$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa File: baac2399-6e65-3ceb-8e43-1020ddff7256.roa (raw, json) Hash identifier: kYHc4pRgk/fHLbzwXkNRoBa75lnXeGYCFROyyjHdRH8= Subject key identifier: 14:E9:71:55:E1:7B:FC:AB:4E:F7:3F:D5:55:73:1F:D4:6D:93:01:2A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A9D533A290BD01DB93BF15400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa Signing time: Wed 23 Jul 2025 14:10:22 +0000 ROA not before: Wed 23 Jul 2025 14:10:22 +0000 ROA not after: Tue 21 Oct 2025 14:10:22 +0000 asID: 203 IP address blocks: 130.174.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:53:3a:29:0b:d0:1d:b9:3b:f1:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 23 14:10:22 2025 GMT Not After : Oct 21 14:10:22 2025 GMT Subject: CN=97d49d47-6830-496e-b557-753ad3eea877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:af:11:41:17:9a:5e:e4:9c:73:aa:5e:ef: 9a:6a:5c:a3:de:4d:ce:37:04:0c:81:dc:62:7b:ac: b6:35:fd:0e:77:92:06:f1:1a:08:a8:d4:b9:44:65: 59:b7:04:8a:32:09:6e:ad:97:11:68:14:e0:a4:0e: 14:99:07:96:d9:12:53:1b:70:5b:48:86:65:26:03: 21:4d:d7:7d:8b:5d:33:21:a3:88:30:1b:90:b7:00: 18:ed:2e:b4:dc:05:7f:27:f7:57:7c:50:30:5e:2d: f1:de:56:d9:bd:25:78:16:a2:e7:36:02:85:99:9d: 0e:f5:3b:5f:ce:e7:ec:c3:7c:b1:f2:93:ad:c3:5a: c7:47:0c:3e:43:a9:11:c7:ca:b5:15:76:4f:d2:e5: b3:50:01:99:00:6b:25:c0:9c:bb:bd:7c:6d:2a:59: 7f:bf:36:2b:03:75:7e:98:f4:85:71:cb:38:5a:ad: fc:cd:94:b0:29:7a:19:1c:7c:25:0e:2c:ca:c9:13: 36:13:39:2f:56:5b:f1:5f:01:27:1e:fb:58:73:e5: a1:19:65:f7:24:16:05:f4:1a:22:7a:31:d0:68:c2: c2:76:7f:90:4e:11:d6:98:86:da:b3:ae:65:3b:21: a5:ac:22:22:dd:6e:ab:69:e3:9c:80:5f:ef:0a:cf: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E9:71:55:E1:7B:FC:AB:4E:F7:3F:D5:55:73:1F:D4:6D:93:01:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baac2399-6e65-3ceb-8e43-1020ddff7256.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4d:94:4e:85:49:73:f5:14:c9:1c:dd:21:f0:c8:06:c8:4b: 4c:12:05:65:b7:31:3b:f8:34:08:1c:57:46:b7:05:e9:9a:1a: 4c:1e:bb:63:d1:00:1e:58:30:60:ae:50:b8:8f:2a:59:d5:57: 3b:21:66:ac:3e:a9:a3:e3:83:5e:e8:10:26:e1:8f:53:3e:0a: 3f:b9:44:38:6b:fb:c3:8b:b3:07:e3:47:be:02:41:70:d9:69: 97:4a:17:96:81:00:bf:52:4a:55:0a:3c:30:9d:40:3f:f0:03: ca:fc:08:74:48:40:53:9c:9e:6b:c6:bd:08:ea:02:6c:c9:82: 32:b3:25:e4:2c:fe:cd:c1:ee:10:dd:82:1c:99:55:92:30:e4: 32:6b:83:12:dc:f2:86:29:4c:80:fd:e4:84:27:36:cf:15:95: b0:fd:3d:eb:21:88:4a:f9:f2:1a:fb:52:60:fb:9f:9e:c3:31: bf:72:3b:7b:fe:79:ee:a5:a3:33:3e:e8:60:e2:48:76:92:94: 93:64:95:a9:ec:94:b0:e1:95:af:9c:8c:aa:ed:25:26:6d:22: ad:ba:8a:10:44:6b:96:5c:f0:aa:f3:5d:e4:0f:0e:1c:5e:fa: ad:07:f7:a3:5e:cd:f1:e0:52:27:17:31:17:54:4a:43:87:ce: ea:7d:f1:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdUzopC9AduTvxVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcyMzE0MTAyMloXDTI1MTAyMTE0MTAyMlowLzEtMCsGA1UEAxMk OTdkNDlkNDctNjgzMC00OTZlLWI1NTctNzUzYWQzZWVhODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6KvEUEXml7knHOqXu+aalyj3k3ONwQMgdxi e6y2Nf0Od5IG8RoIqNS5RGVZtwSKMglurZcRaBTgpA4UmQeW2RJTG3BbSIZlJgMh Tdd9i10zIaOIMBuQtwAY7S603AV/J/dXfFAwXi3x3lbZvSV4FqLnNgKFmZ0O9Ttf zufsw3yx8pOtw1rHRww+Q6kRx8q1FXZP0uWzUAGZAGslwJy7vXxtKll/vzYrA3V+ mPSFccs4Wq38zZSwKXoZHHwlDizKyRM2EzkvVlvxXwEnHvtYc+WhGWX3JBYF9Boi ejHQaMLCdn+QThHWmIbas65lOyGlrCIi3W6raeOcgF/vCs9dSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTpcVXhe/yrTvc/1VVzH9RtkwEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFhYzIzOTktNmU2NS0z Y2ViLThlNDMtMTAyMGRkZmY3MjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZNlE6FSXP1FMkc3SHwyAbIS0wSBWW3MTv4NAgcV0a3BemaGkweu2PR AB5YMGCuULiPKlnVVzshZqw+qaPjg17oECbhj1M+Cj+5RDhr+8OLswfjR74CQXDZ aZdKF5aBAL9SSlUKPDCdQD/wA8r8CHRIQFOcnmvGvQjqAmzJgjKzJeQs/s3B7hDd ghyZVZIw5DJrgxLc8oYpTID95IQnNs8VlbD9PeshiEr58hr7UmD7n57DMb9yO3v+ ee6lozM+6GDiSHaSlJNklanslLDhla+cjKrtJSZtIq26ihBEa5Zc8KrzXeQPDhxe +q0H96NezfHgUicXMRdUSkOHzup98RA= -----END CERTIFICATE-----Generated at Fri Aug 8 10:12:51 2025 by rpki-client