$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39287a4d-5a9b-36af-9cf3-f9cf3e9eb3cf.roa File: 39287a4d-5a9b-36af-9cf3-f9cf3e9eb3cf.roa (raw, json) Hash identifier: gWSc67fyZDEMYPd/pu9Kdev7+ddeX9+17fosynDPkDE= Subject key identifier: 4C:99:90:55:DF:6F:84:02:B7:5E:A0:46:59:DB:E6:C4:02:11:D0:73 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884DEF9D4C714A10597B880 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39287a4d-5a9b-36af-9cf3-f9cf3e9eb3cf.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:de:f9:d4:c7:14:a1:05:97:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=2d47999f-8767-4537-a11e-8c5db1f1f0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:e3:27:98:19:e2:cb:d7:47:16:2a:a9:73: d9:a3:b4:69:a3:a4:2f:d8:bd:3a:a7:42:5e:93:92: 04:ce:fd:fb:07:f9:20:cb:0c:4c:42:98:c6:ef:13: f0:7a:76:79:75:2c:8c:1a:c3:43:fd:e6:30:0a:f8: b7:30:e9:fa:53:1c:4c:a2:c6:2a:5a:33:f8:2a:a0: ff:f3:ca:11:e8:b9:b7:91:ff:8d:36:27:79:02:de: 73:cd:cb:ec:ac:78:59:b1:c5:41:06:83:97:e5:09: c9:9e:b8:eb:2e:da:61:26:21:86:f6:fa:ce:7d:8d: 80:72:c0:f7:e8:69:1b:a2:0a:d4:4d:14:23:f1:71: a7:fb:78:0a:2f:19:f4:b8:27:fc:6e:ba:29:40:ba: 08:8a:39:7a:75:0e:67:76:0d:c9:40:32:7f:7d:d4: 5c:dc:2c:c2:d8:d0:87:23:21:6a:dd:0f:48:d4:82: 19:fa:4c:8f:dd:ca:d7:8e:e7:46:36:ab:29:e1:b0: 8c:8b:80:67:4a:1e:77:ac:2a:4f:16:cf:6f:bb:cb: c9:cf:54:11:d5:7c:78:62:c6:2b:5e:5b:eb:db:1a: 84:1a:b0:aa:e6:52:77:12:eb:e8:ec:68:8c:2e:c3: 4f:34:b2:92:b8:a6:76:c7:3d:96:b8:9e:f0:83:e3: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:99:90:55:DF:6F:84:02:B7:5E:A0:46:59:DB:E6:C4:02:11:D0:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/39287a4d-5a9b-36af-9cf3-f9cf3e9eb3cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:10:f9:d4:44:50:89:32:be:4c:a2:3f:f6:dc:a3:b6:05:53: 56:fa:9b:4e:8e:8d:f3:98:a4:ae:cc:7b:8e:ec:78:69:0f:1d: cc:00:0e:d2:1e:67:56:c0:a4:23:ea:88:7e:3f:e7:d7:4f:56: 8f:28:d8:42:83:11:88:95:6c:f3:60:02:f5:13:a6:4e:f1:9e: 11:e2:01:fd:17:af:30:be:6b:63:41:83:ba:3d:c4:31:f9:8b: 18:c2:9e:c3:50:7a:3f:49:81:04:fc:80:86:1c:61:79:33:7d: cb:1e:ea:78:22:b0:ce:76:3c:83:8a:41:0b:8a:ba:90:e9:50: 32:b1:6a:c4:ab:e9:a9:07:31:9f:ab:0b:79:13:e6:18:ed:3e: 46:a8:3a:ae:9d:79:15:a1:21:e7:86:62:f4:32:96:04:1e:35: 1a:e3:60:56:2d:4c:99:e1:eb:7a:b7:30:8e:62:73:18:48:a1: 7f:87:a3:a7:31:f2:22:47:84:50:8b:0f:48:5b:85:0b:a6:01: 1b:de:d1:58:ec:b1:8f:90:c7:2e:a7:70:99:8c:2b:ca:20:ab: 15:c0:56:fe:5a:79:09:c6:73:ce:93:50:e4:1d:0a:c8:b7:68: a9:33:d3:7b:e2:f4:f9:51:16:cc:f9:6f:96:25:0e:fc:40:bc: b7:c2:49:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhN751McUoQWXuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MmQ0Nzk5OWYtODc2Ny00NTM3LWExMWUtOGM1ZGIxZjFmMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw/jJ5gZ4svXRxYqqXPZo7Rpo6Qv2L06p0Je k5IEzv37B/kgywxMQpjG7xPwenZ5dSyMGsND/eYwCvi3MOn6UxxMosYqWjP4KqD/ 88oR6Lm3kf+NNid5At5zzcvsrHhZscVBBoOX5QnJnrjrLtphJiGG9vrOfY2AcsD3 6GkbogrUTRQj8XGn+3gKLxn0uCf8bropQLoIijl6dQ5ndg3JQDJ/fdRc3CzC2NCH IyFq3Q9I1IIZ+kyP3crXjudGNqsp4bCMi4BnSh53rCpPFs9vu8vJz1QR1Xx4YsYr Xlvr2xqEGrCq5lJ3Euvo7GiMLsNPNLKSuKZ2xz2WuJ7wg+NG1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyZkFXfb4QCt16gRlnb5sQCEdBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMzkyODdhNGQtNWE5Yi0z NmFmLTljZjMtZjljZjNlOWViM2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkQ+dREUIkyvkyiP/bco7YFU1b6m06OjfOYpK7Me47seGkPHcwADtIe Z1bApCPqiH4/59dPVo8o2EKDEYiVbPNgAvUTpk7xnhHiAf0XrzC+a2NBg7o9xDH5 ixjCnsNQej9JgQT8gIYcYXkzfcse6ngisM52PIOKQQuKupDpUDKxasSr6akHMZ+r C3kT5hjtPkaoOq6deRWhIeeGYvQylgQeNRrjYFYtTJnh63q3MI5icxhIoX+Ho6cx 8iJHhFCLD0hbhQumARve0VjssY+Qxy6ncJmMK8ogqxXAVv5aeQnGc86TUOQdCsi3 aKkz03vi9PlRFsz5b5YlDvxAvLfCSd4= -----END CERTIFICATE-----Generated at Mon Apr 6 15:22:26 2026 by rpki-client