cc:9c:80:7c: 49:74:38:93:02:ea:83:d1:2a:11:55:5a:18:99:1d: 5b:e3:88:de:af:f5:42:de:7d:f6:05:31:64:46:ac: cd:e1:c3:1b:a9:61:5f:c0:da:46:e1:f7:93:86:38: dc:da:51:76:cf:3c:12:26:3d:de:54:dd:8e:1b:19: 2e:10:30:6d:ec:08:5b:92:7d:d9:40:33:9e:c9:59: 61:62:b8:a4:e0:5d:6c:98:1f:85:4e:77:88:1e:04: 76:05:1f:43:04:e7:8b:da:d3:96:f4:dc:12:bf:1d: 7f:69:a4:5a:61:15:63:5f:77:27:92:70:46:b3:a3: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2B:3A:55:63:8A:68:48:6F:34:89:33:20:62:FD:22:D8:FA:C1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a41aa3a5-06c3-344d-a6d0-b10a464eaecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:67:2f:0f:5b:23:eb:57:69:aa:62:45:43:d9:c4:7e:0a:e4: 9d:8c:17:18:2f:5b:5c:e4:32:c4:fd:0b:f3:b6:08:fc:3b:2e: f9:c5:7d:e9:e3:68:50:85:be:c6:b7:fd:f3:40:92:6f:4a:7e: ff:15:85:a4:0a:1f:13:f4:9a:a3:58:cf:cb:4a:e2:32:31:ed: 48:97:e6:76:de:1d:08:27:88:da:ce:d2:b6:9d:6c:64:18:8b: c8:1b:ac:88:f0:cb:be:2a:01:44:40:d3:e0:61:67:37:9f:5b: e5:39:05:b3:fc:36:d2:db:32:93:dd:60:88:a0:58:12:09:2c: 6d:16:e3:13:7b:4f:d1:ca:36:98:8f:2f:94:ec:3b:5f:e3:fa: 5c:5c:b4:ff:3c:39:51:b5:3e:f4:36:01:cf:30:71:ef:c9:ae: 07:03:93:5b:6e:1b:d0:5e:53:51:60:ce:0b:5f:c7:3a:4d:40: 41:cb:09:f1:3a:5d:10:f9:b6:72:35:60:9e:01:44:d5:a9:84: ff:18:af:14:ee:9f:f6:20:b4:78:b1:76:9a:ab:da:1e:69:7e: 3e:bf:15:54:3e:5f:f9:ea:c6:74:58:9e:33:85:62:b6:00:38: 81:72:8f:a6:b5:4d:bb:37:d8:dc:ad:c4:6f:77:1b:57:68:c3: 8d:26:29:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8gQstkL2regcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YWY2OGM4YTEtODk0NS00NzNhLWE5MTAtZmMzYmMxMGFiOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvj0NGJG8Ut2WE4g8Jr4dbk2tWv5tKH44VLV CFmxQL9GI3EbyflMbnnVy4AFWf96QLUw6QTkFxksOipOgFpBsrjRTOKerUfm/TqZ PjXBMdykuolZsy3NxWSOxxHUpez0s8FflW1HWp38d48vJIfS3NpsJSUlZ1JUAPNO fvCgT2ev3sycgHxJdDiTAuqD0SoRVVoYmR1b44jer/VC3n32BTFkRqzN4cMbqWFf wNpG4feThjjc2lF2zzwSJj3eVN2OGxkuEDBt7Ahbkn3ZQDOeyVlhYrik4F1smB+F TneIHgR2BR9DBOeL2tOW9NwSvx1/aaRaYRVjX3cnknBGs6PFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcrOlVjimhIbzSJMyBi/SLY+sFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTQxYWEzYTUtMDZjMy0z NDRkLWE2ZDAtYjEwYTQ2NGVhZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRnLw9bI+tXaapiRUPZxH4K5J2MFxgvW1zkMsT9C/O2CPw7LvnFfenj aFCFvsa3/fNAkm9Kfv8VhaQKHxP0mqNYz8tK4jIx7UiX5nbeHQgniNrO0radbGQY i8gbrIjwy74qAURA0+BhZzefW+U5BbP8NtLbMpPdYIigWBIJLG0W4xN7T9HKNpiP L5TsO1/j+lxctP88OVG1PvQ2Ac8wce/JrgcDk1tuG9BeU1FgzgtfxzpNQEHLCfE6 XRD5tnI1YJ4BRNWphP8YrxTun/YgtHixdpqr2h5pfj6/FVQ+X/nqxnRYnjOFYrYA OIFyj6a1Tbs32NytxG93G1dow40mKYc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:18:44 2026 by rpki-client