$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa File: d9a51967-3e86-39e8-9a0d-7c152c40e340.roa (raw, json) Hash identifier: lCu5NznFnCvgyLrOu+AFpVA0ue63reHYCA/EVNCtw5g= Subject key identifier: F7:C8:ED:26:AF:93:40:BB:F2:C0:FD:9E:C0:61:B2:02:72:24:1C:54 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D04E242DE99CA9997D7F6D300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 16509 IP address blocks: 130.174.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:42:de:99:ca:99:97:d7:f6:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=7a3cd5ba-3b5c-46a6-ab63-2e3a22402e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:10:80:3e:10:27:79:e4:bb:3f:d0:8a:50: e3:68:ef:bb:78:b9:7b:3b:e1:cd:7f:e8:dd:4e:4a: 75:a4:ea:8b:8d:03:e0:95:28:17:eb:91:f9:4c:d9: 5c:45:b7:10:75:8f:1b:fe:44:73:49:6a:ad:5c:24: 0f:18:61:cb:94:56:7a:18:cc:8d:52:4a:38:f2:5a: a5:24:1e:73:4a:1f:4a:01:35:50:f9:bf:5b:5c:4f: e3:83:e7:7b:31:6e:68:d1:13:71:1a:81:0e:1e:e2: 99:3a:d4:8e:ed:f1:bf:64:46:6c:12:70:3e:8d:08: 08:1d:51:8b:6c:4e:15:b6:d2:17:53:08:8d:60:ed: 5b:26:82:90:d5:e4:5f:17:99:7b:9d:38:ec:d6:3b: 00:01:39:42:09:a7:7d:82:58:be:47:99:98:7c:72: 45:1b:fe:8a:9f:b8:bf:bd:e2:16:7e:62:3c:69:28: 3d:e3:9e:60:e4:b4:b3:3f:dc:19:4f:b1:54:45:74: b7:d7:4a:64:ec:6e:2e:0f:84:09:19:f6:e9:cf:3e: 23:b8:45:28:07:8c:df:35:67:22:a4:6d:4e:34:5d: e1:89:7c:ca:ab:4e:d9:a9:65:93:32:32:b7:81:68: 01:fa:04:93:0a:8c:12:9b:cf:3d:31:31:9d:ad:7a: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C8:ED:26:AF:93:40:BB:F2:C0:FD:9E:C0:61:B2:02:72:24:1C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d9a51967-3e86-39e8-9a0d-7c152c40e340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:77:ac:2b:d3:dd:72:4f:39:71:93:6a:48:12:23:ba:22:12: f3:5a:01:36:e5:c6:e0:7c:6c:8e:8e:82:ba:b6:a3:7b:b1:d7: 85:83:c0:9c:b5:84:89:56:59:ae:f8:9e:b5:be:3d:50:74:88: ff:8b:7b:9f:56:66:04:1e:62:73:b4:99:64:29:a4:10:03:17: 70:01:43:77:c8:ed:c7:93:03:2f:67:ad:f6:52:ff:a6:af:0e: 1e:3e:24:11:e2:7c:36:c4:ac:33:2c:6c:b0:df:66:bd:ac:ae: e2:cd:78:42:79:fd:5b:13:77:17:16:87:16:23:f6:4b:0a:55: 7b:aa:64:4b:32:46:65:65:03:a3:de:72:3b:83:ae:7b:2d:bc: 32:39:b0:04:ae:24:81:bd:39:7d:f0:70:16:cb:d7:0e:57:00: aa:6f:d2:a5:33:8e:8d:e1:f8:7e:03:47:ef:ac:0d:39:6a:fe: b5:23:24:8a:e8:0b:c9:d1:1c:80:42:cd:95:dc:90:76:e9:a4: d8:6d:54:c7:ca:f5:58:05:f7:18:48:17:f5:e3:ed:55:01:f6: 1d:0d:b5:b8:25:fe:e8:03:60:ac:d6:bc:fc:71:98:ed:f9:57: a1:a0:43:79:55:17:d3:d9:13:86:4a:2a:9c:5a:d9:fc:50:68: 41:ba:65:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kLemcqZl9f20wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk N2EzY2Q1YmEtM2I1Yy00NmE2LWFiNjMtMmUzYTIyNDAyZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmUQgD4QJ3nkuz/QilDjaO+7eLl7O+HNf+jd Tkp1pOqLjQPglSgX65H5TNlcRbcQdY8b/kRzSWqtXCQPGGHLlFZ6GMyNUko48lql JB5zSh9KATVQ+b9bXE/jg+d7MW5o0RNxGoEOHuKZOtSO7fG/ZEZsEnA+jQgIHVGL bE4VttIXUwiNYO1bJoKQ1eRfF5l7nTjs1jsAATlCCad9gli+R5mYfHJFG/6Kn7i/ veIWfmI8aSg9455g5LSzP9wZT7FURXS310pk7G4uD4QJGfbpzz4juEUoB4zfNWci pG1ONF3hiXzKq07ZqWWTMjK3gWgB+gSTCowSm889MTGdrXp2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfI7Savk0C78sD9nsBhsgJyJBxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDlhNTE5NjctM2U4Ni0z OWU4LTlhMGQtN2MxNTJjNDBlMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI13rCvT3XJPOXGTakgSI7oiEvNaATblxuB8bI6Ogrq2o3ux14WDwJy1 hIlWWa74nrW+PVB0iP+Le59WZgQeYnO0mWQppBADF3ABQ3fI7ceTAy9nrfZS/6av Dh4+JBHifDbErDMsbLDfZr2sruLNeEJ5/VsTdxcWhxYj9ksKVXuqZEsyRmVlA6Pe cjuDrnstvDI5sASuJIG9OX3wcBbL1w5XAKpv0qUzjo3h+H4DR++sDTlq/rUjJIro C8nRHIBCzZXckHbppNhtVMfK9VgF9xhIF/Xj7VUB9h0Ntbgl/ugDYKzWvPxxmO35 V6GgQ3lVF9PZE4ZKKpxa2fxQaEG6ZR8= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:48 2026 by rpki-client