$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa File: b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa (raw, json) Hash identifier: mhbmtHGru4WfvsWRPz3Z3a/rpkRxqAfVjKzrHRBWL9c= Subject key identifier: DD:87:7F:1F:0B:68:F1:64:97:A8:08:8A:8F:F0:E9:05:74:73:18:D5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF87CC7C729114FEA715D82A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 3360 IP address blocks: 130.174.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c7:c7:29:11:4f:ea:71:5d:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=c84381ca-ffb2-4252-85cf-e38d99da9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:72:14:a3:71:ac:97:03:da:b4:08:b3:e9: 2e:17:f7:2e:cc:f0:c2:71:51:60:48:f7:58:cf:ec: b7:68:2c:b2:2f:9f:19:a7:9d:d7:97:c1:ed:a6:95: cb:92:ca:b3:9c:31:92:7f:c7:d5:0e:10:53:03:57: 74:aa:9f:49:d2:09:8a:8c:1c:16:93:87:a3:fd:a5: e3:02:8d:42:c3:c5:19:7d:15:ef:19:1f:e6:90:f2: 23:05:00:33:f2:f7:89:f1:bf:d3:43:f2:17:33:24: 44:27:bf:b1:3e:c9:5a:b6:3a:b3:06:a5:cf:8d:79: 53:57:37:cc:76:33:38:59:23:35:34:10:07:63:81: 40:b6:39:d9:7f:00:86:b8:b9:31:48:87:5a:29:b0: 5c:50:35:cf:45:55:b2:06:73:c3:2e:c9:97:17:b3: bb:52:e2:7a:c2:17:05:53:91:8e:35:0c:c0:17:34: 51:51:98:7d:6a:4b:68:34:5e:74:83:2e:f0:0f:6a: ea:59:45:76:07:af:c8:ca:d1:c6:72:ca:98:c9:6a: 9b:6f:14:1e:ff:9d:27:ff:15:65:b2:20:d7:79:06: 48:51:a0:94:0b:92:80:15:a2:ab:3a:d8:d6:4f:bf: 0c:34:b7:44:4b:7c:f1:91:95:31:f9:71:39:14:f9: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:7F:1F:0B:68:F1:64:97:A8:08:8A:8F:F0:E9:05:74:73:18:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b4ab1aa0-8ecd-3138-a5a7-e1101a75deeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:06:0d:00:46:68:df:39:7a:fc:70:ae:72:bb:b6:b3:ee:88: 30:e2:be:4b:80:97:92:60:59:07:46:90:44:9f:fa:cf:88:4e: 7a:31:12:8d:6c:48:62:ae:f0:8d:36:d7:26:96:90:90:c5:53: aa:97:fe:61:99:7c:73:8c:e3:cc:1d:5b:89:6d:f5:1a:67:4c: 4a:16:c4:d2:b1:99:69:57:b5:10:c7:4f:7e:2c:e7:29:bf:ec: f1:47:a7:a4:14:6c:ee:62:e1:42:fa:5b:27:aa:85:2b:ed:ea: 8b:56:07:14:cf:df:b7:fd:79:7c:af:8f:58:3e:3d:84:b5:cc: e1:9a:18:a8:f9:28:aa:fb:4d:66:4e:47:2f:7e:e4:80:d7:3a: 77:ee:9b:d1:7b:9c:04:e3:f4:e1:7a:97:cd:69:a7:bb:3e:f8: a1:fd:87:cd:06:e7:a5:97:7a:25:65:7c:91:83:bb:eb:04:05: 3a:a9:04:af:12:88:07:5e:56:b2:7b:ec:79:d9:67:d3:ec:45: b1:a1:39:09:c9:58:b4:81:46:a5:f3:b4:c6:80:c0:be:e8:ec: 78:9b:b6:1c:8c:22:58:62:b4:4b:b9:1c:c7:dd:e4:28:1f:91: e8:27:3b:10:01:63:63:0f:23:67:2f:3e:fc:4e:cd:9d:f5:9c: 5e:40:22:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMfHKRFP6nFdgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk Yzg0MzgxY2EtZmZiMi00MjUyLTg1Y2YtZTM4ZDk5ZGE5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1NyFKNxrJcD2rQIs+kuF/cuzPDCcVFgSPdY z+y3aCyyL58Zp53Xl8HtppXLksqznDGSf8fVDhBTA1d0qp9J0gmKjBwWk4ej/aXj Ao1Cw8UZfRXvGR/mkPIjBQAz8veJ8b/TQ/IXMyREJ7+xPslatjqzBqXPjXlTVzfM djM4WSM1NBAHY4FAtjnZfwCGuLkxSIdaKbBcUDXPRVWyBnPDLsmXF7O7UuJ6whcF U5GONQzAFzRRUZh9aktoNF50gy7wD2rqWUV2B6/IytHGcsqYyWqbbxQe/50n/xVl siDXeQZIUaCUC5KAFaKrOtjWT78MNLdES3zxkZUx+XE5FPm0JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2Hfx8LaPFkl6gIio/w6QV0cxjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjRhYjFhYTAtOGVjZC0z MTM4LWE1YTctZTExMDFhNzVkZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0GDQBGaN85evxwrnK7trPuiDDivkuAl5JgWQdGkESf+s+ITnoxEo1s SGKu8I021yaWkJDFU6qX/mGZfHOM48wdW4lt9RpnTEoWxNKxmWlXtRDHT34s5ym/ 7PFHp6QUbO5i4UL6WyeqhSvt6otWBxTP37f9eXyvj1g+PYS1zOGaGKj5KKr7TWZO Ry9+5IDXOnfum9F7nATj9OF6l81pp7s++KH9h80G56WXeiVlfJGDu+sEBTqpBK8S iAdeVrJ77HnZZ9PsRbGhOQnJWLSBRqXztMaAwL7o7HibthyMIlhitEu5HMfd5Cgf kegnOxABY2MPI2cvPvxOzZ31nF5AIgo= -----END CERTIFICATE-----Generated at Sun Sep 20 23:19:59 2026 by rpki-client