$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1a52485b-1236-3b26-aa40-f7a43f934001.roa File: 1a52485b-1236-3b26-aa40-f7a43f934001.roa (raw, json) Hash identifier: JPd0geVeNAx2UAUx6fWaka2mCerDqgC+68hKNfN8Ikc= Subject key identifier: 21:2A:EB:6F:38:0B:D2:54:11:9B:C0:F5:7A:E5:D4:76:02:34:07:80 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A2CE915678BE9BA6B3C42 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1a52485b-1236-3b26-aa40-f7a43f934001.roa Signing time: Tue 21 Oct 2025 09:31:04 +0000 ROA not before: Tue 21 Oct 2025 09:31:04 +0000 ROA not after: Mon 19 Jan 2026 10:31:04 +0000 asID: 35039 IP address blocks: 130.214.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:2c:e9:15:67:8b:e9:ba:6b:3c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:04 2025 GMT Not After : Jan 19 10:31:04 2026 GMT Subject: CN=da87cd34-f99d-4ac6-979a-fe95cb6d4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:95:10:e9:03:1c:a8:d8:0b:a6:14:27:91: 35:06:7a:2c:c4:b0:ed:4a:94:1b:69:4d:e3:1e:f2: 9f:5d:07:9b:1f:dc:7d:d9:a1:aa:27:fd:81:ef:e8: 22:10:7a:c9:a0:64:3b:ee:52:67:f1:6c:cb:4a:40: ef:d4:51:d9:4f:6e:8e:0f:8f:8b:85:73:bb:2f:f9: dd:d9:c7:6f:33:a8:16:c4:15:78:b9:5c:a1:70:93: ec:19:b5:1e:20:a5:68:6a:6c:f2:9d:bd:c1:f5:ae: fe:1e:3c:1c:0c:b5:21:4c:3c:b6:cd:af:cf:ee:52: ee:de:32:52:08:c5:17:80:da:75:ea:72:d4:03:03: de:7e:0c:ad:90:99:ff:b6:fc:64:e9:4f:46:df:22: 79:f4:03:f3:8c:a6:06:52:f9:b0:25:1c:45:18:5c: ab:28:12:ed:ea:23:2b:5c:b1:9a:ca:f4:6c:f1:e6: c2:77:3b:cf:28:e7:b7:9f:d3:df:7a:85:67:79:ed: 02:65:cd:09:08:f5:38:03:4b:3a:f2:eb:5d:73:f3: b7:e1:41:11:0f:54:67:4a:6b:c9:5f:87:ba:06:7d: c2:d8:53:c9:b5:90:8c:f8:56:90:4a:5b:e9:d6:b8: fc:67:b5:b1:6e:b4:43:37:4f:3c:07:b2:ae:b1:a6: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2A:EB:6F:38:0B:D2:54:11:9B:C0:F5:7A:E5:D4:76:02:34:07:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1a52485b-1236-3b26-aa40-f7a43f934001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:47:f1:51:8a:db:88:28:7d:09:d4:e8:25:33:0c:09:3d:ed: 84:7a:a5:4c:17:04:36:75:f3:42:db:88:43:f6:2f:a1:f4:70: 6a:0e:49:41:96:0b:d1:74:d9:81:9f:36:8b:e8:22:2a:44:5a: d1:da:ee:50:0d:9b:f1:27:09:87:76:15:0a:f5:d2:ec:a0:49: 0e:ed:dd:7a:26:23:43:a7:9c:03:ad:2e:17:3d:81:20:65:27: f9:f6:30:ee:bd:53:49:11:17:09:bc:8e:8c:e9:66:80:ba:38: d4:75:15:46:b3:89:f7:1f:f3:b2:3c:8b:e9:e4:75:1b:7a:cc: 07:61:65:7a:d5:78:aa:6d:6d:b1:cf:dd:6e:70:2b:1e:0c:54: 7b:fb:ac:4b:1e:13:9f:f0:c8:c3:d8:9e:8b:6b:ed:1c:7f:b9: 69:38:8e:f7:57:f0:9b:ef:2f:1c:16:9a:53:0a:4a:f6:d6:83: ef:7d:be:e1:b4:f8:e1:a9:3a:50:d5:2f:b7:b6:7c:cc:d5:c9: 3c:8f:af:d5:56:fa:cc:8e:00:4e:bf:82:8d:fc:36:10:74:ec: 12:68:df:57:83:6b:eb:de:90:35:ce:c9:bc:87:05:21:df:5d: 34:41:97:d7:cc:e5:5e:8c:62:07:d2:41:73:a5:02:bc:78:c1: e9:79:03:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCizpFWeL6bprPEIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEwNFoXDTI2MDExOTEwMzEwNFowLzEtMCsGA1UEAxMk ZGE4N2NkMzQtZjk5ZC00YWM2LTk3OWEtZmU5NWNiNmQ0MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcyVEOkDHKjYC6YUJ5E1BnosxLDtSpQbaU3j HvKfXQebH9x92aGqJ/2B7+giEHrJoGQ77lJn8WzLSkDv1FHZT26OD4+LhXO7L/nd 2cdvM6gWxBV4uVyhcJPsGbUeIKVoamzynb3B9a7+HjwcDLUhTDy2za/P7lLu3jJS CMUXgNp16nLUAwPefgytkJn/tvxk6U9G3yJ59APzjKYGUvmwJRxFGFyrKBLt6iMr XLGayvRs8ebCdzvPKOe3n9PfeoVnee0CZc0JCPU4A0s68utdc/O34UERD1RnSmvJ X4e6Bn3C2FPJtZCM+FaQSlvp1rj8Z7WxbrRDN088B7KusaYoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEq6284C9JUEZvA9Xrl1HYCNAeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMWE1MjQ4NWItMTIzNi0z YjI2LWFhNDAtZjdhNDNmOTM0MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRH8VGK24gofQnU6CUzDAk97YR6pUwXBDZ180LbiEP2L6H0cGoOSUGW C9F02YGfNovoIipEWtHa7lANm/EnCYd2FQr10uygSQ7t3XomI0OnnAOtLhc9gSBl J/n2MO69U0kRFwm8jozpZoC6ONR1FUazifcf87I8i+nkdRt6zAdhZXrVeKptbbHP 3W5wKx4MVHv7rEseE5/wyMPYnotr7Rx/uWk4jvdX8JvvLxwWmlMKSvbWg+99vuG0 +OGpOlDVL7e2fMzVyTyPr9VW+syOAE6/go38NhB07BJo31eDa+vekDXOybyHBSHf XTRBl9fM5V6MYgfSQXOlArx4wel5Awk= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:52 2025 by rpki-client