$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00ac9298-039a-3fa2-a36f-809cb1649a54.roa File: 00ac9298-039a-3fa2-a36f-809cb1649a54.roa (raw, json) Hash identifier: mgjIvkJLXWEYj8Ow7KedEVpCRJoMJfhB89EXXdUH3T0= Subject key identifier: 52:AE:B7:9A:C2:E0:07:26:44:C6:2A:39:D6:A7:99:5D:20:EB:66:13 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A635B9897595E89C2FFA0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00ac9298-039a-3fa2-a36f-809cb1649a54.roa Signing time: Tue 21 Oct 2025 09:31:30 +0000 ROA not before: Tue 21 Oct 2025 09:31:30 +0000 ROA not after: Mon 19 Jan 2026 10:31:30 +0000 asID: 35039 IP address blocks: 130.214.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:63:5b:98:97:59:5e:89:c2:ff:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:30 2025 GMT Not After : Jan 19 10:31:30 2026 GMT Subject: CN=bba1183e-c844-44fd-89f3-771dba0b9d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:4d:95:1d:59:cc:bb:0f:91:af:01:02:24: 75:a3:c2:69:34:38:96:58:0e:5e:bd:04:4b:cb:10: d0:84:37:66:bc:e2:6c:80:77:0a:81:a6:d6:1d:01: f7:b9:e7:55:90:62:75:3a:87:16:32:2c:96:25:c3: b9:08:a8:32:8b:ed:fc:ab:c9:1a:8a:17:16:ae:77: d8:d2:42:50:5b:02:09:e0:3e:48:28:a2:c6:e0:ec: 99:57:18:10:9c:33:82:4e:f6:73:d2:46:38:a5:9f: 28:3f:87:65:4d:52:c9:96:ac:7a:2c:c9:3b:15:1a: ed:71:45:ce:b5:38:5b:21:e2:af:92:6c:ad:63:c8: 60:0f:d9:ec:07:10:d3:5b:97:e2:33:61:6e:c2:e7: 8b:21:fd:f8:fd:a3:44:13:fd:8f:74:fd:55:65:23: e5:ee:23:97:33:2b:2f:c4:61:6c:52:68:49:35:4b: 64:80:22:df:8b:1c:57:4f:7b:ba:93:d9:2e:cb:87: f2:25:3e:a4:4b:24:c3:2a:ca:21:5f:1a:68:31:92: 42:70:37:6d:34:ad:81:42:e1:4a:86:d7:31:1f:46: ce:0f:b1:7e:66:94:0b:e0:0d:b5:04:76:97:37:e6: 2c:de:a0:a5:28:6d:62:3b:f0:ba:1b:2d:1b:91:63: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AE:B7:9A:C2:E0:07:26:44:C6:2A:39:D6:A7:99:5D:20:EB:66:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/00ac9298-039a-3fa2-a36f-809cb1649a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bf:c8:86:33:45:03:65:37:78:02:14:ea:58:d6:c2:f7:28: 60:71:d9:ec:99:22:23:37:f8:cd:da:a3:7b:da:5b:47:29:a9: df:04:fd:b4:1a:5b:ce:4c:17:9c:34:9e:59:7f:f1:3b:1e:a7: 20:28:0e:e4:8b:49:00:2f:c4:55:83:18:c4:c8:c4:10:56:55: 21:61:1d:04:eb:b9:b3:6d:f1:42:13:dc:67:ea:ab:77:4e:07: a1:f9:8c:fc:01:61:b8:c9:8f:6c:cf:17:d0:0d:c7:8a:f7:1e: b9:c7:a4:6d:05:92:6a:d6:bd:1d:4f:8f:dc:ef:63:88:2e:b8: 00:e2:7b:b7:22:75:ed:0f:a6:4f:f4:7f:8e:e7:20:b3:a7:7b: 5a:b9:94:8c:5a:0c:65:1f:32:eb:ff:02:ff:96:e7:56:d1:b4: b3:78:a1:d8:2c:65:68:42:57:dc:b2:e8:d8:47:fc:67:33:b4: fc:15:cc:35:87:73:d9:5a:ea:f0:2b:39:cd:9e:8b:eb:4a:27: f9:15:d8:c9:ce:d9:88:01:31:b6:c7:fa:ab:03:20:9b:01:27: bc:07:a6:f3:cc:c3:4c:48:0e:6e:4d:ac:f3:f9:f4:0e:c2:bf: 1e:07:7b:87:9a:ff:70:17:cb:a4:de:a2:06:a8:c6:fc:86:73: 24:1b:5c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCmNbmJdZXonC/6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEzMFoXDTI2MDExOTEwMzEzMFowLzEtMCsGA1UEAxMk YmJhMTE4M2UtYzg0NC00NGZkLTg5ZjMtNzcxZGJhMGI5ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oRNlR1ZzLsPka8BAiR1o8JpNDiWWA5evQRL yxDQhDdmvOJsgHcKgabWHQH3uedVkGJ1OocWMiyWJcO5CKgyi+38q8kaihcWrnfY 0kJQWwIJ4D5IKKLG4OyZVxgQnDOCTvZz0kY4pZ8oP4dlTVLJlqx6LMk7FRrtcUXO tThbIeKvkmytY8hgD9nsBxDTW5fiM2FuwueLIf34/aNEE/2PdP1VZSPl7iOXMysv xGFsUmhJNUtkgCLfixxXT3u6k9kuy4fyJT6kSyTDKsohXxpoMZJCcDdtNK2BQuFK htcxH0bOD7F+ZpQL4A21BHaXN+Ys3qClKG1iO/C6Gy0bkWO8TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKut5rC4AcmRMYqOdanmV0g62YTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDBhYzkyOTgtMDM5YS0z ZmEyLWEzNmYtODA5Y2IxNjQ5YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe/yIYzRQNlN3gCFOpY1sL3KGBx2eyZIiM3+M3ao3vaW0cpqd8E/bQa W85MF5w0nll/8TsepyAoDuSLSQAvxFWDGMTIxBBWVSFhHQTrubNt8UIT3Gfqq3dO B6H5jPwBYbjJj2zPF9ANx4r3HrnHpG0FkmrWvR1Pj9zvY4guuADie7cide0Ppk/0 f47nILOne1q5lIxaDGUfMuv/Av+W51bRtLN4odgsZWhCV9yy6NhH/GcztPwVzDWH c9la6vArOc2ei+tKJ/kV2MnO2YgBMbbH+qsDIJsBJ7wHpvPMw0xIDm5NrPP59A7C vx4He4ea/3AXy6TeogaoxvyGcyQbXBE= -----END CERTIFICATE-----Generated at Mon Oct 27 07:05:00 2025 by rpki-client