$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa File: a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa (raw, json) Hash identifier: vSWzR95dmJREvX7rkrMbh0MQkhHS+pWR4zCDCThoGVo= Subject key identifier: 20:10:11:84:82:CE:61:26:C2:E1:85:BD:B0:09:17:02:B2:E9:B7:87 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7B8C9E2C323B09BE55C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 203 IP address blocks: 130.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:b8:c9:e2:c3:23:b0:9b:e5:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6394b6da-bafb-4987-83d6-aa150207ef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7e:64:a0:87:0d:5b:b1:da:1d:2c:dd:7d:c0: 28:de:b3:d0:75:de:d1:94:63:e6:ac:01:a7:42:b9: b4:02:68:f0:96:7d:d1:bf:39:66:84:e0:65:37:a2: 5b:29:70:6e:a2:35:1b:fb:c5:32:17:2d:f8:ab:08: cf:43:b0:ef:b1:e0:6e:7c:47:c6:dc:05:d5:d6:31: a2:61:42:be:bc:ad:38:2d:63:e2:86:d9:cd:64:cb: dc:14:06:b2:4b:1c:46:6a:f0:b9:3c:4f:7b:d9:cc: 98:6c:a8:31:46:12:af:d4:c3:42:3a:3f:49:8d:1c: 0e:8b:ff:47:b8:5a:fe:12:7c:ec:8b:0f:6c:b9:27: b9:2f:e9:24:be:11:3c:1c:94:f8:dd:df:a1:13:af: d8:bf:b0:0e:3b:db:1b:b2:cb:e4:ed:af:b0:67:d9: 68:46:11:8e:92:ef:ef:75:53:a9:99:29:dd:ee:51: 03:18:a2:9c:13:04:15:5e:d8:94:00:f6:97:02:40: 75:6c:ae:63:14:eb:78:5e:1c:97:cc:a2:63:bf:c9: 1d:cb:63:df:2c:13:17:06:9c:23:8a:29:28:2d:42: 50:ac:d8:65:68:99:6b:b7:c7:b7:da:c8:6f:4c:b1: 6d:c5:09:fb:a3:23:7e:cd:43:b2:49:b0:f7:c1:93: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:10:11:84:82:CE:61:26:C2:E1:85:BD:B0:09:17:02:B2:E9:B7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a793250d-13f2-34d5-bf26-a125cf9b1a5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:f3:43:9b:50:e1:01:a6:f8:d4:c3:da:98:e4:3c:74:3e:52: 24:0a:05:da:95:63:74:c5:f0:03:fd:c9:d5:49:b0:43:fc:52: 82:f7:72:6d:05:00:7c:78:28:d6:23:83:05:65:b9:d9:b0:33: c0:55:f8:bd:ef:07:ae:89:89:2e:6b:c7:b1:f4:b4:1e:3d:17: ab:97:c2:d0:ff:2e:a6:39:7d:2d:d3:7e:57:65:78:06:88:d5: 74:aa:50:47:fb:28:85:5e:3a:3c:13:b0:a6:57:d9:f1:09:86: c5:4f:1d:98:68:47:33:dd:60:f0:9d:b6:dc:08:8e:ed:c4:99: eb:57:09:7b:30:7d:5e:fa:6a:58:b2:d5:67:77:fb:e5:d8:54: 64:d0:f9:15:25:15:8f:42:9d:38:37:46:77:4b:7e:8a:9b:77: 2c:c0:9b:47:8d:3d:24:ae:80:4e:ab:f0:85:ae:dd:a5:ae:ec: 49:56:79:28:d2:53:14:4f:44:ad:93:08:02:b8:c4:54:a4:c1: 10:da:d5:97:70:ca:41:30:68:03:57:42:fb:29:88:ec:9f:8b: 37:58:a2:3a:5b:6d:ea:be:61:29:ce:e3:2a:c9:fe:cc:88:7a: d7:72:75:60:cd:4d:50:fd:ea:92:73:e6:8c:21:4d:60:ad:95: 27:4b:44:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy97jJ4sMjsJvlXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjM5NGI2ZGEtYmFmYi00OTg3LTgzZDYtYWExNTAyMDdlZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk35koIcNW7HaHSzdfcAo3rPQdd7RlGPmrAGn Qrm0Amjwln3RvzlmhOBlN6JbKXBuojUb+8UyFy34qwjPQ7DvseBufEfG3AXV1jGi YUK+vK04LWPihtnNZMvcFAaySxxGavC5PE972cyYbKgxRhKv1MNCOj9JjRwOi/9H uFr+Enzsiw9suSe5L+kkvhE8HJT43d+hE6/Yv7AOO9sbssvk7a+wZ9loRhGOku/v dVOpmSnd7lEDGKKcEwQVXtiUAPaXAkB1bK5jFOt4XhyXzKJjv8kdy2PfLBMXBpwj iikoLUJQrNhlaJlrt8e32shvTLFtxQn7oyN+zUOySbD3wZPsYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAQEYSCzmEmwuGFvbAJFwKy6beHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTc5MzI1MGQtMTNmMi0z NGQ1LWJmMjYtYTEyNWNmOWIxYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrzQ5tQ4QGm+NTD2pjkPHQ+UiQKBdqVY3TF8AP9ydVJsEP8UoL3cm0F AHx4KNYjgwVludmwM8BV+L3vB66JiS5rx7H0tB49F6uXwtD/LqY5fS3TfldleAaI 1XSqUEf7KIVeOjwTsKZX2fEJhsVPHZhoRzPdYPCdttwIju3EmetXCXswfV76aliy 1Wd3++XYVGTQ+RUlFY9CnTg3RndLfoqbdyzAm0eNPSSugE6r8IWu3aWu7ElWeSjS UxRPRK2TCAK4xFSkwRDa1ZdwykEwaANXQvspiOyfizdYojpbbeq+YSnO4yrJ/syI etdydWDNTVD96pJz5owhTWCtlSdLRE8= -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:26 2025 by rpki-client