$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6ac5822-90da-3339-98f4-30f4192cf0f3.roa File: d6ac5822-90da-3339-98f4-30f4192cf0f3.roa (raw, json) Hash identifier: vNPMTS/38dvjtGqKf8aILtZ3ge9FhR33hcaCVImDOKE= Subject key identifier: 67:6F:8C:36:86:01:8A:72:73:A0:82:10:5E:D3:20:A6:18:B7:3F:3B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7CDA59527B418CED6FB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6ac5822-90da-3339-98f4-30f4192cf0f3.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 202 IP address blocks: 130.174.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:cd:a5:95:27:b4:18:ce:d6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=1f4d5243-6912-4c6e-92b4-77037fc94ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c2:20:ff:52:90:1b:b7:ab:f7:90:eb:b4:f6: 4c:2c:a9:63:45:c4:0a:78:ff:67:30:3b:c7:18:4e: 16:95:e8:c6:a0:3a:56:d8:a5:84:36:9d:fe:f5:8f: d0:be:88:c0:17:bc:a8:8a:d4:58:47:f3:31:48:18: 6c:a4:ca:fe:e5:06:84:ed:7e:27:74:57:59:5e:da: 82:9d:1b:7d:4e:d8:9e:cb:81:96:7f:ac:a9:5b:ca: eb:c5:9a:ef:0c:80:18:88:12:ea:90:2b:30:a0:54: 66:b7:4f:cc:62:a4:a0:c4:fb:33:e0:82:da:66:cf: 07:80:1b:b6:77:b5:28:40:45:e7:4a:7d:75:d7:64: e2:6d:95:95:51:61:0b:64:2c:07:ed:d7:15:38:87: 9c:74:4a:bf:f7:2b:cc:b4:4e:f8:d1:37:4b:a9:92: 06:38:36:14:98:8a:48:6c:f2:c2:66:fe:fe:35:be: ff:72:a9:da:91:c2:bb:f8:e2:f8:e4:5b:54:e1:4b: 1d:61:7d:6f:d8:d6:83:35:05:21:9c:a2:2b:fb:b0: 27:06:2d:d9:3f:6d:4f:3c:29:85:9e:66:f6:eb:b5: d0:00:7a:e4:c8:fb:d5:74:31:97:0e:72:22:d8:5a: 99:23:61:4e:3b:36:ee:03:78:2e:66:06:5c:fe:d5: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:8C:36:86:01:8A:72:73:A0:82:10:5E:D3:20:A6:18:B7:3F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d6ac5822-90da-3339-98f4-30f4192cf0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:08:de:d5:53:e5:62:67:d5:2c:74:71:41:1e:51:92:89:23: 89:a6:4f:e5:34:0c:87:c7:83:70:95:91:74:6d:bb:02:52:2e: f6:10:7c:4c:3d:94:d1:91:6d:f3:d9:69:37:14:ac:e6:48:dd: d2:cd:ec:fa:2a:b8:3e:eb:75:ff:d3:33:dc:54:f7:78:9c:91: 10:b8:80:66:cc:71:76:d9:e2:0d:66:76:b5:2c:26:09:c1:d0: f8:f2:ec:81:26:13:8b:ab:54:a1:78:80:0b:9b:36:cd:d1:3c: 44:15:ed:72:a9:81:78:88:b2:55:f9:16:c6:1f:d4:6a:20:f7: d9:1f:d2:7d:a6:f3:ba:bb:f2:e7:52:a5:32:93:7a:af:34:06: 18:e5:27:20:56:99:2d:35:f8:78:48:26:18:80:52:cb:42:12: 05:14:77:75:06:7e:1f:bf:d5:3b:d8:83:02:7b:ba:54:ea:26: 3b:cd:0a:48:80:4c:78:79:53:b8:6d:cd:53:17:8c:11:55:05: af:d3:44:55:ee:d3:ec:58:28:fd:cc:0b:c4:2c:29:93:08:99: d9:98:29:fe:bb:e4:e4:36:09:9c:8a:5b:98:a1:0f:f4:c1:d4: de:4f:60:24:52:5b:b9:a4:10:b7:9f:40:45:ed:25:2f:8f:8e: 69:27:1f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy982llSe0GM7W+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk MWY0ZDUyNDMtNjkxMi00YzZlLTkyYjQtNzcwMzdmYzk0YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sIg/1KQG7er95DrtPZMLKljRcQKeP9nMDvH GE4WlejGoDpW2KWENp3+9Y/QvojAF7yoitRYR/MxSBhspMr+5QaE7X4ndFdZXtqC nRt9Ttiey4GWf6ypW8rrxZrvDIAYiBLqkCswoFRmt0/MYqSgxPsz4ILaZs8HgBu2 d7UoQEXnSn1112TibZWVUWELZCwH7dcVOIecdEq/9yvMtE740TdLqZIGODYUmIpI bPLCZv7+Nb7/cqnakcK7+OL45FtU4UsdYX1v2NaDNQUhnKIr+7AnBi3ZP21PPCmF nmb267XQAHrkyPvVdDGXDnIi2FqZI2FOOzbuA3guZgZc/tVb3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdvjDaGAYpyc6CCEF7TIKYYtz87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDZhYzU4MjItOTBkYS0z MzM5LTk4ZjQtMzBmNDE5MmNmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq48MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAI3tVT5WJn1Sx0cUEeUZKJI4mmT+U0DIfHg3CVkXRtuwJSLvYQfEw9 lNGRbfPZaTcUrOZI3dLN7PoquD7rdf/TM9xU93ickRC4gGbMcXbZ4g1mdrUsJgnB 0Pjy7IEmE4urVKF4gAubNs3RPEQV7XKpgXiIslX5FsYf1Gog99kf0n2m87q78udS pTKTeq80BhjlJyBWmS01+HhIJhiAUstCEgUUd3UGfh+/1TvYgwJ7ulTqJjvNCkiA THh5U7htzVMXjBFVBa/TRFXu0+xYKP3MC8QsKZMImdmYKf675OQ2CZyKW5ihD/TB 1N5PYCRSW7mkELefQEXtJS+PjmknH0Q= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:55 2025 by rpki-client