$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa File: ab087d20-9084-39ca-9395-d2254d2fa85d.roa (raw, json) Hash identifier: fgH2d1QBdiUFZ3Yx1Qi+CjOjPNwmBVJfZF7aOfS8CR0= Subject key identifier: A5:BC:E8:AA:E9:D2:0C:23:82:E0:48:E8:D3:F3:8A:CD:B4:35:CD:9A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF71775B104DC4F5999EFF1A8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3356 IP address blocks: 130.174.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:75:b1:04:dc:4f:59:99:ef:f1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=dcc75942-d94c-4789-bfbe-886276db7688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:b4:56:b8:c9:4b:3f:59:cd:59:8a:27:be: 44:d7:a4:05:29:32:62:44:27:a9:6e:52:32:8b:4e: cc:1a:99:e4:24:9a:e5:22:f1:55:0e:f3:36:49:cd: f8:f0:aa:fe:f7:54:d1:04:3a:06:18:60:f5:14:b2: c4:69:2a:de:ef:df:98:1c:df:41:b5:2c:00:40:a3: 3a:3d:60:a7:ca:86:99:23:a9:98:49:e2:27:5a:06: 17:4b:dd:2f:11:15:aa:cb:f2:7d:21:99:aa:4a:e0: 5e:8b:57:21:37:09:05:28:78:64:11:a7:4c:9d:0d: 9a:70:ac:2b:9b:5a:be:26:73:4e:78:2f:3c:85:8a: 69:39:75:53:a6:46:7f:ab:ef:e5:98:19:28:71:08: 2e:ef:70:f2:56:90:c5:24:af:fb:9b:06:42:4f:c4: 96:cd:09:67:f1:6d:d2:66:42:d7:15:8c:b2:42:8e: 67:b1:5c:94:f6:0a:c1:78:ea:91:5e:f9:dc:96:1f: 9b:ae:f0:f1:26:24:5b:6e:36:34:e8:f3:40:19:52: 80:b6:e7:6e:3f:54:54:0c:db:0e:78:f8:86:79:ff: 74:a5:12:ff:d7:4a:af:88:7f:ca:5a:0d:c0:93:af: 62:12:dd:32:24:db:70:0b:ec:7a:20:45:a9:d1:6d: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BC:E8:AA:E9:D2:0C:23:82:E0:48:E8:D3:F3:8A:CD:B4:35:CD:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ab087d20-9084-39ca-9395-d2254d2fa85d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7b:36:cb:4c:c5:bb:4b:bf:da:5a:a3:89:57:18:5b:13:5d: 4e:51:a3:c8:45:d2:7f:ed:25:ef:42:1e:5b:ce:70:c8:4d:b9: 81:a8:ae:e9:d6:61:5c:1c:46:67:4c:fe:5c:a7:d9:2e:9d:71: 3d:e8:9a:e5:d6:14:d7:3f:34:bd:2c:cf:32:c6:22:fb:07:11: 8b:f3:f0:d7:d6:41:8d:22:31:d5:cd:c9:05:66:a1:5a:ee:bd: 51:fd:c9:9b:db:6f:2b:29:5a:c5:d4:c1:de:97:d5:91:a6:08: c8:dd:01:a9:1d:c5:e8:fa:81:46:d5:03:7c:62:61:2c:c0:4f: 2b:e9:0c:63:af:01:06:d4:57:16:c8:3a:2e:52:df:14:fd:68: 19:3c:90:31:d7:a9:12:57:38:08:e7:99:2e:4a:c4:3d:c0:31: 7d:30:1a:f3:76:ef:dd:35:8f:43:3b:5b:42:b8:09:ff:22:c0: a7:fa:54:80:bf:ee:79:31:2e:6b:e6:31:dc:ed:26:0b:74:50: 25:4c:cb:00:f7:73:7b:04:31:7a:10:1c:1f:5e:0f:d8:a0:f5: 63:f6:35:58:bd:bf:5d:b7:78:aa:c6:48:cd:20:f9:f5:6a:79: fe:29:1d:ce:08:92:1e:6a:f8:ef:1a:dd:f3:f8:92:35:76:6f: a4:1a:bd:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3WxBNxPWZnv8agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGNjNzU5NDItZDk0Yy00Nzg5LWJmYmUtODg2Mjc2ZGI3Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/20VrjJSz9ZzVmKJ75E16QFKTJiRCepblIy i07MGpnkJJrlIvFVDvM2Sc348Kr+91TRBDoGGGD1FLLEaSre79+YHN9BtSwAQKM6 PWCnyoaZI6mYSeInWgYXS90vERWqy/J9IZmqSuBei1chNwkFKHhkEadMnQ2acKwr m1q+JnNOeC88hYppOXVTpkZ/q+/lmBkocQgu73DyVpDFJK/7mwZCT8SWzQln8W3S ZkLXFYyyQo5nsVyU9grBeOqRXvnclh+brvDxJiRbbjY06PNAGVKAtuduP1RUDNsO ePiGef90pRL/10qviH/KWg3Ak69iEt0yJNtwC+x6IEWp0W3OdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW86Krp0gwjguBI6NPzis20Nc2aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWIwODdkMjAtOTA4NC0z OWNhLTkzOTUtZDIyNTRkMmZhODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE17NstMxbtLv9pao4lXGFsTXU5Ro8hF0n/tJe9CHlvOcMhNuYGorunW YVwcRmdM/lyn2S6dcT3omuXWFNc/NL0szzLGIvsHEYvz8NfWQY0iMdXNyQVmoVru vVH9yZvbbyspWsXUwd6X1ZGmCMjdAakdxej6gUbVA3xiYSzATyvpDGOvAQbUVxbI Oi5S3xT9aBk8kDHXqRJXOAjnmS5KxD3AMX0wGvN27901j0M7W0K4Cf8iwKf6VIC/ 7nkxLmvmMdztJgt0UCVMywD3c3sEMXoQHB9eD9ig9WP2NVi9v123eKrGSM0g+fVq ef4pHc4Ikh5q+O8a3fP4kjV2b6QavXY= -----END CERTIFICATE-----Generated at Sun Sep 20 18:56:58 2026 by rpki-client