$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f05ea93f-a2c8-3ea5-84ee-71f4bba36ba9.roa File: f05ea93f-a2c8-3ea5-84ee-71f4bba36ba9.roa (raw, json) Hash identifier: XyK54HhmdP+x5+LRPPp+2G+OrDjYnzILL5zgZcUQxl0= Subject key identifier: A1:16:0F:7E:3E:06:04:75:14:7E:14:D7:E7:CB:87:15:A8:AF:28:60 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2566ECA90E6BFA2A7F80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f05ea93f-a2c8-3ea5-84ee-71f4bba36ba9.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 130.174.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:25:66:ec:a9:0e:6b:fa:2a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=d70ce0be-0c71-4716-8a56-442009e9370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:4a:94:d8:bf:cd:c0:a1:f3:ca:da:6f:6a: de:21:41:55:7d:af:31:f7:c5:36:81:05:a9:f1:75: 1b:36:cd:cb:29:d1:91:98:e4:55:6e:c6:d0:0e:ac: bc:f2:4f:d8:8e:4f:68:16:04:fe:f9:8e:d5:63:96: cb:8a:4b:cc:b7:7a:c8:e1:c2:ae:a8:16:d5:16:00: 5b:9a:28:f9:57:d2:83:64:bd:79:9a:36:93:24:27: 33:de:3d:9f:61:15:a6:83:e9:1d:f9:cc:3f:ac:62: 5f:6b:16:39:54:1e:9c:38:bf:db:d1:20:c4:24:53: c5:21:f2:42:0f:24:1d:72:cb:5d:5f:e7:cc:e0:c1: 40:2e:38:46:7d:52:8b:7c:01:74:d8:00:e5:ff:46: 3c:18:68:39:90:32:e2:e9:40:4f:c9:3f:0d:c3:66: 29:ad:37:ae:4e:63:cf:d8:46:cf:f8:78:73:68:9c: 1e:bd:71:bb:7e:34:82:60:7d:5c:84:67:df:8b:ad: 50:81:c1:4b:16:c9:e5:5d:fc:bd:00:0a:f3:93:ef: 43:b0:a9:e0:7a:75:8b:9a:ba:d1:4d:19:b5:d9:a7: 44:b4:28:2c:08:24:6a:82:d3:22:a4:e7:a4:5d:bc: 8f:17:41:d1:cb:44:03:48:36:4e:58:4f:c3:0e:b2: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:16:0F:7E:3E:06:04:75:14:7E:14:D7:E7:CB:87:15:A8:AF:28:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f05ea93f-a2c8-3ea5-84ee-71f4bba36ba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:86:be:ed:79:b4:ce:d1:93:74:b8:f8:eb:bb:ed:98:fc:63: 8f:d2:fa:17:60:27:6f:2e:41:66:35:0a:ac:5b:a0:61:06:88: 11:cc:f9:09:6f:b9:e5:81:d8:b9:74:8e:a6:c4:d3:3b:3f:75: 7e:ab:32:11:c9:a3:25:c7:b7:33:49:7c:5f:3b:6d:2a:5d:7f: 37:65:46:3d:a0:5a:5b:80:d4:14:b1:cc:65:71:97:28:71:bb: 44:1e:31:d0:01:39:f2:41:9b:f5:c2:e6:3e:c4:35:c4:ad:40: 8a:04:8b:1a:88:4c:3e:d9:1a:30:92:08:c0:78:59:75:de:ba: a7:af:ca:ff:12:fa:40:ab:63:04:28:29:16:b2:dc:52:e3:0c: 60:98:db:9b:1b:6d:5c:db:33:c8:67:3f:73:c7:6a:aa:03:fd: ba:60:f5:a4:d0:10:fc:94:ee:ed:63:f6:dc:f7:14:75:f0:40: c7:8e:f4:2e:0f:c1:07:65:07:06:79:83:30:2e:a2:86:bd:86: 98:a9:1b:73:1d:d7:2d:85:a7:f1:fe:03:c2:a8:7c:7c:55:04: ef:63:64:0a:32:fb:18:4c:4d:1b:d6:51:87:29:27:17:23:58: ec:f4:0d:89:81:89:90:84:c0:d0:59:1f:7e:6b:8a:0d:53:63: f3:0d:0e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XSVm7KkOa/oqf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZDcwY2UwYmUtMGM3MS00NzE2LThhNTYtNDQyMDA5ZTkzNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xRKlNi/zcCh88rab2reIUFVfa8x98U2gQWp 8XUbNs3LKdGRmORVbsbQDqy88k/Yjk9oFgT++Y7VY5bLikvMt3rI4cKuqBbVFgBb mij5V9KDZL15mjaTJCcz3j2fYRWmg+kd+cw/rGJfaxY5VB6cOL/b0SDEJFPFIfJC DyQdcstdX+fM4MFALjhGfVKLfAF02ADl/0Y8GGg5kDLi6UBPyT8Nw2YprTeuTmPP 2EbP+HhzaJwevXG7fjSCYH1chGffi61QgcFLFsnlXfy9AArzk+9DsKngenWLmrrR TRm12adEtCgsCCRqgtMipOekXbyPF0HRy0QDSDZOWE/DDrK8DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEWD34+BgR1FH4U1+fLhxWoryhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjA1ZWE5M2YtYTJjOC0z ZWE1LTg0ZWUtNzFmNGJiYTM2YmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6Gvu15tM7Rk3S4+Ou77Zj8Y4/S+hdgJ28uQWY1CqxboGEGiBHM+Qlv ueWB2Ll0jqbE0zs/dX6rMhHJoyXHtzNJfF87bSpdfzdlRj2gWluA1BSxzGVxlyhx u0QeMdABOfJBm/XC5j7ENcStQIoEixqITD7ZGjCSCMB4WXXeuqevyv8S+kCrYwQo KRay3FLjDGCY25sbbVzbM8hnP3PHaqoD/bpg9aTQEPyU7u1j9tz3FHXwQMeO9C4P wQdlBwZ5gzAuooa9hpipG3Md1y2Fp/H+A8KofHxVBO9jZAoy+xhMTRvWUYcpJxcj WOz0DYmBiZCEwNBZH35rig1TY/MNDgo= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:46 2025 by rpki-client