$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced08e4d-3d0f-37ba-90d0-168fc086b56d.roa File: ced08e4d-3d0f-37ba-90d0-168fc086b56d.roa (raw, json) Hash identifier: N12pmUj6FuAv9pvOzBF0KSHLvxK+mpRx7SRUgzHX0h4= Subject key identifier: 71:D2:3F:B2:B7:1E:18:17:C7:8C:64:D3:02:0C:3D:56:1F:34:B6:82 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C26A4E2EB3B8D130E780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced08e4d-3d0f-37ba-90d0-168fc086b56d.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 130.174.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c2:6a:4e:2e:b3:b8:d1:30:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=b8c52628-0fc8-4282-bf00-eb581d5c97c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:6c:ee:be:be:b4:52:17:ae:bf:08:8c:5d: da:77:95:1c:be:c1:a4:68:ca:5b:4e:53:3d:2b:be: d8:fe:15:ec:74:d0:fc:c0:31:49:f4:50:83:29:d3: 00:be:20:f3:da:93:4c:4d:8e:dc:e4:d7:2c:1f:8f: 37:f4:78:29:48:9c:30:76:b4:dd:1a:13:4b:12:53: be:8b:31:29:0b:56:0d:b4:bc:12:c2:2c:fe:88:a8: 07:0d:77:8c:ab:ed:1e:f3:84:f7:e9:36:87:60:9e: 9f:bc:7b:47:85:b9:a1:04:e7:20:40:04:3e:ac:d2: 08:cd:37:05:de:46:7b:e6:57:14:76:d6:29:fe:4b: bd:ee:df:a8:2f:c3:25:2d:da:ee:66:e6:d7:98:6c: 54:d5:b3:97:06:bc:40:b4:39:ea:8c:ee:2d:04:60: 95:be:56:9a:3c:47:5a:58:59:1a:75:c9:52:89:f8: 37:4a:78:61:03:1a:8f:ba:4e:16:7b:cc:48:1a:3f: b5:d7:c2:99:74:a9:63:a9:f4:6b:03:80:0a:d4:9c: 97:e2:c2:79:a3:b1:ca:5c:62:73:8f:3e:3e:1e:63: 2b:13:e2:d2:69:f1:2a:b8:09:8a:3a:d6:89:98:7b: 61:d2:ec:4e:1c:12:93:42:6b:29:dd:26:15:2a:80: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D2:3F:B2:B7:1E:18:17:C7:8C:64:D3:02:0C:3D:56:1F:34:B6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced08e4d-3d0f-37ba-90d0-168fc086b56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:26:fd:93:84:ec:66:96:59:ef:e6:c2:d2:44:ac:41:eb:23: 7e:47:fe:79:40:b9:b3:68:04:ad:1a:3e:8d:3a:e0:ba:48:67: 41:63:66:71:99:31:6c:4e:5d:ad:a8:4a:f4:c3:0b:dc:32:97: 3a:23:8d:68:e1:c5:e7:87:5b:43:d2:38:dc:ee:7b:b6:a3:8f: 59:2c:35:a3:1d:da:2b:cc:e8:93:11:5b:c1:1f:8c:0c:71:5b: f6:22:c3:28:ea:6d:1b:73:1f:51:7c:be:3d:3a:e8:e0:31:74: 39:0c:a2:46:d5:ca:c1:a2:f7:a4:e0:1a:74:58:53:41:ac:99: b0:c3:e0:98:3b:dd:7c:e1:a7:fe:03:5d:5c:3e:70:1b:de:cf: 85:95:a4:c9:a4:df:04:86:1a:98:76:ad:29:0c:ca:fc:9c:0a: c0:b8:4c:90:7b:ef:33:77:d9:c8:3e:cb:9f:05:24:92:70:02: 92:26:54:db:02:35:c1:d7:79:d8:c0:3b:4b:eb:74:7b:62:1e: 9a:4f:09:9f:aa:72:c4:96:5d:3f:34:24:23:96:dd:1e:25:f6: 9d:c2:a6:5c:2f:62:e9:8b:af:f2:3a:12:3c:fe:6d:0c:fc:c3: 29:da:80:ed:a7:ab:72:a6:76:db:09:2d:24:34:11:e5:3c:10: 64:0d:17:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98JqTi6zuNEw54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YjhjNTI2MjgtMGZjOC00MjgyLWJmMDAtZWI1ODFkNWM5N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk69s7r6+tFIXrr8IjF3ad5UcvsGkaMpbTlM9 K77Y/hXsdND8wDFJ9FCDKdMAviDz2pNMTY7c5NcsH4839HgpSJwwdrTdGhNLElO+ izEpC1YNtLwSwiz+iKgHDXeMq+0e84T36TaHYJ6fvHtHhbmhBOcgQAQ+rNIIzTcF 3kZ75lcUdtYp/ku97t+oL8MlLdruZubXmGxU1bOXBrxAtDnqjO4tBGCVvlaaPEda WFkadclSifg3SnhhAxqPuk4We8xIGj+118KZdKljqfRrA4AK1JyX4sJ5o7HKXGJz jz4+HmMrE+LSafEquAmKOtaJmHth0uxOHBKTQmsp3SYVKoBhdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHSP7K3HhgXx4xk0wIMPVYfNLaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2VkMDhlNGQtM2QwZi0z N2JhLTkwZDAtMTY4ZmMwODZiNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4m/ZOE7GaWWe/mwtJErEHrI35H/nlAubNoBK0aPo064LpIZ0FjZnGZ MWxOXa2oSvTDC9wylzojjWjhxeeHW0PSONzue7ajj1ksNaMd2ivM6JMRW8EfjAxx W/YiwyjqbRtzH1F8vj066OAxdDkMokbVysGi96TgGnRYU0GsmbDD4Jg73Xzhp/4D XVw+cBvez4WVpMmk3wSGGph2rSkMyvycCsC4TJB77zN32cg+y58FJJJwApImVNsC NcHXedjAO0vrdHtiHppPCZ+qcsSWXT80JCOW3R4l9p3CplwvYumLr/I6Ejz+bQz8 wynagO2nq3KmdtsJLSQ0EeU8EGQNFwY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:41:44 2025 by rpki-client