$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3213ceaf-3732-36a8-9f3b-b0a380ea766f.roa File: 3213ceaf-3732-36a8-9f3b-b0a380ea766f.roa (raw, json) Hash identifier: ZJ4c7dY5rYD/WxkW1ZXM73M5CCRvSPlfp6LAifNMsfg= Subject key identifier: 31:D7:B7:12:6C:05:7D:E5:E1:C8:A8:AA:FD:0E:4A:A8:C2:DA:2A:A3 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A778583E4446634DA9A80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3213ceaf-3732-36a8-9f3b-b0a380ea766f.roa Signing time: Tue 21 Oct 2025 09:31:40 +0000 ROA not before: Tue 21 Oct 2025 09:31:40 +0000 ROA not after: Mon 19 Jan 2026 10:31:40 +0000 asID: 35039 IP address blocks: 130.214.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:77:85:83:e4:44:66:34:da:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:40 2025 GMT Not After : Jan 19 10:31:40 2026 GMT Subject: CN=bb917372-c8e4-450e-b921-4c65c9f03387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:1d:11:69:de:9e:87:d5:a0:74:d1:55:a8: 41:4b:f0:1c:c4:3e:33:db:eb:d6:62:d1:5e:77:05: b5:73:a2:4b:96:e3:d0:6f:c6:ab:db:7c:69:5d:76: 29:0f:99:86:dd:9b:4b:02:48:72:2d:9e:94:83:d6: c5:64:a0:40:d8:ef:30:a6:b9:69:23:51:54:97:67: b8:99:9e:a3:0a:5c:27:67:cc:40:e7:02:f1:40:27: 04:1f:16:09:01:cc:29:5c:69:75:b1:d1:c1:a7:e2: 03:a1:91:4f:11:7b:5f:b3:e8:e8:6e:24:e8:81:79: fa:63:ae:e1:b8:b9:4e:7d:fb:8a:8d:3b:4e:15:f6: 58:c1:e2:f9:6e:df:fd:3d:5e:70:2b:c1:75:bb:8e: 86:f0:b6:f3:80:5b:31:ae:86:02:21:53:be:60:29: b8:43:37:be:9e:18:f7:2d:f9:b1:b3:c8:ad:bb:ea: 2f:b3:26:76:0d:60:98:f6:ee:46:b8:60:2b:b4:ab: 70:ac:bf:38:89:45:d6:d6:fa:ca:3c:dd:f8:ed:98: b8:d3:85:05:d5:43:d2:72:07:17:20:6f:aa:2e:13: 12:bb:66:9d:77:a7:f3:aa:6c:b7:c4:42:e9:64:75: ab:7d:3d:7c:9b:c0:00:1e:2b:35:27:c5:30:99:b4: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D7:B7:12:6C:05:7D:E5:E1:C8:A8:AA:FD:0E:4A:A8:C2:DA:2A:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3213ceaf-3732-36a8-9f3b-b0a380ea766f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:55:40:41:fc:fd:ac:5c:07:5c:0b:a3:91:fb:01:56:01:c2: a0:87:a1:54:f0:5e:0e:5c:6e:a6:10:c2:70:09:bb:ae:11:e2: e0:1b:64:f5:b9:ac:ff:70:9f:84:5f:aa:07:82:05:6b:b3:93: b3:9b:a4:6b:8b:f3:c2:aa:17:2f:10:af:d8:bd:f6:6e:1e:3f: 64:46:e2:7e:20:d8:86:50:89:6c:5e:47:9d:7e:45:dc:15:98: 51:71:b7:85:09:21:2e:db:5f:d0:9d:24:34:15:27:a9:75:f4: cb:aa:62:ce:cf:5a:d6:ac:e0:a2:81:37:c6:27:e4:8b:88:c0: c4:12:2c:3d:2e:bd:c4:fc:92:a9:62:dd:45:9e:40:40:89:fb: 4a:be:89:82:00:94:83:8d:a9:37:a8:40:60:a5:e2:d0:fc:15: 65:a2:5b:fe:ff:a2:fd:3d:01:dc:dd:6f:14:fb:3d:5a:b7:2d: a8:88:08:9c:2d:e2:6d:fb:3e:dd:ee:ab:84:dd:b2:b4:8e:66: 10:79:e5:ba:27:c1:86:92:0d:4e:e5:0a:e5:ed:02:0e:e1:c1: 44:f7:a4:3e:89:c7:0d:3a:50:c0:51:d8:fd:c8:7a:33:b5:b7: 9d:10:22:de:5f:1a:48:96:66:ea:0f:20:29:d5:10:4b:90:6d: 7b:69:16:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCneFg+REZjTamoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzE0MFoXDTI2MDExOTEwMzE0MFowLzEtMCsGA1UEAxMk YmI5MTczNzItYzhlNC00NTBlLWI5MjEtNGM2NWM5ZjAzMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94dEWnenofVoHTRVahBS/AcxD4z2+vWYtFe dwW1c6JLluPQb8ar23xpXXYpD5mG3ZtLAkhyLZ6Ug9bFZKBA2O8wprlpI1FUl2e4 mZ6jClwnZ8xA5wLxQCcEHxYJAcwpXGl1sdHBp+IDoZFPEXtfs+jobiTogXn6Y67h uLlOffuKjTtOFfZYweL5bt/9PV5wK8F1u46G8LbzgFsxroYCIVO+YCm4Qze+nhj3 Lfmxs8itu+ovsyZ2DWCY9u5GuGArtKtwrL84iUXW1vrKPN347Zi404UF1UPScgcX IG+qLhMSu2add6fzqmy3xELpZHWrfT18m8AAHis1J8UwmbTVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHXtxJsBX3l4cioqv0OSqjC2iqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzIxM2NlYWYtMzczMi0z NmE4LTlmM2ItYjBhMzgwZWE3NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtVQEH8/axcB1wLo5H7AVYBwqCHoVTwXg5cbqYQwnAJu64R4uAbZPW5 rP9wn4RfqgeCBWuzk7ObpGuL88KqFy8Qr9i99m4eP2RG4n4g2IZQiWxeR51+RdwV mFFxt4UJIS7bX9CdJDQVJ6l19MuqYs7PWtas4KKBN8Yn5IuIwMQSLD0uvcT8kqli 3UWeQECJ+0q+iYIAlIONqTeoQGCl4tD8FWWiW/7/ov09AdzdbxT7PVq3LaiICJwt 4m37Pt3uq4TdsrSOZhB55bonwYaSDU7lCuXtAg7hwUT3pD6Jxw06UMBR2P3IejO1 t50QIt5fGkiWZuoPICnVEEuQbXtpFmw= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:55 2025 by rpki-client