$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa File: bfb6b141-6a57-3161-831c-725299707029.roa (raw, json) Hash identifier: ZdOj/b0Ls3N6TMLTu6WurcfqSPpf9q95dUfjKED4RfU= Subject key identifier: 9A:22:B1:AF:24:C1:54:BD:60:AE:FB:D4:98:14:91:5B:F8:63:0A:56 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FD526E854A7BBB4C61200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3360 IP address blocks: 130.174.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:d5:26:e8:54:a7:bb:b4:c6:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=1d963ac5-bdff-429b-93a6-d245f734d42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:89:ce:35:3f:53:da:6f:0e:d0:9c:e2:56: f5:97:e2:76:6d:42:69:2b:d6:f3:43:7a:ae:0d:fa: bf:6c:f2:a4:c2:35:06:54:95:94:0d:41:e6:3b:bd: a7:d6:55:d6:c8:2c:98:b5:ee:54:2d:22:6f:a4:ff: 10:4a:f2:b5:28:eb:a5:b4:53:88:36:c5:3e:10:e5: 4a:c0:f5:ec:d1:b8:05:71:3c:ee:3b:3b:3b:89:0c: bd:6d:18:82:05:11:65:76:9c:f5:a6:67:56:2d:8b: 94:17:78:dd:72:87:e2:5b:8f:ab:72:ef:72:ac:30: 2b:e2:6f:44:02:ad:28:73:7c:2d:5c:c1:03:8a:74: a3:fd:9d:4d:e7:ab:f9:54:92:b3:ad:ec:31:68:5e: 92:f0:05:11:4e:92:0e:82:58:c5:59:54:d9:cc:45: e2:71:0a:d5:06:c2:44:c7:9f:1b:43:f4:a5:7b:13: ef:e1:e3:d5:9e:59:94:cd:da:ba:84:44:f3:21:bb: 1d:70:a0:51:ff:f4:da:24:ab:9f:33:1f:d1:39:65: da:21:03:69:f0:0b:a3:41:02:9d:bc:b8:ed:d3:d4: 88:9c:70:7f:df:32:41:2e:25:9b:b5:80:69:eb:51: 15:10:97:ab:b3:be:c5:34:5a:d3:56:de:7d:38:68: 1d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:22:B1:AF:24:C1:54:BD:60:AE:FB:D4:98:14:91:5B:F8:63:0A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9a:ab:f2:9e:e5:60:ac:34:af:4a:3a:f5:40:6b:9a:03:aa: 67:60:94:54:cc:b0:c6:9d:de:5d:73:e1:13:04:12:20:31:55: b7:57:d8:09:cf:4a:b8:c3:7e:32:d8:90:67:2e:21:31:9f:d1: d2:fe:c9:33:04:c4:0a:2d:25:6e:45:e3:f5:48:a0:67:5e:ea: 61:1e:37:53:e7:b1:74:ff:2a:87:4b:1c:71:a1:5a:9f:10:49: 59:05:81:60:89:a0:2a:26:c3:2b:76:7e:c1:f8:14:25:56:7a: d0:b2:78:13:24:8c:8c:b2:6e:c3:e7:89:43:5b:c0:bd:46:6d: 5a:ae:9e:05:18:76:87:fb:97:da:21:68:93:e7:b3:49:f4:13: db:87:cb:94:ef:5e:61:c6:d2:e5:34:bf:c9:1d:a1:13:33:ca: 3e:3b:f9:c7:bd:51:ef:69:35:7b:fb:23:1d:43:7f:c2:52:e8: e8:e4:d1:d8:f1:23:57:23:78:74:09:1f:b3:31:86:a5:08:a7: 10:27:a6:93:b7:29:c8:7a:45:9e:39:cd:66:71:37:e4:9a:98: 40:f2:aa:1b:17:9f:2b:6e:4d:0e:75:7d:6f:98:16:0a:6d:2c: 9d:3f:45:22:68:92:50:e2:19:b6:40:d4:44:2d:81:c6:ae:54: 12:38:00:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9Um6FSnu7TGEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MWQ5NjNhYzUtYmRmZi00MjliLTkzYTYtZDI0NWY3MzRkNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjruJzjU/U9pvDtCc4lb1l+J2bUJpK9bzQ3qu Dfq/bPKkwjUGVJWUDUHmO72n1lXWyCyYte5ULSJvpP8QSvK1KOultFOINsU+EOVK wPXs0bgFcTzuOzs7iQy9bRiCBRFldpz1pmdWLYuUF3jdcofiW4+rcu9yrDAr4m9E Aq0oc3wtXMEDinSj/Z1N56v5VJKzrewxaF6S8AURTpIOgljFWVTZzEXicQrVBsJE x58bQ/SlexPv4ePVnlmUzdq6hETzIbsdcKBR//TaJKufMx/ROWXaIQNp8AujQQKd vLjt09SInHB/3zJBLiWbtYBp61EVEJers77FNFrTVt59OGgdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoisa8kwVS9YK771JgUkVv4YwpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZiNmIxNDEtNmE1Ny0z MTYxLTgzMWMtNzI1Mjk5NzA3MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOaq/Ke5WCsNK9KOvVAa5oDqmdglFTMsMad3l1z4RMEEiAxVbdX2AnP SrjDfjLYkGcuITGf0dL+yTMExAotJW5F4/VIoGde6mEeN1PnsXT/KodLHHGhWp8Q SVkFgWCJoComwyt2fsH4FCVWetCyeBMkjIyybsPniUNbwL1GbVqungUYdof7l9oh aJPns0n0E9uHy5TvXmHG0uU0v8kdoRMzyj47+ce9Ue9pNXv7Ix1Df8JS6Ojk0djx I1cjeHQJH7MxhqUIpxAnppO3Kch6RZ45zWZxN+SamEDyqhsXnytuTQ51fW+YFgpt LJ0/RSJoklDiGbZA1EQtgcauVBI4AO4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:03:29 2026 by rpki-client