$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa File: f112e98d-5990-34ef-99a3-61d46f80f713.roa (raw, json) Hash identifier: Su9wJrdsSYtCn1yiZcQFYwRUF/nkynLwJNoBYJWtK4o= Subject key identifier: B8:9A:3D:06:68:8E:32:ED:68:6A:B2:DE:D6:CC:AD:35:8B:C3:0E:92 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB2F7C6A33A7F0522FD768740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3360 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c6:a3:3a:7f:05:22:fd:76:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3a1f5cd6-ecdc-4e95-b76f-8a9b373262f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:70:ec:8e:e1:af:06:24:a9:19:12:56:59: 17:b4:77:8f:08:9f:ec:55:f6:aa:d4:fc:44:91:51: d6:38:c2:98:5a:91:fa:b0:92:ac:eb:02:a9:fe:34: 3e:22:ae:2a:81:53:ea:66:81:80:9c:cc:48:58:35: 37:6c:23:d8:15:8e:c8:6e:e8:30:86:f4:41:1a:f9: 36:67:be:ab:31:12:11:cb:09:80:e2:64:ed:2a:5b: 11:35:d4:c2:56:4d:2d:a8:1c:da:06:91:02:aa:79: 7f:26:a5:fd:a2:c6:76:88:67:5a:cb:02:b5:ea:96: 22:10:e2:41:6a:89:3c:b0:71:80:d0:b0:8b:e5:7f: da:75:35:4e:f8:f0:66:2e:20:85:20:5f:cf:37:b4: f2:75:2e:61:a9:ae:24:3c:94:d5:8e:39:90:25:76: 5b:f4:44:54:11:0f:52:4e:6e:cb:c4:3c:4c:89:b6: 2e:db:62:c7:5a:eb:4c:3f:f9:e5:62:28:81:47:39: f9:e4:c1:53:ae:fa:4c:23:6d:6c:a5:9c:cd:b0:68: ea:59:b4:cd:dc:2d:16:b4:ba:aa:23:e9:e8:9c:9a: da:e0:ea:f0:63:8c:41:56:fd:94:53:67:dd:be:8b: 63:69:f3:76:dc:02:e6:68:73:47:1a:d6:fd:17:31: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:3D:06:68:8E:32:ED:68:6A:B2:DE:D6:CC:AD:35:8B:C3:0E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d4:34:d5:28:73:92:e0:7c:31:cb:5c:d8:2b:8d:0a:04:6e: 54:4a:4b:01:da:6f:ea:de:30:cd:99:54:fc:1b:47:06:44:db: 0c:c0:e6:8b:5e:46:4c:aa:b7:90:b8:21:05:da:f1:9d:04:81: 45:73:c9:f7:13:64:06:8f:94:43:62:26:41:8c:d4:90:b9:c2: e9:7d:49:88:64:ff:46:79:08:c8:a3:e5:30:f2:f7:ac:d5:ff: 17:d3:78:70:3f:6d:cd:6d:bc:82:8d:94:07:99:f8:30:2a:c9: b4:70:90:e6:fe:7b:ff:24:e8:dc:bc:69:7b:ad:06:91:66:cc: 64:7a:4f:81:88:6e:79:1f:5b:da:6c:ea:6c:84:5a:50:2a:e8: 68:66:38:78:e5:fd:a3:7f:17:92:69:2a:b7:4a:f8:e7:10:1c: ef:b0:1d:23:d9:6e:20:e5:3c:1b:23:1b:ac:8c:1c:e2:b9:53: 2b:7a:d4:dd:a7:7b:e2:5c:bd:81:b4:96:b6:64:3b:c2:2d:19: 89:52:eb:a6:72:af:41:bd:90:66:05:f5:8b:00:0a:21:40:3c: d3:c4:86:0b:29:8f:33:74:52:f6:0e:64:80:61:00:57:62:19: a3:4b:88:07:0d:33:42:da:82:fd:be:11:f5:7c:6c:ce:b8:03: 6d:82:8e:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98ajOn8FIv12h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2ExZjVjZDYtZWNkYy00ZTk1LWI3NmYtOGE5YjM3MzI2MmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjipw7I7hrwYkqRkSVlkXtHePCJ/sVfaq1PxE kVHWOMKYWpH6sJKs6wKp/jQ+Iq4qgVPqZoGAnMxIWDU3bCPYFY7IbugwhvRBGvk2 Z76rMRIRywmA4mTtKlsRNdTCVk0tqBzaBpECqnl/JqX9osZ2iGdaywK16pYiEOJB aok8sHGA0LCL5X/adTVO+PBmLiCFIF/PN7TydS5hqa4kPJTVjjmQJXZb9ERUEQ9S Tm7LxDxMibYu22LHWutMP/nlYiiBRzn55MFTrvpMI21spZzNsGjqWbTN3C0WtLqq I+nonJra4OrwY4xBVv2UU2fdvotjafN23ALmaHNHGtb9FzFAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiaPQZojjLtaGqy3tbMrTWLww6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjExMmU5OGQtNTk5MC0z NGVmLTk5YTMtNjFkNDZmODBmNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILUNNUoc5LgfDHLXNgrjQoEblRKSwHab+reMM2ZVPwbRwZE2wzA5ote Rkyqt5C4IQXa8Z0EgUVzyfcTZAaPlENiJkGM1JC5wul9SYhk/0Z5CMij5TDy96zV /xfTeHA/bc1tvIKNlAeZ+DAqybRwkOb+e/8k6Ny8aXutBpFmzGR6T4GIbnkfW9ps 6myEWlAq6GhmOHjl/aN/F5JpKrdK+OcQHO+wHSPZbiDlPBsjG6yMHOK5Uyt61N2n e+JcvYG0lrZkO8ItGYlS66Zyr0G9kGYF9YsACiFAPNPEhgspjzN0UvYOZIBhAFdi GaNLiAcNM0Lagv2+EfV8bM64A22CjkM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:26 2025 by rpki-client