$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa File: b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa (raw, json) Hash identifier: c2kLuwxaGm27aX0x3mdMHPO7yARNV36AkKuia/A6aoY= Subject key identifier: A4:A8:C5:6D:EA:D3:F9:5E:2A:66:A9:9E:F4:F7:4B:96:EE:B0:5D:3F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D216CD9C4F735E5B23F40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3360 IP address blocks: 130.174.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:21:6c:d9:c4:f7:35:e5:b2:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=2746d6a2-32e8-463b-88d3-0606917db8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:65:29:2a:59:61:0a:b8:5d:03:18:a8:89: 46:80:df:32:d7:29:28:ac:49:f1:f6:eb:31:b9:19: 48:6a:f1:74:7b:75:3e:eb:eb:4c:50:6d:cf:9a:5c: b1:94:91:d0:88:d2:b4:00:26:d0:38:14:48:63:18: 9e:59:8d:7f:b8:5a:88:9b:fd:45:88:ef:f9:b4:9a: 87:a4:3c:00:c8:48:fd:9d:fb:f4:3e:e2:17:7c:3a: 91:fc:c1:ce:89:cc:00:ff:c0:76:90:01:d3:bf:df: 92:47:4c:32:c1:d3:3a:cd:bd:2b:40:12:e4:a3:ec: 17:f8:34:1a:98:bf:12:77:65:b6:5c:62:53:a6:ec: 6d:7c:55:6f:66:85:83:b5:b4:9c:04:70:ff:57:94: 9d:53:56:57:1c:23:fc:6e:4f:90:dc:76:4c:84:ea: a5:49:7d:dc:f6:67:24:88:a5:48:8a:fa:61:a7:a3: f7:d8:df:3a:c3:ff:a2:04:a0:67:ee:4c:93:b8:95: a3:81:58:68:dd:56:23:fd:bd:ea:bb:00:06:f7:09: 4b:a6:ea:bd:24:cf:f5:8e:97:12:7e:78:29:3d:20: e3:62:63:2b:2d:8e:e3:a6:d9:09:50:32:07:5f:27: 0d:25:36:21:fe:01:74:50:9f:11:30:9f:a5:ad:5b: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A8:C5:6D:EA:D3:F9:5E:2A:66:A9:9E:F4:F7:4B:96:EE:B0:5D:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d7:12:25:45:7d:51:f9:20:bd:e9:e0:f7:02:60:d4:64:9e: b1:fb:d3:d1:42:39:9a:9f:ed:55:0e:ba:04:4f:8b:b2:21:c8: 78:d7:86:5f:49:3c:74:cd:05:52:56:c8:be:84:9a:f9:24:a5: ed:1f:80:9d:e0:8f:77:08:ba:f6:22:f9:72:cc:ee:8d:d9:77: e4:d4:35:d8:50:91:29:04:28:b0:1b:44:fe:5d:9d:27:7d:34: d2:8f:27:ba:d0:b0:74:7f:93:f8:49:93:11:3e:7e:d2:36:ee: 2f:75:b9:be:6a:bd:d8:6f:23:93:6c:ba:70:73:df:f0:8a:90: 5b:d8:48:74:a7:62:b2:31:e9:ea:0e:6a:d0:aa:fb:4b:7e:e2: c0:c9:a1:73:1a:c3:2b:27:e5:cd:25:03:b9:a7:5b:f6:a7:4b: ea:df:2e:92:75:23:9e:8f:4f:e7:c6:83:33:0d:66:58:ce:1c: 77:19:a9:88:37:71:f5:46:d5:fc:ba:fb:76:f2:0c:bd:61:ee: 8e:a7:19:b2:e7:d5:85:68:22:64:44:32:e4:05:a9:3c:9b:d0: c9:eb:27:af:07:a2:9b:14:6e:07:f5:bc:09:e3:e9:1a:02:94: d0:b7:42:13:6d:6c:e1:4c:d9:01:a4:20:df:a9:5f:57:33:b8: 4f:ad:b4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSFs2cT3NeWyP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Mjc0NmQ2YTItMzJlOC00NjNiLTg4ZDMtMDYwNjkxN2RiOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljplKSpZYQq4XQMYqIlGgN8y1ykorEnx9usx uRlIavF0e3U+6+tMUG3PmlyxlJHQiNK0ACbQOBRIYxieWY1/uFqIm/1FiO/5tJqH pDwAyEj9nfv0PuIXfDqR/MHOicwA/8B2kAHTv9+SR0wywdM6zb0rQBLko+wX+DQa mL8Sd2W2XGJTpuxtfFVvZoWDtbScBHD/V5SdU1ZXHCP8bk+Q3HZMhOqlSX3c9mck iKVIivphp6P32N86w/+iBKBn7kyTuJWjgVho3VYj/b3quwAG9wlLpuq9JM/1jpcS fngpPSDjYmMrLY7jptkJUDIHXycNJTYh/gF0UJ8RMJ+lrVs7lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSoxW3q0/leKmapnvT3S5busF0/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRhYjFhYTAtOGVjZC0z MTM4LWE1YTctZTExMDFhNzVkZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbXEiVFfVH5IL3p4PcCYNRknrH709FCOZqf7VUOugRPi7IhyHjXhl9J PHTNBVJWyL6Emvkkpe0fgJ3gj3cIuvYi+XLM7o3Zd+TUNdhQkSkEKLAbRP5dnSd9 NNKPJ7rQsHR/k/hJkxE+ftI27i91ub5qvdhvI5NsunBz3/CKkFvYSHSnYrIx6eoO atCq+0t+4sDJoXMawysn5c0lA7mnW/anS+rfLpJ1I56PT+fGgzMNZljOHHcZqYg3 cfVG1fy6+3byDL1h7o6nGbLn1YVoImREMuQFqTyb0MnrJ68HopsUbgf1vAnj6RoC lNC3QhNtbOFM2QGkIN+pX1czuE+ttH8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:41 2025 by rpki-client