$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8b3b831-7391-34e3-9c3d-b903aca8cd8d.roa File: e8b3b831-7391-34e3-9c3d-b903aca8cd8d.roa (raw, json) Hash identifier: bPztG422gN2OJgOr0p1fi+06cfC3amUvzo/qrxnuZ74= Subject key identifier: B4:50:EE:6E:91:88:AB:3F:F0:B4:DD:20:B4:DD:ED:FA:F9:48:98:3E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584EF7176A657B6431D1C153BC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8b3b831-7391-34e3-9c3d-b903aca8cd8d.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3360 IP address blocks: 130.174.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6a:65:7b:64:31:d1:c1:53:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=140684fe-7929-49a8-99a6-1c1751284aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:f4:0e:b8:40:b1:22:55:e7:3c:0a:c9:80: d8:d3:c2:0d:c0:81:e6:05:e7:23:52:1a:23:c7:fa: 5d:6a:04:08:fb:6a:e3:cb:2d:e5:0f:e3:de:03:41: b8:33:99:d0:57:f1:38:10:86:b8:35:fb:7a:0b:0c: 07:45:24:e1:da:ea:a4:8d:55:a2:7a:fa:11:9b:df: c0:e0:60:9b:68:5a:a3:96:71:f5:6f:72:52:d1:97: 3a:8a:e7:27:d0:b2:79:8b:7b:a5:1c:9d:bb:dc:4a: 92:94:da:bc:ba:00:26:2c:fe:cf:19:0f:5c:e2:9e: e1:46:48:1d:6d:58:06:4c:09:10:c4:e9:12:ad:77: ff:af:12:e4:74:93:a5:70:fc:10:a6:48:a5:73:4f: d1:20:71:7a:c8:a2:e1:46:59:85:05:b0:62:bf:88: 3e:68:11:6b:3e:da:07:22:2e:f5:2f:01:15:95:27: fd:eb:de:cc:c2:7a:5a:eb:c8:c9:e1:47:c2:62:ec: d4:0c:99:64:4a:98:b0:7d:3b:42:3c:8a:4c:16:a9: 21:16:7f:7d:9b:69:1b:5a:6f:72:73:ac:76:d2:b5: 08:76:67:3d:2b:3c:41:58:23:4a:9c:de:bb:a7:b3: d5:78:13:3d:8d:f5:e8:dd:6d:51:17:18:9e:16:38: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:50:EE:6E:91:88:AB:3F:F0:B4:DD:20:B4:DD:ED:FA:F9:48:98:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8b3b831-7391-34e3-9c3d-b903aca8cd8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8d:60:fa:83:aa:73:71:25:d1:98:07:fc:b2:da:9f:0b:87: 9e:11:9c:a4:df:da:80:de:2b:08:35:27:95:c6:4c:2f:0a:c1: c4:70:e6:c2:9e:3a:35:f8:92:c9:37:7f:35:47:57:50:50:31: f8:9c:91:d1:30:1a:f2:f0:8f:5d:67:79:f9:01:02:7e:84:7b: 43:8c:fb:79:a5:df:06:1c:79:cf:28:70:47:1c:4f:22:41:91: c3:5b:ff:9c:38:f4:c3:55:e7:01:f5:bd:1d:80:3f:6b:ab:73: 98:a2:3e:0d:b3:6e:62:f3:04:18:44:67:14:58:f2:31:d8:63: a0:0e:09:3f:d9:98:90:af:6c:e3:8e:3c:53:28:db:b0:8b:b7: 0f:38:51:4d:4c:b6:7f:b1:fc:ef:3f:90:1c:8a:d9:70:df:ba: 20:84:51:93:be:c7:48:3f:e9:da:2d:68:12:8e:7c:bd:ee:21: 23:24:68:11:d5:89:fb:da:14:5d:eb:6b:43:0b:5f:65:c1:58: b9:6f:3c:77:d7:3a:d9:a4:7f:c0:8b:15:21:41:01:47:f6:f6: db:ac:51:7a:0c:18:6a:a9:f8:0d:f9:d3:61:b1:85:19:5c:c3: e0:c4:89:a4:82:af:52:68:14:fa:27:93:94:3f:56:ae:8f:46: 5e:7d:77:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2ple2Qx0cFTvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MTQwNjg0ZmUtNzkyOS00OWE4LTk5YTYtMWMxNzUxMjg0YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUD0DrhAsSJV5zwKyYDY08INwIHmBecjUhoj x/pdagQI+2rjyy3lD+PeA0G4M5nQV/E4EIa4Nft6CwwHRSTh2uqkjVWievoRm9/A 4GCbaFqjlnH1b3JS0Zc6iucn0LJ5i3ulHJ273EqSlNq8ugAmLP7PGQ9c4p7hRkgd bVgGTAkQxOkSrXf/rxLkdJOlcPwQpkilc0/RIHF6yKLhRlmFBbBiv4g+aBFrPtoH Ii71LwEVlSf9697Mwnpa68jJ4UfCYuzUDJlkSpiwfTtCPIpMFqkhFn99m2kbWm9y c6x20rUIdmc9KzxBWCNKnN67p7PVeBM9jfXo3W1RFxieFjh+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRQ7m6RiKs/8LTdILTd7fr5SJg+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZThiM2I4MzEtNzM5MS0z NGUzLTljM2QtYjkwM2FjYThjZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiNYPqDqnNxJdGYB/yy2p8Lh54RnKTf2oDeKwg1J5XGTC8KwcRw5sKe OjX4ksk3fzVHV1BQMfickdEwGvLwj11nefkBAn6Ee0OM+3ml3wYcec8ocEccTyJB kcNb/5w49MNV5wH1vR2AP2urc5iiPg2zbmLzBBhEZxRY8jHYY6AOCT/ZmJCvbOOO PFMo27CLtw84UU1Mtn+x/O8/kByK2XDfuiCEUZO+x0g/6dotaBKOfL3uISMkaBHV ifvaFF3ra0MLX2XBWLlvPHfXOtmkf8CLFSFBAUf29tusUXoMGGqp+A3502GxhRlc w+DEiaSCr1JoFPonk5Q/Vq6PRl59dx0= -----END CERTIFICATE-----Generated at Sun Sep 20 20:23:50 2026 by rpki-client