$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa File: aea4bd98-aff1-364a-905e-fa72b0142204.roa (raw, json) Hash identifier: 8lGegvPxzA6oZyNw0x7OiA3kqKEu7SSnxMCNCqn4Qbk= Subject key identifier: 34:CD:44:3C:84:31:5B:41:6D:74:F6:92:E0:34:0A:86:36:CE:BA:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FC8A909227BE6FBD96CC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 203 IP address blocks: 130.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c8:a9:09:22:7b:e6:fb:d9:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=04f5af5f-cd92-44b3-a74e-8ce3f0322af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bc:62:1d:ad:2d:87:3d:b4:70:68:d1:e5:5e: aa:97:b3:51:34:3d:e0:69:e9:b8:21:95:bc:09:06: 94:73:f5:6d:1f:bf:bf:cf:28:5d:af:74:d5:76:28: 3e:5d:4d:1e:95:31:57:0d:95:79:ca:91:0a:f0:59: a4:42:36:ac:cd:01:aa:e0:0a:24:9c:12:5d:e9:d3: 1b:6b:04:52:14:f7:51:52:82:26:31:58:f4:69:36: 62:cd:a7:bc:dc:1a:2e:84:5f:dd:1b:80:61:fb:6e: ed:8e:24:2f:ce:2c:43:ac:d5:2e:95:85:88:03:cb: 6a:cd:62:c2:ef:96:81:41:72:53:1d:36:8f:e6:51: 37:5f:a0:68:3c:86:b7:86:42:92:a4:fe:45:51:4b: 66:f5:b2:61:36:af:b6:26:51:df:fc:b6:ca:b0:fb: 86:74:ff:9a:26:84:1c:73:0f:02:d7:31:de:ac:02: d6:df:a4:3d:22:42:61:e3:6b:d0:e2:19:b5:5d:b6: ac:4c:e7:34:cf:cd:28:2f:ae:32:1c:94:82:ea:df: 2a:34:3c:46:1b:66:41:a2:bd:fe:c3:cb:17:0c:65: 2e:1f:bf:a8:6a:d5:71:b4:76:fc:f7:49:27:28:94: 1e:37:43:b8:8a:66:3a:db:d9:1e:e9:49:26:ae:d5: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CD:44:3C:84:31:5B:41:6D:74:F6:92:E0:34:0A:86:36:CE:BA:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aea4bd98-aff1-364a-905e-fa72b0142204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:98:56:d5:ce:93:d4:12:c3:97:b9:81:fd:52:29:7e:d2:0e: a5:5a:cb:a7:c3:fa:67:4b:88:a1:74:28:48:e3:b6:79:44:ac: 8f:69:79:62:f1:8c:cf:69:c3:1f:2a:b8:97:a8:ea:d8:91:3d: 9b:55:33:ca:be:ed:c1:90:7c:c0:27:2e:51:35:50:59:c1:ac: ec:67:9a:a5:15:60:1a:f9:61:82:27:c2:b2:df:53:d6:89:67: b3:a7:3c:21:f7:c5:36:f5:38:f4:fd:40:df:76:f9:f3:de:e8: 61:90:cb:bf:88:c2:be:90:02:bb:68:37:88:a1:15:4b:80:ef: 11:26:95:43:4e:fe:ee:cb:f9:3b:90:9d:fb:ff:18:59:e7:f7: e3:45:fd:2f:42:76:20:68:67:2e:9e:d4:67:b8:95:59:4c:20: 99:ef:11:f8:98:8d:56:62:17:57:68:10:a3:70:99:1e:b7:46: 1c:1f:f6:c7:0c:3e:f5:38:d4:60:68:63:92:a5:ac:cd:d4:15: 6a:8c:6f:f6:c4:13:77:2a:b1:cb:de:40:f7:3c:c0:2f:fe:15: c6:0c:15:33:d9:4a:78:0a:6e:dd:ff:da:51:18:ec:60:18:9a: 2c:2f:e5:ee:50:f4:ed:e3:db:ff:b6:c2:55:41:b9:dc:c1:7a: f8:ea:91:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8ipCSJ75vvZbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDRmNWFmNWYtY2Q5Mi00NGIzLWE3NGUtOGNlM2YwMzIyYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirxiHa0thz20cGjR5V6ql7NRND3gaem4IZW8 CQaUc/VtH7+/zyhdr3TVdig+XU0elTFXDZV5ypEK8FmkQjaszQGq4AoknBJd6dMb awRSFPdRUoImMVj0aTZizae83BouhF/dG4Bh+27tjiQvzixDrNUulYWIA8tqzWLC 75aBQXJTHTaP5lE3X6BoPIa3hkKSpP5FUUtm9bJhNq+2JlHf/LbKsPuGdP+aJoQc cw8C1zHerALW36Q9IkJh42vQ4hm1XbasTOc0z80oL64yHJSC6t8qNDxGG2ZBor3+ w8sXDGUuH7+oatVxtHb890knKJQeN0O4imY629ke6UkmrtV3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTNRDyEMVtBbXT2kuA0CoY2zrrCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWVhNGJkOTgtYWZmMS0z NjRhLTkwNWUtZmE3MmIwMTQyMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6YVtXOk9QSw5e5gf1SKX7SDqVay6fD+mdLiKF0KEjjtnlErI9peWLx jM9pwx8quJeo6tiRPZtVM8q+7cGQfMAnLlE1UFnBrOxnmqUVYBr5YYInwrLfU9aJ Z7OnPCH3xTb1OPT9QN92+fPe6GGQy7+Iwr6QArtoN4ihFUuA7xEmlUNO/u7L+TuQ nfv/GFnn9+NF/S9CdiBoZy6e1Ge4lVlMIJnvEfiYjVZiF1doEKNwmR63Rhwf9scM PvU41GBoY5KlrM3UFWqMb/bEE3cqscveQPc8wC/+FcYMFTPZSngKbt3/2lEY7GAY miwv5e5Q9O3j2/+2wlVBudzBevjqkUU= -----END CERTIFICATE-----Generated at Fri Apr 17 18:47:37 2026 by rpki-client