$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/35e899a2-dbfc-395c-bb69-85284ec66088.roa File: 35e899a2-dbfc-395c-bb69-85284ec66088.roa (raw, json) Hash identifier: o0ou2UqVCMxqmOTiaJ8QAVNvb30U+cgv4siyzeB9UC4= Subject key identifier: 18:49:3C:2A:EF:9D:85:C0:F1:03:C6:1D:52:6B:F9:62:66:1E:E4:BE Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884DF404FC88DB8C6262F20 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/35e899a2-dbfc-395c-bb69-85284ec66088.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:df:40:4f:c8:8d:b8:c6:26:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=ddea330e-ce8c-43c0-8705-6bfe169210c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9c:ce:90:96:2e:b5:39:d4:a2:6e:56:76:e6: 17:80:4d:08:dc:5a:bb:99:bf:03:c1:c1:3b:0b:3f: 8a:2e:17:4d:e2:48:e9:75:2e:e2:2b:08:db:6b:08: b7:e9:1d:f9:1d:bf:41:74:04:1a:cb:8a:eb:5f:02: 9b:36:9e:3b:cb:ad:0f:f6:18:f1:a2:56:53:5d:c9: 00:bb:97:5a:96:c9:53:2f:8b:05:83:52:e0:01:fe: 45:13:a9:67:80:df:df:e1:b5:21:84:71:ba:b9:9c: 29:58:4c:4e:1e:61:bb:94:c6:ed:c3:c8:8d:5a:79: d9:86:91:c4:5a:93:f2:e8:95:c2:65:65:6a:01:4d: ea:79:62:98:3d:20:28:47:69:fb:e9:f7:06:bd:fe: 9c:e4:01:c5:b6:ce:15:da:27:fd:a8:fa:28:f3:60: b9:4d:5a:24:42:51:44:84:88:fd:66:66:2b:a9:e1: 8b:3f:6e:d8:4f:0c:83:3f:65:2b:f5:cd:74:0c:53: 65:28:bd:cf:74:28:92:90:f6:a8:60:fa:cd:52:29: 0e:6f:48:d0:bc:be:97:fb:ff:f3:ee:6b:51:32:65: 34:9d:a7:93:71:2e:dc:2e:dc:3c:f4:14:44:d7:c6: 06:3f:cb:37:7c:e0:68:40:76:d6:d3:8d:22:af:1a: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:49:3C:2A:EF:9D:85:C0:F1:03:C6:1D:52:6B:F9:62:66:1E:E4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/35e899a2-dbfc-395c-bb69-85284ec66088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a6:08:4b:6b:7e:90:cd:a3:6a:f0:00:2f:30:95:41:30:59: 4d:90:e9:04:25:c2:12:25:61:c5:38:c4:89:31:6b:63:31:f9: e0:75:07:e7:04:64:38:28:d2:77:c3:db:27:30:e8:56:8b:b3: 48:79:88:52:cc:c1:65:8b:41:96:f6:cc:f0:c0:45:28:35:25: f8:25:1d:98:03:6e:84:1a:9f:1f:f9:30:1c:3a:49:cf:61:9e: fc:cb:ee:f9:1e:49:75:5c:f7:75:89:e5:d8:b6:c4:fc:df:29: ec:40:f0:5c:bf:2f:95:5e:d4:e9:97:ad:21:d5:7d:b4:cd:d5: 94:37:a4:04:ee:ec:3f:f7:75:e7:92:b7:df:f1:83:cd:b9:b6: b9:90:44:00:21:0a:95:f0:37:7d:c1:c8:3f:70:a5:ce:50:0d: fc:d9:e8:07:20:f5:04:fc:dc:62:2a:56:d0:72:37:d4:aa:39: 60:97:98:80:b8:28:f5:e7:bd:fb:fa:5c:40:47:07:39:bd:98: b9:37:89:e3:93:e0:c6:dc:b2:c6:09:13:01:30:46:8a:f1:ce: cd:ba:73:93:cd:76:a0:d7:db:f1:1f:c2:8f:a6:bc:cf:27:ba: 21:3f:09:dc:d4:c9:47:42:f5:8b:7d:be:64:8e:bc:2a:d6:7e: 01:f7:d4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhN9AT8iNuMYmLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ZGRlYTMzMGUtY2U4Yy00M2MwLTg3MDUtNmJmZTE2OTIxMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5zOkJYutTnUom5WduYXgE0I3Fq7mb8DwcE7 Cz+KLhdN4kjpdS7iKwjbawi36R35Hb9BdAQay4rrXwKbNp47y60P9hjxolZTXckA u5dalslTL4sFg1LgAf5FE6lngN/f4bUhhHG6uZwpWExOHmG7lMbtw8iNWnnZhpHE WpPy6JXCZWVqAU3qeWKYPSAoR2n76fcGvf6c5AHFts4V2if9qPoo82C5TVokQlFE hIj9ZmYrqeGLP27YTwyDP2Ur9c10DFNlKL3PdCiSkPaoYPrNUikOb0jQvL6X+//z 7mtRMmU0naeTcS7cLtw89BRE18YGP8s3fOBoQHbW040irxrZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhJPCrvnYXA8QPGHVJr+WJmHuS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzVlODk5YTItZGJmYy0z OTVjLWJiNjktODUyODRlYzY2MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2mCEtrfpDNo2rwAC8wlUEwWU2Q6QQlwhIlYcU4xIkxa2Mx+eB1B+cE ZDgo0nfD2ycw6FaLs0h5iFLMwWWLQZb2zPDARSg1JfglHZgDboQanx/5MBw6Sc9h nvzL7vkeSXVc93WJ5di2xPzfKexA8Fy/L5Ve1OmXrSHVfbTN1ZQ3pATu7D/3deeS t9/xg825trmQRAAhCpXwN33ByD9wpc5QDfzZ6Acg9QT83GIqVtByN9SqOWCXmIC4 KPXnvfv6XEBHBzm9mLk3ieOT4MbcssYJEwEwRorxzs26c5PNdqDX2/Efwo+mvM8n uiE/CdzUyUdC9Yt9vmSOvCrWfgH31MU= -----END CERTIFICATE-----Generated at Mon Apr 6 15:23:40 2026 by rpki-client