$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa File: 3ea87a5c-5449-3476-85ba-b76f8912054d.roa (raw, json) Hash identifier: kN/9VoF7028t7m18bQcxw+cneor5T4Tr+EFC2SmUVEs= Subject key identifier: 42:C8:76:BE:90:A2:92:26:87:7E:2F:7C:A0:4E:02:37:CC:08:1A:6B Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A5F6189946C718CE02640 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa Signing time: Tue 21 Oct 2025 09:31:28 +0000 ROA not before: Tue 21 Oct 2025 09:31:28 +0000 ROA not after: Mon 19 Jan 2026 10:31:28 +0000 asID: 35039 IP address blocks: 130.214.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:5f:61:89:94:6c:71:8c:e0:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:28 2025 GMT Not After : Jan 19 10:31:28 2026 GMT Subject: CN=2a2a43fd-f72e-48ce-8d33-243f57100972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:21:8c:5f:b1:bc:5b:ab:c2:1f:72:1b:c7: 2b:cd:21:67:eb:ed:cb:a0:1c:28:2b:6d:f8:4f:51: 03:59:0d:1a:1c:b9:94:21:40:68:32:9d:f0:37:0e: 2d:1d:97:8e:14:47:40:db:7c:3c:48:46:1b:18:23: 41:11:4a:ce:7e:3f:82:7b:43:5d:90:4a:3e:44:45: 0b:09:0e:ae:31:69:7c:b3:52:ea:4c:c3:2a:53:9c: ee:00:63:0f:82:ea:f6:74:72:68:88:34:78:47:1c: 93:69:89:93:9e:d8:02:9d:39:20:8c:1d:a7:60:7b: 6e:b6:59:56:58:26:04:5d:eb:4d:50:3a:cc:dd:b1: cf:0a:ae:a5:2c:bf:a8:8f:39:c0:be:81:69:43:ca: cd:71:06:f6:e7:0d:72:af:23:4f:11:ea:13:45:5c: 0c:a3:28:03:0b:d9:1a:09:12:87:ff:dc:34:f2:11: a5:ba:e4:a1:06:f8:16:d3:4f:8f:64:da:14:26:5e: 8c:40:4a:35:d5:23:13:9b:88:aa:07:c3:32:e4:11: 9e:b4:04:a8:40:d0:16:10:ae:e9:22:52:ea:ff:b5: 02:62:16:d3:ba:6c:da:99:cf:d5:04:9c:61:6c:87: 02:ce:12:66:d6:41:28:4c:34:08:92:6a:1d:db:ea: 35:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C8:76:BE:90:A2:92:26:87:7E:2F:7C:A0:4E:02:37:CC:08:1A:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/3ea87a5c-5449-3476-85ba-b76f8912054d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:b9:73:ab:bd:33:3f:84:24:7a:25:54:3f:09:4f:47:e0:47: ae:52:f0:e9:9f:fe:e3:2c:0e:53:d4:b9:46:31:cb:17:12:ca: 8d:48:b0:e3:c5:e0:57:51:e1:2b:58:ee:11:4d:9a:6a:87:5a: 39:89:8f:c7:a5:e0:22:60:a7:9f:2d:d3:3d:01:8a:7d:78:a0: 25:16:db:fb:19:58:ff:1d:d6:c6:97:b6:4a:d8:47:e0:9f:c5: 59:3b:49:ee:3b:33:05:18:82:a0:16:44:5a:7f:48:e2:6b:49: 41:f6:09:46:92:6f:ce:7c:43:54:62:be:66:90:90:5d:1a:40: d2:f2:98:ec:bb:29:f3:55:bb:0d:d1:5c:3b:b3:56:72:ae:61: 49:a9:42:ad:09:49:ea:6b:2e:4d:98:89:ad:05:19:62:ab:cc: a2:e6:04:42:89:6b:34:b9:e5:be:f9:5f:cb:3a:16:1c:d8:e3: c3:ce:9b:63:37:54:6e:de:10:29:d1:06:dd:2b:23:42:c7:13: b9:16:44:a2:d6:e1:15:41:44:a9:77:95:c1:85:82:e8:b9:70: 5a:7a:00:9c:a1:b5:b2:07:8b:59:ad:f4:60:4c:b4:c8:4c:82: 64:4e:a8:9c:26:19:2a:fb:16:89:80:7f:7d:df:81:f9:2a:8c: c9:71:3d:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCl9hiZRscYzgJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEyOFoXDTI2MDExOTEwMzEyOFowLzEtMCsGA1UEAxMk MmEyYTQzZmQtZjcyZS00OGNlLThkMzMtMjQzZjU3MTAwOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigohjF+xvFurwh9yG8crzSFn6+3LoBwoK234 T1EDWQ0aHLmUIUBoMp3wNw4tHZeOFEdA23w8SEYbGCNBEUrOfj+Ce0NdkEo+REUL CQ6uMWl8s1LqTMMqU5zuAGMPgur2dHJoiDR4RxyTaYmTntgCnTkgjB2nYHtutllW WCYEXetNUDrM3bHPCq6lLL+ojznAvoFpQ8rNcQb25w1yryNPEeoTRVwMoygDC9ka CRKH/9w08hGluuShBvgW00+PZNoUJl6MQEo11SMTm4iqB8My5BGetASoQNAWEK7p IlLq/7UCYhbTumzamc/VBJxhbIcCzhJm1kEoTDQIkmod2+o1SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELIdr6QopImh34vfKBOAjfMCBprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvM2VhODdhNWMtNTQ0OS0z NDc2LTg1YmEtYjc2Zjg5MTIwNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI65c6u9Mz+EJHolVD8JT0fgR65S8Omf/uMsDlPUuUYxyxcSyo1IsOPF 4FdR4StY7hFNmmqHWjmJj8el4CJgp58t0z0Bin14oCUW2/sZWP8d1saXtkrYR+Cf xVk7Se47MwUYgqAWRFp/SOJrSUH2CUaSb858Q1RivmaQkF0aQNLymOy7KfNVuw3R XDuzVnKuYUmpQq0JSeprLk2Yia0FGWKrzKLmBEKJazS55b75X8s6FhzY48POm2M3 VG7eECnRBt0rI0LHE7kWRKLW4RVBRKl3lcGFgui5cFp6AJyhtbIHi1mt9GBMtMhM gmROqJwmGSr7FomAf33fgfkqjMlxPcM= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:52 2025 by rpki-client