$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca8547cb-d375-3f39-9992-45ad3893024a.roa File: ca8547cb-d375-3f39-9992-45ad3893024a.roa (raw, json) Hash identifier: XjHfP5XWhnOZjjKMj7jO3ZaROtcmfL/1CopJK6bjz7w= Subject key identifier: 9C:22:95:D2:39:1B:0B:C4:72:CD:6F:77:68:1D:FA:F8:F1:CD:D2:D0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D04E245961B28BA145C748740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca8547cb-d375-3f39-9992-45ad3893024a.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 14618 IP address blocks: 130.174.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:45:96:1b:28:ba:14:5c:74:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=37d93ba0-2c39-40fc-bb21-d82d818360e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:86:26:c6:30:54:ae:88:d8:f7:44:c9:d5: 0f:fc:e8:96:ff:3c:80:4f:5c:29:3e:3e:81:2e:42: de:fe:11:60:e4:84:bd:de:52:d3:ad:13:dd:7b:1d: 6a:f7:ec:96:8b:e9:61:02:b2:de:85:4c:8e:c7:ce: 25:69:67:79:20:1b:7e:cd:06:98:80:89:8c:66:06: f2:d2:b8:9a:9e:d3:29:bf:a8:8e:e3:0b:26:4c:02: 44:5c:d1:c5:59:ce:a7:14:cf:47:a6:b3:e7:ab:94: 36:37:ec:5a:0f:e4:67:15:1f:f7:50:48:4c:e3:9f: 25:c1:0f:87:ec:30:e6:d9:63:4d:61:77:cd:c1:fa: c9:5e:16:47:3e:28:c2:dd:05:ea:56:cc:c6:fb:af: c9:13:a5:4a:46:eb:c9:11:c3:ad:10:76:17:7a:03: 0c:96:19:ae:f8:ea:ef:6a:f0:e4:1a:8e:06:86:a9: 6b:2d:79:81:6a:b4:fe:16:80:55:a8:bb:ff:34:89: c1:1c:64:e5:aa:4d:f6:c0:13:0d:5d:7a:ae:1c:2a: 87:ad:2e:1b:66:6c:0f:5a:cf:d0:52:c9:31:34:0b: 2d:10:db:e2:0a:25:ed:61:e6:4d:5a:d3:63:a0:c1: 4e:91:76:db:0c:db:72:9b:b0:6b:ca:cb:b3:83:54: d3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:22:95:D2:39:1B:0B:C4:72:CD:6F:77:68:1D:FA:F8:F1:CD:D2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca8547cb-d375-3f39-9992-45ad3893024a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:07:1d:38:9d:51:74:f4:fe:5c:76:28:c0:0d:5a:b0:bb:2a: ec:99:1f:24:44:5f:4f:0e:14:be:15:ba:17:52:a6:47:ee:6a: 43:60:5f:6c:e3:1d:fa:19:fb:c9:1f:26:7e:2a:28:20:1d:db: a7:a3:da:e2:41:ce:75:3f:dd:bd:d8:c3:f4:c3:dd:86:8c:06: d2:63:ea:c5:76:a4:73:82:64:4a:b9:68:0f:7a:2e:96:a3:a5: a6:97:5c:00:60:2b:85:86:3d:2a:e9:b8:5e:aa:7e:6f:fa:cb: 6e:07:3c:ba:e5:f0:7c:c6:ac:29:47:23:7c:d3:5a:99:b7:5f: a2:33:50:e5:9f:ea:01:09:2f:7e:be:e4:dd:75:d2:3f:2a:0f: e4:dd:6f:c5:44:39:10:ac:17:1e:9a:b3:a5:1e:ab:6c:de:c6: b0:11:98:f1:b3:0a:e4:34:2e:7e:df:7b:94:1d:8d:5b:d8:76: 16:31:bb:90:27:68:3f:af:7c:cf:59:10:c0:e3:46:43:1c:54: cb:e3:f7:bb:48:7e:b4:95:ff:44:29:2a:d1:8a:25:56:cd:9d: 7c:0f:67:1f:bb:3f:d8:31:25:dd:1a:aa:63:f7:e1:3b:ea:f2: f7:90:39:29:7a:55:a8:1e:52:b1:3a:ce:f0:17:e8:fc:ff:27: 7f:8e:4c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kWWGyi6FFx0h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzdkOTNiYTAtMmMzOS00MGZjLWJiMjEtZDgyZDgxODM2MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1biGJsYwVK6I2PdEydUP/OiW/zyAT1wpPj6B LkLe/hFg5IS93lLTrRPdex1q9+yWi+lhArLehUyOx84laWd5IBt+zQaYgImMZgby 0riantMpv6iO4wsmTAJEXNHFWc6nFM9HprPnq5Q2N+xaD+RnFR/3UEhM458lwQ+H 7DDm2WNNYXfNwfrJXhZHPijC3QXqVszG+6/JE6VKRuvJEcOtEHYXegMMlhmu+Orv avDkGo4GhqlrLXmBarT+FoBVqLv/NInBHGTlqk32wBMNXXquHCqHrS4bZmwPWs/Q UskxNAstENviCiXtYeZNWtNjoMFOkXbbDNtym7Brysuzg1TT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwildI5GwvEcs1vd2gd+vjxzdLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2E4NTQ3Y2ItZDM3NS0z ZjM5LTk5OTItNDVhZDM4OTMwMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoHHTidUXT0/lx2KMANWrC7KuyZHyREX08OFL4VuhdSpkfuakNgX2zj HfoZ+8kfJn4qKCAd26ej2uJBznU/3b3Yw/TD3YaMBtJj6sV2pHOCZEq5aA96Lpaj paaXXABgK4WGPSrpuF6qfm/6y24HPLrl8HzGrClHI3zTWpm3X6IzUOWf6gEJL36+ 5N110j8qD+Tdb8VEORCsFx6as6Ueq2zexrARmPGzCuQ0Ln7fe5QdjVvYdhYxu5An aD+vfM9ZEMDjRkMcVMvj97tIfrSV/0QpKtGKJVbNnXwPZx+7P9gxJd0aqmP34Tvq 8veQOSl6VageUrE6zvAX6Pz/J3+OTDY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:31:23 2026 by rpki-client