$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aca7f9a1-f182-3ab3-bf51-eef187f44a94.roa File: aca7f9a1-f182-3ab3-bf51-eef187f44a94.roa (raw, json) Hash identifier: gDrA2i4jPmVyKkIrKND+QVjHI5weS600Ly9ogB+3PQg= Subject key identifier: 70:82:7A:27:09:02:1A:15:F9:00:4D:2F:AB:D5:5D:80:10:57:E2:E3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D3048CB23B4FD27738400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aca7f9a1-f182-3ab3-bf51-eef187f44a94.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3360 IP address blocks: 130.174.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:30:48:cb:23:b4:fd:27:73:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=61e0cc0f-78cc-4288-98e4-78d42d09d48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:c4:c0:1f:59:03:d8:b8:49:d9:98:4c:15: 02:d9:de:b2:f4:88:84:a3:db:d1:44:b5:aa:65:aa: 5c:99:eb:e9:62:41:a7:e8:f4:b2:49:ff:42:41:c9: 35:f5:4e:12:64:71:81:e2:aa:71:aa:fc:37:d9:18: e2:59:8c:c5:a7:84:50:38:c7:74:13:33:6c:f3:87: 17:e1:ed:8e:b1:62:06:77:ef:a4:5e:f6:2e:5d:ab: 17:9a:3f:97:2e:0c:63:71:33:e8:e1:fa:e4:1d:53: f0:ea:c7:09:f4:15:b1:87:bf:6a:c9:a5:f0:17:f2: f7:a2:11:0f:d0:f3:83:13:4d:37:8d:9c:0a:81:8e: c6:59:28:8f:61:ef:d5:a3:1f:44:6e:81:38:b1:e2: e8:cf:61:f9:6a:bf:92:2a:87:ec:84:25:49:d9:84: e0:68:62:7c:ba:f4:f4:8c:64:8e:73:1d:91:d3:32: bb:74:09:8e:04:17:c1:18:18:8d:64:af:34:4c:a2: cb:f7:6a:1e:62:fe:bb:01:ee:f3:fd:29:dd:94:27: 72:27:14:c7:86:da:16:01:61:0c:07:00:0c:71:e3: 6c:d6:13:55:a5:9e:bc:15:e2:68:d8:17:0a:03:78: c0:d8:d6:87:50:aa:32:3e:1b:3f:92:a9:01:8a:4e: 67:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:7A:27:09:02:1A:15:F9:00:4D:2F:AB:D5:5D:80:10:57:E2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aca7f9a1-f182-3ab3-bf51-eef187f44a94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:21:20:0f:8d:cc:77:06:87:b5:79:62:51:86:b4:ac:09:98: 04:e1:38:68:34:9d:08:a3:59:d0:45:c3:a9:4b:f7:4f:0a:03: 6a:9f:03:0a:de:4a:b4:ba:51:43:9a:98:68:60:63:07:1a:e1: 09:41:7d:92:68:3d:c3:44:7c:8f:4c:09:44:8d:b5:5e:ec:87: 18:94:e2:c4:a7:3e:67:41:fb:ac:4a:fa:31:6a:a5:8a:14:fb: 94:4f:c8:03:f4:8b:f8:dd:b3:7a:8a:e7:92:05:5e:24:dc:f1: cb:aa:22:00:f7:02:36:d5:cd:f6:2e:08:71:02:93:4a:84:4a: 3e:95:18:4b:f6:b4:df:40:45:f8:af:9b:87:7f:00:3d:09:c9: 86:bd:33:c8:70:c5:0f:1c:2c:0c:6b:70:3b:2e:83:a0:d8:13: 8d:c7:18:6c:6b:74:38:16:1d:80:2d:9a:f3:de:99:5a:e5:46: 91:2f:26:02:29:95:83:a8:5b:3b:d9:4d:9c:72:3d:64:a5:9c: f4:a2:56:7d:b1:7f:93:06:0f:8e:71:25:ed:96:53:80:ce:9c: fb:07:ce:68:89:da:a1:24:9f:57:26:2c:35:33:8b:4f:75:3e: ba:f8:f4:ab:c9:a6:ea:d3:1b:32:5c:9a:17:3e:4e:7b:e9:92: 89:9f:25:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTBIyyO0/SdzhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NjFlMGNjMGYtNzhjYy00Mjg4LTk4ZTQtNzhkNDJkMDlkNDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0vEwB9ZA9i4SdmYTBUC2d6y9IiEo9vRRLWq ZapcmevpYkGn6PSySf9CQck19U4SZHGB4qpxqvw32RjiWYzFp4RQOMd0EzNs84cX 4e2OsWIGd++kXvYuXasXmj+XLgxjcTPo4frkHVPw6scJ9BWxh79qyaXwF/L3ohEP 0PODE003jZwKgY7GWSiPYe/Vox9EboE4seLoz2H5ar+SKofshCVJ2YTgaGJ8uvT0 jGSOcx2R0zK7dAmOBBfBGBiNZK80TKLL92oeYv67Ae7z/SndlCdyJxTHhtoWAWEM BwAMceNs1hNVpZ68FeJo2BcKA3jA2NaHUKoyPhs/kqkBik5nRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCCeicJAhoV+QBNL6vVXYAQV+LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWNhN2Y5YTEtZjE4Mi0z YWIzLWJmNTEtZWVmMTg3ZjQ0YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEchIA+NzHcGh7V5YlGGtKwJmAThOGg0nQijWdBFw6lL908KA2qfAwre SrS6UUOamGhgYwca4QlBfZJoPcNEfI9MCUSNtV7shxiU4sSnPmdB+6xK+jFqpYoU +5RPyAP0i/jds3qK55IFXiTc8cuqIgD3AjbVzfYuCHECk0qESj6VGEv2tN9ARfiv m4d/AD0JyYa9M8hwxQ8cLAxrcDsug6DYE43HGGxrdDgWHYAtmvPemVrlRpEvJgIp lYOoWzvZTZxyPWSlnPSiVn2xf5MGD45xJe2WU4DOnPsHzmiJ2qEkn1cmLDUzi091 Prr49KvJpurTGzJcmhc+TnvpkomfJS0= -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:27 2025 by rpki-client