$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0b27127-aac0-3dad-8dea-b765024f6d36.roa File: d0b27127-aac0-3dad-8dea-b765024f6d36.roa (raw, json) Hash identifier: 4P0jpC+UdHejuo6u9k0b8lIqU2ILlugIqAhDh8/5Y+Y= Subject key identifier: 39:92:9A:5B:20:78:7A:81:61:51:5C:DA:D5:F3:EE:68:52:C5:46:87 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D746FC8F23C75DE8F444D5780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0b27127-aac0-3dad-8dea-b765024f6d36.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 130.174.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c8:f2:3c:75:de:8f:44:4d:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=fd7e29d4-e25f-4358-a2d7-3f825f297927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:22:6e:84:33:61:88:e6:d5:ba:7a:27:33:b4: 9f:10:69:eb:97:aa:f1:97:76:49:27:ad:42:23:1b: 8a:06:25:5e:51:64:cf:89:4c:24:5d:3d:e2:6c:71: 0f:3e:d1:de:49:cf:f0:7e:26:b6:99:98:58:ad:4a: 78:17:d0:b1:61:46:b3:c6:2a:07:f3:d9:35:bc:80: 5f:2f:31:0f:a6:3a:9b:0c:fc:c4:31:4c:b8:c4:58: d5:7f:19:a5:ba:b9:b4:b8:e2:9a:46:ce:f6:11:d2: f6:2c:1b:7a:ff:9f:b8:06:3f:aa:cf:3d:a3:f6:00: ef:9c:23:7e:27:81:34:a0:7f:77:13:66:9d:e3:45: 37:41:51:d5:26:d9:f8:fe:7e:a0:6d:28:c9:3a:63: 88:2b:66:28:90:5c:c3:d2:90:06:fa:a9:3e:17:43: 7e:a9:a7:85:f9:63:74:09:ad:37:b7:62:4e:a0:3d: 16:d8:c2:82:ec:2c:67:8a:2c:d3:e6:20:b6:25:38: 02:4c:6b:a0:1c:a8:eb:58:03:25:8e:77:b5:b6:20: de:b1:19:ac:ad:60:ed:1d:73:8c:1c:fc:bc:dd:53: 15:b8:65:8f:53:8b:73:29:5b:72:80:03:29:4b:db: fa:21:4a:51:ce:fe:04:cc:25:cf:65:36:c0:be:32: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:9A:5B:20:78:7A:81:61:51:5C:DA:D5:F3:EE:68:52:C5:46:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0b27127-aac0-3dad-8dea-b765024f6d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:72:2a:3e:b1:cb:60:a8:e2:41:b6:93:e6:a4:8b:8e:df:3e: 65:fb:a7:f8:8d:4b:60:cd:88:93:ea:62:f1:a8:89:de:1b:0a: b1:40:59:5d:a1:2e:6d:60:a5:92:8f:a1:7b:f4:21:3b:80:c4: 63:cd:6b:fc:2e:ab:89:62:e9:b1:8d:7c:1e:93:7b:66:0e:96: dd:6f:ca:f1:a3:1a:4d:b0:95:5a:b7:4f:e8:f6:78:87:e3:c2: 6e:5f:60:7a:8c:6c:b9:33:8d:e8:39:bf:ee:f7:68:c2:b7:16: 14:7d:75:45:6f:6a:56:ae:f1:51:14:4c:10:b8:40:1a:54:84: bd:06:05:0f:0e:4e:b4:68:f6:df:c2:89:5a:45:22:c0:54:96: 5a:0a:3c:24:bb:11:eb:af:2b:61:c5:09:cb:ed:d0:b0:69:7c: 63:95:81:72:8b:48:e6:c4:af:92:dd:4c:6a:cf:48:62:f0:1f: 40:bb:79:ec:d5:e1:d4:9f:28:30:6f:c7:92:26:08:0f:7a:66: 67:6a:c7:d4:0c:f6:76:d2:45:07:10:0c:40:98:09:56:d5:4d: 30:1a:17:f4:71:37:af:17:32:d9:d2:af:a2:73:98:ec:f3:ea: 24:19:81:00:5d:45:71:ac:f5:40:32:d8:3e:8a:78:a0:a8:a0: 42:ad:55:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8jyPHXej0RNV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZmQ3ZTI5ZDQtZTI1Zi00MzU4LWEyZDctM2Y4MjVmMjk3OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyJuhDNhiObVunonM7SfEGnrl6rxl3ZJJ61C IxuKBiVeUWTPiUwkXT3ibHEPPtHeSc/wfia2mZhYrUp4F9CxYUazxioH89k1vIBf LzEPpjqbDPzEMUy4xFjVfxmlurm0uOKaRs72EdL2LBt6/5+4Bj+qzz2j9gDvnCN+ J4E0oH93E2ad40U3QVHVJtn4/n6gbSjJOmOIK2YokFzD0pAG+qk+F0N+qaeF+WN0 Ca03t2JOoD0W2MKC7CxniizT5iC2JTgCTGugHKjrWAMljne1tiDesRmsrWDtHXOM HPy83VMVuGWPU4tzKVtygAMpS9v6IUpRzv4EzCXPZTbAvjLMQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmSmlsgeHqBYVFc2tXz7mhSxUaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDBiMjcxMjctYWFjMC0z ZGFkLThkZWEtYjc2NTAyNGY2ZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1yKj6xy2Co4kG2k+aki47fPmX7p/iNS2DNiJPqYvGoid4bCrFAWV2h Lm1gpZKPoXv0ITuAxGPNa/wuq4li6bGNfB6Te2YOlt1vyvGjGk2wlVq3T+j2eIfj wm5fYHqMbLkzjeg5v+73aMK3FhR9dUVvalau8VEUTBC4QBpUhL0GBQ8OTrRo9t/C iVpFIsBUlloKPCS7EeuvK2HFCcvt0LBpfGOVgXKLSObEr5LdTGrPSGLwH0C7eezV 4dSfKDBvx5ImCA96Zmdqx9QM9nbSRQcQDECYCVbVTTAaF/RxN68XMtnSr6JzmOzz 6iQZgQBdRXGs9UAy2D6KeKCooEKtVe4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:30:40 2026 by rpki-client