$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3cecfe36-03ea-314b-bbaf-1dc07c19109b.roa File: 3cecfe36-03ea-314b-bbaf-1dc07c19109b.roa (raw, json) Hash identifier: xTD/B2F+6vveE2qYVTnTlgGC+V2NyMBb1gXG31DkjU4= Subject key identifier: 43:78:B4:FD:4F:11:32:C4:9A:DF:5D:CE:E3:7C:B5:33:1C:C6:9F:F1 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A9F80EA4818433EEDF080 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3cecfe36-03ea-314b-bbaf-1dc07c19109b.roa Signing time: Tue 21 Oct 2025 09:31:58 +0000 ROA not before: Tue 21 Oct 2025 09:31:58 +0000 ROA not after: Mon 19 Jan 2026 10:31:58 +0000 asID: 35039 IP address blocks: 130.214.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:9f:80:ea:48:18:43:3e:ed:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:58 2025 GMT Not After : Jan 19 10:31:58 2026 GMT Subject: CN=5a38fa01-dfa3-4797-86ea-429832d7f633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1c:68:da:8f:a6:56:2a:67:41:34:17:70:8e: b5:b2:78:4a:8d:fd:7b:e4:a2:4f:54:fd:e8:37:e5: 74:5b:4a:bb:8c:14:21:59:25:cc:9d:dd:63:f2:1f: 55:da:26:87:b8:a4:fa:da:62:55:ca:db:97:c6:09: ac:35:f9:1d:5d:7f:72:cf:86:ef:90:8a:6a:e2:16: db:77:05:43:b0:22:18:a5:76:72:03:d5:cb:0f:e7: f8:88:73:d7:0f:35:dd:bb:56:1e:d3:d0:85:a0:c9: e1:f1:ac:22:3d:fe:64:11:70:86:75:f8:f0:ad:c3: 23:55:68:02:4f:b1:be:b1:06:ad:65:a1:89:8b:ac: 9e:78:7d:9d:43:36:3e:a1:27:16:a2:27:64:56:0d: 72:9a:1f:53:a4:19:49:37:4c:13:a4:20:88:d2:79: a7:d2:c4:a0:30:52:5a:c3:4c:dd:05:d8:c9:e3:72: 69:5b:08:6c:72:ad:d3:80:9d:75:86:70:7e:f9:f9: 94:87:24:90:68:e1:91:29:94:bf:a4:f6:49:8e:b2: 58:9f:69:8a:c6:90:04:49:26:10:51:3e:1b:5b:13: 90:cd:9d:f6:4d:af:27:8c:1c:41:4d:eb:3d:38:9b: 03:cf:86:5b:3d:fe:86:85:79:a4:a8:f7:4a:f4:91: 02:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:B4:FD:4F:11:32:C4:9A:DF:5D:CE:E3:7C:B5:33:1C:C6:9F:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3cecfe36-03ea-314b-bbaf-1dc07c19109b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:87:6c:63:5f:6a:fb:10:b8:65:6a:a6:a9:e0:2c:ca:89:68: b4:5f:64:ec:04:e3:02:e6:7c:b9:95:69:32:e1:05:04:10:d2: c4:1e:21:5e:60:4c:3c:98:cf:39:cd:f7:c5:0b:d2:18:5f:ad: 7f:15:74:83:32:80:6d:bc:3b:2a:04:77:39:b9:be:27:e4:90: 86:5d:bb:54:c1:39:38:6d:21:92:fe:8a:47:3c:55:03:65:9a: 1a:1f:6c:d6:83:7f:16:7a:c9:b8:87:d6:55:76:52:8d:de:8b: 3d:d0:33:b9:cf:dd:b5:4a:b5:9e:6c:83:6b:46:4e:58:e1:29: ab:26:12:82:38:9d:19:bd:2e:f9:78:fc:0d:d4:64:43:a5:0f: a9:b4:8e:a6:7e:2c:9c:9f:25:5b:00:04:dc:81:2d:31:77:9b: 56:c0:72:be:ea:fb:a5:79:89:5e:9b:fe:59:09:3b:d2:b9:b2: 74:bb:d6:af:56:da:1f:61:65:9a:6d:2c:64:dc:71:ae:e2:28: 5f:57:af:c8:95:0d:81:ff:8f:30:9b:b8:72:dd:e4:71:23:39: b8:55:67:f8:c7:36:f6:83:75:76:5f:f6:c7:35:5b:7a:4a:90: 77:01:79:1c:94:eb:41:a5:36:75:34:d8:d3:42:2f:05:fd:dd: a3:17:95:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCp+A6kgYQz7t8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzE1OFoXDTI2MDExOTEwMzE1OFowLzEtMCsGA1UEAxMk NWEzOGZhMDEtZGZhMy00Nzk3LTg2ZWEtNDI5ODMyZDdmNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxxo2o+mVipnQTQXcI61snhKjf175KJPVP3o N+V0W0q7jBQhWSXMnd1j8h9V2iaHuKT62mJVytuXxgmsNfkdXX9yz4bvkIpq4hbb dwVDsCIYpXZyA9XLD+f4iHPXDzXdu1Ye09CFoMnh8awiPf5kEXCGdfjwrcMjVWgC T7G+sQatZaGJi6yeeH2dQzY+oScWoidkVg1ymh9TpBlJN0wTpCCI0nmn0sSgMFJa w0zdBdjJ43JpWwhscq3TgJ11hnB++fmUhySQaOGRKZS/pPZJjrJYn2mKxpAESSYQ UT4bWxOQzZ32Ta8njBxBTes9OJsDz4ZbPf6GhXmkqPdK9JECcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN4tP1PETLEmt9dzuN8tTMcxp/xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvM2NlY2ZlMzYtMDNlYS0z MTRiLWJiYWYtMWRjMDdjMTkxMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGHbGNfavsQuGVqpqngLMqJaLRfZOwE4wLmfLmVaTLhBQQQ0sQeIV5g TDyYzznN98UL0hhfrX8VdIMygG28OyoEdzm5vifkkIZdu1TBOThtIZL+ikc8VQNl mhofbNaDfxZ6ybiH1lV2Uo3eiz3QM7nP3bVKtZ5sg2tGTljhKasmEoI4nRm9Lvl4 /A3UZEOlD6m0jqZ+LJyfJVsABNyBLTF3m1bAcr7q+6V5iV6b/lkJO9K5snS71q9W 2h9hZZptLGTcca7iKF9Xr8iVDYH/jzCbuHLd5HEjObhVZ/jHNvaDdXZf9sc1W3pK kHcBeRyU60GlNnU02NNCLwX93aMXlcE= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:51 2025 by rpki-client