$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1858ab6d-bb40-3294-98f6-90241125d39b.roa File: 1858ab6d-bb40-3294-98f6-90241125d39b.roa (raw, json) Hash identifier: Wx9jSuKINFvqbVJgjJ6pqnNh67bNg5e7NdVDGdtzir8= Subject key identifier: 9C:16:E0:36:CB:10:CA:EF:6D:05:48:78:69:8C:85:42:CA:45:4F:6A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980ABDCBAB67708AF93433C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1858ab6d-bb40-3294-98f6-90241125d39b.roa Signing time: Tue 21 Oct 2025 09:32:13 +0000 ROA not before: Tue 21 Oct 2025 09:32:13 +0000 ROA not after: Mon 19 Jan 2026 10:32:13 +0000 asID: 35039 IP address blocks: 130.214.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:bd:cb:ab:67:70:8a:f9:34:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:32:13 2025 GMT Not After : Jan 19 10:32:13 2026 GMT Subject: CN=4361a6c6-06bb-4b0a-8881-ce2650973c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:bc:51:6b:83:f7:ac:49:da:09:55:c6:fa: 0b:9e:9e:a3:e0:83:76:4b:07:fc:99:2b:3e:1a:fe: ea:ed:95:fa:b2:93:74:69:71:67:1e:55:6c:77:b4: 87:e7:8e:82:7f:12:c8:68:d3:da:9f:27:b8:4b:b3: bc:2b:db:e4:89:68:aa:47:62:d2:bf:90:d3:9f:ad: 0f:e4:30:fa:8f:e9:5c:78:a7:d9:92:a4:f9:de:b0: 9f:72:d0:bf:d8:00:f8:8a:e5:8e:76:8c:51:21:5d: 1b:27:de:3d:e7:0f:cc:9b:ab:52:90:ed:01:81:3c: 23:db:69:f7:96:84:52:95:72:ac:c4:45:a1:8c:91: 10:86:ea:73:aa:91:26:1a:72:47:fb:67:91:11:d4: 04:b9:3e:dc:a9:6c:c6:95:71:4e:b4:ad:9a:15:f4: 8b:29:fb:1a:d2:9b:e8:73:83:ea:d0:e3:36:77:f1: 5f:d0:af:61:8d:75:c2:23:56:90:09:16:12:b2:dd: 39:59:91:4c:85:5d:29:dd:a4:a6:b6:38:76:c0:39: 71:7e:c4:a8:aa:b7:87:87:de:0d:a9:81:8d:a0:32: e3:22:aa:2a:bc:ce:f6:8f:9a:5c:ab:0e:01:8c:7e: 3e:a7:f6:7d:84:dd:90:e9:93:06:d6:34:3b:b1:3d: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:16:E0:36:CB:10:CA:EF:6D:05:48:78:69:8C:85:42:CA:45:4F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1858ab6d-bb40-3294-98f6-90241125d39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:65:09:ef:ad:49:09:79:03:e4:b1:ac:20:66:9e:27:66:62: d7:67:31:e1:fb:71:ac:99:1b:4a:73:ff:68:ca:78:7f:da:1e: d9:db:1b:39:c4:3d:62:c8:e3:c5:4d:43:59:a4:a1:33:45:4c: 7a:9b:96:9c:47:bf:c5:24:9b:09:34:c0:aa:f1:f3:7d:fb:b1: 1f:9b:ed:35:8d:c7:51:09:bd:6f:a3:bd:b7:1e:35:81:24:d0: d0:7c:ad:09:e3:f0:2d:72:b3:52:e7:de:18:c7:53:08:c1:f8: b4:22:52:f8:ae:cb:91:af:65:4a:13:fe:93:7d:f9:41:dd:af: 33:10:73:04:d2:83:21:1f:27:c2:e0:15:a7:6a:13:df:8f:63: 9f:18:4a:1b:07:c7:d8:9d:8d:ea:ba:2a:02:f8:1e:8a:c3:3e: 7c:b8:45:9d:4f:46:05:71:cc:2a:42:42:89:6a:51:74:8d:34: 05:02:6e:61:23:da:df:47:06:61:5a:1f:7e:00:70:48:5d:8d: d6:1e:74:e6:59:3e:1c:dd:bc:42:65:f4:23:f5:c9:49:bd:46: 88:32:a4:2b:97:1c:eb:18:30:72:a8:4f:82:be:99:4b:7b:67: 31:8f:15:c5:b3:77:c4:24:40:eb:fe:6b:f2:4b:61:b8:ed:10: 1d:8f:2f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCr3Lq2dwivk0M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzIxM1oXDTI2MDExOTEwMzIxM1owLzEtMCsGA1UEAxMk NDM2MWE2YzYtMDZiYi00YjBhLTg4ODEtY2UyNjUwOTczYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinG8UWuD96xJ2glVxvoLnp6j4IN2Swf8mSs+ Gv7q7ZX6spN0aXFnHlVsd7SH546CfxLIaNPanye4S7O8K9vkiWiqR2LSv5DTn60P 5DD6j+lceKfZkqT53rCfctC/2AD4iuWOdoxRIV0bJ9495w/Mm6tSkO0BgTwj22n3 loRSlXKsxEWhjJEQhupzqpEmGnJH+2eREdQEuT7cqWzGlXFOtK2aFfSLKfsa0pvo c4Pq0OM2d/Ff0K9hjXXCI1aQCRYSst05WZFMhV0p3aSmtjh2wDlxfsSoqreHh94N qYGNoDLjIqoqvM72j5pcqw4BjH4+p/Z9hN2Q6ZMG1jQ7sT3RlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJwW4DbLEMrvbQVIeGmMhULKRU9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMTg1OGFiNmQtYmI0MC0z Mjk0LTk4ZjYtOTAyNDExMjVkMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAplCe+tSQl5A+SxrCBmnidmYtdnMeH7cayZG0pz/2jKeH/aHtnbGznE PWLI48VNQ1mkoTNFTHqblpxHv8Ukmwk0wKrx8337sR+b7TWNx1EJvW+jvbceNYEk 0NB8rQnj8C1ys1Ln3hjHUwjB+LQiUviuy5GvZUoT/pN9+UHdrzMQcwTSgyEfJ8Lg FadqE9+PY58YShsHx9idjeq6KgL4HorDPny4RZ1PRgVxzCpCQolqUXSNNAUCbmEj 2t9HBmFaH34AcEhdjdYedOZZPhzdvEJl9CP1yUm9RogypCuXHOsYMHKoT4K+mUt7 ZzGPFcWzd8QkQOv+a/JLYbjtEB2PL+I= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:49 2025 by rpki-client