$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa File: 1ae0304b-485d-3b47-8129-159c4ab2d927.roa (raw, json) Hash identifier: ZUKqQQMUNtaQfOscF/DIEDaP32VQ1ExDevw/SwrMLR0= Subject key identifier: 79:25:ED:F3:30:B6:0A:3B:1C:4D:EE:DB:54:A9:FC:50:1B:AE:6E:98 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B9809B570DD359BF0CA064580 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa Signing time: Tue 21 Oct 2025 09:30:08 +0000 ROA not before: Tue 21 Oct 2025 09:30:08 +0000 ROA not after: Mon 19 Jan 2026 10:30:08 +0000 asID: 35039 IP address blocks: 130.214.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:09:b5:70:dd:35:9b:f0:ca:06:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:30:08 2025 GMT Not After : Jan 19 10:30:08 2026 GMT Subject: CN=b039566b-aff6-45f0-8c72-6ddf5910ecb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:dc:9d:ea:4a:40:10:bb:e9:c8:fa:e3:6d: 4c:17:d3:9c:74:ac:17:10:c4:24:ba:0c:79:96:4f: b9:44:1d:fd:45:62:c9:32:25:cc:47:10:e6:d5:60: 53:90:a1:6e:ec:6d:ed:f7:c7:67:b0:c8:bb:28:99: ab:97:f3:2a:9b:c6:23:d2:92:69:c4:0e:b4:0f:bb: 67:db:16:7c:66:1d:0c:a7:92:61:71:5c:fc:c9:a3: ff:fe:23:9a:93:87:ae:60:f2:b6:cf:ce:19:d1:8e: 68:f2:16:b3:e4:c3:44:dd:fc:65:47:f4:16:00:b9: cc:b0:e0:a7:a7:d8:e9:20:0d:9f:25:eb:ba:3e:51: 84:6a:b3:bb:14:ed:eb:65:c5:cd:af:7a:f0:ae:08: 5c:e6:ca:6b:91:75:79:4e:69:9f:3b:69:5a:51:b5: 17:c1:97:1e:78:e9:7c:b3:8c:76:67:fd:cf:4b:0c: cb:88:48:1e:9f:fd:53:2b:b7:67:a8:b8:86:85:22: 58:21:ad:f0:8d:7e:2f:31:84:bb:cc:06:50:0f:79: 86:1a:fb:5a:c6:1d:e2:37:5b:83:c0:84:12:4a:cb: 79:c5:23:17:36:14:88:23:19:5c:7d:b6:79:2c:84: a6:4a:f1:2c:08:c2:64:5b:ae:f9:7b:a1:f6:f7:71: 16:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:25:ED:F3:30:B6:0A:3B:1C:4D:EE:DB:54:A9:FC:50:1B:AE:6E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/1ae0304b-485d-3b47-8129-159c4ab2d927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:29:f1:a7:56:dd:9c:22:ef:7f:94:5b:5c:6b:b4:72:94: 5f:17:98:7f:8e:7e:a3:01:34:56:aa:25:63:60:05:d8:13:8d: 5f:0c:aa:a4:ec:b7:df:74:57:14:ee:5d:5b:82:15:46:01:d6: 53:f7:41:ea:fb:45:44:a7:14:ad:f3:8c:74:ae:f3:c2:d2:01: dc:14:ce:f4:68:d0:95:da:81:68:bd:f7:f6:f2:d2:61:21:f2: f6:92:08:e1:d4:62:14:bc:31:9b:f7:8b:b9:d0:a0:be:15:00: 86:ec:83:dd:50:78:31:3a:67:5e:7c:df:a8:88:1d:55:13:d6: e7:93:d0:92:c5:58:26:05:f5:3d:a5:09:2f:54:5a:0d:45:bf: a1:8e:0a:af:cf:0e:db:f9:e6:97:89:46:bc:00:74:52:27:a7: 2e:45:35:f3:15:eb:c7:4c:e9:f5:8b:37:87:5b:93:36:a5:fe: f3:4d:89:f8:d4:aa:12:09:e1:ac:0e:6a:47:e5:76:a2:4e:63: f0:7a:37:63:0c:05:fc:f1:97:d5:02:da:54:10:05:95:c5:ca: 04:3d:2c:56:2c:78:68:4f:2c:b5:ea:dc:24:55:20:7a:fa:f7: 06:c1:32:c8:22:ce:b5:8a:e6:f9:a6:aa:b2:5c:2c:f8:c8:02: 26:96:ac:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCbVw3TWb8MoGRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzAwOFoXDTI2MDExOTEwMzAwOFowLzEtMCsGA1UEAxMk YjAzOTU2NmItYWZmNi00NWYwLThjNzItNmRkZjU5MTBlY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHLcnepKQBC76cj6421MF9OcdKwXEMQkugx5 lk+5RB39RWLJMiXMRxDm1WBTkKFu7G3t98dnsMi7KJmrl/Mqm8Yj0pJpxA60D7tn 2xZ8Zh0Mp5JhcVz8yaP//iOak4euYPK2z84Z0Y5o8haz5MNE3fxlR/QWALnMsOCn p9jpIA2fJeu6PlGEarO7FO3rZcXNr3rwrghc5sprkXV5TmmfO2laUbUXwZceeOl8 s4x2Z/3PSwzLiEgen/1TK7dnqLiGhSJYIa3wjX4vMYS7zAZQD3mGGvtaxh3iN1uD wIQSSst5xSMXNhSIIxlcfbZ5LISmSvEsCMJkW675e6H293EW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkl7fMwtgo7HE3u21Sp/FAbrm6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMWFlMDMwNGItNDg1ZC0z YjQ3LTgxMjktMTU5YzRhYjJkOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGSKfGnVt2cIu9/lFtca7RylF8XmH+OfqMBNFaqJWNgBdgTjV8MqqTs t990VxTuXVuCFUYB1lP3Qer7RUSnFK3zjHSu88LSAdwUzvRo0JXagWi99/by0mEh 8vaSCOHUYhS8MZv3i7nQoL4VAIbsg91QeDE6Z15836iIHVUT1ueT0JLFWCYF9T2l CS9UWg1Fv6GOCq/PDtv55peJRrwAdFInpy5FNfMV68dM6fWLN4dbkzal/vNNifjU qhIJ4awOakfldqJOY/B6N2MMBfzxl9UC2lQQBZXFygQ9LFYseGhPLLXq3CRVIHr6 9wbBMsgizrWK5vmmqrJcLPjIAiaWrFo= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:55 2025 by rpki-client