$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39057dbc-9a0a-3921-9dba-17149c6fa261.roa File: 39057dbc-9a0a-3921-9dba-17149c6fa261.roa (raw, json) Hash identifier: daw8zMxa1R30r3Oa2RD837n5kRE1Z4Hx6MNY3cLWH1Y= Subject key identifier: 5E:67:3B:FE:AA:EA:F4:24:F7:EC:AD:C7:67:7E:4B:AB:AD:1C:84:86 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884DDE70539065D464F6A80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39057dbc-9a0a-3921-9dba-17149c6fa261.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:dd:e7:05:39:06:5d:46:4f:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=84e35242-0943-4911-9801-72b3e9b1267d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:0a:10:1a:bb:4a:cf:9c:ce:17:2c:ae:80: b9:5f:cc:a3:fd:36:5e:f2:c7:e1:8f:c3:3a:63:21: 52:e8:9c:9b:3e:39:c7:10:0c:09:76:ed:e4:a0:c4: d6:45:e1:8f:0b:de:d2:24:3b:3e:12:23:6c:54:6a: 48:58:7a:21:32:e9:79:28:65:77:90:aa:10:73:8d: a6:76:28:78:7f:37:8f:09:90:79:50:8f:20:c3:5f: b9:57:4b:63:30:c8:4e:76:58:e3:de:82:e3:f9:0c: 7a:45:0f:31:f9:70:47:27:84:ec:37:57:4a:54:ca: a1:7e:3d:54:2a:10:13:c5:2a:24:43:e7:8b:04:da: f5:bb:51:08:5d:f4:3c:5c:05:5c:00:34:2c:9c:cc: 32:17:26:52:f4:40:5e:6d:fc:db:be:b0:ed:13:5a: ed:aa:3b:36:b0:c0:7c:9d:9e:ed:74:08:fd:57:65: 89:e9:a6:a6:d7:27:db:5b:ea:84:8d:33:7b:00:97: 11:3d:3d:07:4b:d8:9d:b2:1c:7b:da:cd:2a:3e:32: fc:5e:c0:51:2c:aa:05:b8:35:4f:10:c2:73:d5:aa: 87:45:d3:ea:f9:fa:ba:94:ef:ae:1a:a7:58:0f:82: d5:21:6a:87:55:39:20:ae:df:3e:bc:98:97:54:d6: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:67:3B:FE:AA:EA:F4:24:F7:EC:AD:C7:67:7E:4B:AB:AD:1C:84:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39057dbc-9a0a-3921-9dba-17149c6fa261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ae:cd:52:97:d7:4b:1b:6d:a2:cf:41:3e:cc:c9:65:53:c3: b8:61:62:06:05:1a:44:1c:6f:92:34:01:9e:69:a0:74:ec:be: 26:55:ab:ec:95:c4:af:bf:2d:f6:d0:a0:42:07:a3:0c:75:af: 9c:24:21:a8:2e:0b:59:d1:4d:26:20:99:ce:9a:81:b8:99:9f: 4b:0b:54:df:94:10:b4:ac:ce:1a:02:08:27:4d:99:1b:89:da: bc:44:00:d7:b3:fe:1c:ff:88:11:57:82:74:1f:1d:80:3f:8a: da:46:16:b1:00:fc:1f:e7:a5:f6:55:16:5e:9b:8b:69:09:4a: fb:27:80:3a:03:f1:dd:11:78:5f:1d:fb:2c:99:d2:74:92:23: 94:de:2f:27:32:05:5c:d4:38:45:63:b6:ff:e5:79:7f:ae:00: b1:00:0d:db:ee:2e:dd:36:79:65:6c:d8:6c:31:54:52:19:79: 28:3f:bd:fb:c4:fe:66:27:7d:c9:41:05:b3:58:43:14:d6:f9: fc:46:52:4f:36:63:60:47:9c:49:08:06:3d:24:fc:e0:c9:8c: 90:d6:79:5b:09:83:17:70:df:45:29:ab:96:8c:ed:c4:26:7e: a8:ad:f3:69:67:cd:11:24:21:03:08:1f:e8:bf:f7:e1:96:58: 45:13:f2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhN3nBTkGXUZPaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ODRlMzUyNDItMDk0My00OTExLTk4MDEtNzJiM2U5YjEyNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIsKEBq7Ss+czhcsroC5X8yj/TZe8sfhj8M6 YyFS6JybPjnHEAwJdu3koMTWReGPC97SJDs+EiNsVGpIWHohMul5KGV3kKoQc42m dih4fzePCZB5UI8gw1+5V0tjMMhOdljj3oLj+Qx6RQ8x+XBHJ4TsN1dKVMqhfj1U KhATxSokQ+eLBNr1u1EIXfQ8XAVcADQsnMwyFyZS9EBebfzbvrDtE1rtqjs2sMB8 nZ7tdAj9V2WJ6aam1yfbW+qEjTN7AJcRPT0HS9idshx72s0qPjL8XsBRLKoFuDVP EMJz1aqHRdPq+fq6lO+uGqdYD4LVIWqHVTkgrt8+vJiXVNYtGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5nO/6q6vQk9+ytx2d+S6utHISGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzkwNTdkYmMtOWEwYS0z OTIxLTlkYmEtMTcxNDljNmZhMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKuzVKX10sbbaLPQT7MyWVTw7hhYgYFGkQcb5I0AZ5poHTsviZVq+yV xK+/LfbQoEIHowx1r5wkIaguC1nRTSYgmc6agbiZn0sLVN+UELSszhoCCCdNmRuJ 2rxEANez/hz/iBFXgnQfHYA/itpGFrEA/B/npfZVFl6bi2kJSvsngDoD8d0ReF8d +yyZ0nSSI5TeLycyBVzUOEVjtv/leX+uALEADdvuLt02eWVs2GwxVFIZeSg/vfvE /mYnfclBBbNYQxTW+fxGUk82Y2BHnEkIBj0k/ODJjJDWeVsJgxdw30Upq5aM7cQm fqit82lnzREkIQMIH+i/9+GWWEUT8qk= -----END CERTIFICATE-----Generated at Mon Apr 6 15:22:59 2026 by rpki-client