$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4767181e-b661-3d88-9915-7b59c2ee8c5c.roa File: 4767181e-b661-3d88-9915-7b59c2ee8c5c.roa (raw, json) Hash identifier: baCsIXY/NCtuEecuxM70nwi3fTKYUrvaWlTytz07f6o= Subject key identifier: 58:2A:F0:AA:0F:EE:F4:7B:4F:97:D4:A9:45:2C:05:BD:4C:DC:49:A9 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B97ED74ACD736F1CB7A8ADD40 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4767181e-b661-3d88-9915-7b59c2ee8c5c.roa Signing time: Tue 21 Oct 2025 08:33:12 +0000 ROA not before: Tue 21 Oct 2025 08:33:12 +0000 ROA not after: Mon 19 Jan 2026 09:33:12 +0000 asID: 35039 IP address blocks: 130.214.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:ed:74:ac:d7:36:f1:cb:7a:8a:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 08:33:12 2025 GMT Not After : Jan 19 09:33:12 2026 GMT Subject: CN=29895b81-152e-49f6-aa37-ebdbdfe3f33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:ee:d6:1f:a7:07:45:4e:2e:1c:46:f6:31: 79:b3:76:ed:2b:ce:df:8e:52:43:23:ce:06:e8:4f: 5f:2d:63:50:85:21:89:a8:08:69:d1:db:45:08:b9: 1d:33:bf:e0:f8:8f:ee:47:bc:99:13:3c:4b:0e:b4: 91:02:7b:dc:df:04:3f:45:cb:62:96:e9:6f:c8:22: d3:97:e8:1b:17:ff:42:7b:42:dc:d1:cc:d4:a8:ca: f4:20:40:52:bb:95:36:33:74:ca:1c:8b:49:ea:6a: 54:04:32:b3:06:21:aa:b8:fc:d6:2a:24:b8:7e:74: 20:3e:64:a9:b8:c4:ca:3d:d7:bb:e2:fd:bd:74:17: af:3f:33:76:46:58:22:0f:2b:c3:c4:f9:05:be:bc: a4:86:f2:00:e5:74:fd:1f:fe:2f:b5:f5:28:40:89: f6:72:0b:5f:c7:24:fe:ed:56:a7:69:79:9b:e7:cc: a7:26:94:bc:99:82:78:75:70:34:56:d7:2d:ed:99: d2:e9:76:6d:c7:1b:c8:6d:5e:83:40:04:b8:52:3d: 3a:3a:a3:b0:91:3e:3b:d6:6b:ae:04:55:08:b7:64: 41:8b:60:88:12:1d:48:c7:0f:e1:fb:79:08:df:c3: 11:90:19:6e:eb:bf:5f:2e:4d:a1:52:31:db:6b:93: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:F0:AA:0F:EE:F4:7B:4F:97:D4:A9:45:2C:05:BD:4C:DC:49:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4767181e-b661-3d88-9915-7b59c2ee8c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3c:0e:bd:01:c1:7e:ea:cd:ff:db:03:9b:bf:9b:c1:7f:70: 40:c9:1f:08:7b:26:58:b2:2d:3b:50:c6:dd:36:e9:df:f0:de: a8:78:37:0a:52:15:18:f7:b3:4d:e2:7d:0c:6e:72:cf:ca:1a: 4f:a4:2f:90:2c:b1:93:53:20:96:58:18:60:b3:06:6e:fc:4f: f7:cd:c8:7b:c2:a8:49:a1:16:3a:64:aa:6e:39:0d:e6:37:12: 2c:21:44:e5:54:ad:f8:82:55:1d:e8:da:4f:8d:e1:d7:39:c4: 5f:2a:9b:24:f1:e2:94:35:45:71:83:44:56:70:70:82:91:d2: c1:44:a0:8b:37:94:cf:c3:37:f8:e9:9f:f8:ca:86:f0:23:4a: 9e:38:93:f1:29:16:ee:bb:94:09:24:b3:4f:53:80:a4:9e:b7: 4f:13:e9:39:37:4d:29:94:5d:94:a4:7a:35:e6:2a:f0:f5:6c: de:88:69:dc:b1:40:fe:8d:2c:76:bf:a3:ec:8b:d2:b1:b4:38: 8f:c2:44:13:c0:a5:da:f3:ba:c7:1f:a7:75:76:05:7c:3f:a0: b6:c1:0c:28:43:7a:e7:09:b7:89:29:92:1a:58:6a:7e:fb:57: af:97:fa:2e:42:92:88:fd:ce:e9:ba:20:b4:05:76:84:a9:a9: 02:1a:44:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX7XSs1zbxy3qK3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA4MzMxMloXDTI2MDExOTA5MzMxMlowLzEtMCsGA1UEAxMk Mjk4OTViODEtMTUyZS00OWY2LWFhMzctZWJkYmRmZTNmMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom3u1h+nB0VOLhxG9jF5s3btK87fjlJDI84G 6E9fLWNQhSGJqAhp0dtFCLkdM7/g+I/uR7yZEzxLDrSRAnvc3wQ/RctilulvyCLT l+gbF/9Ce0Lc0czUqMr0IEBSu5U2M3TKHItJ6mpUBDKzBiGquPzWKiS4fnQgPmSp uMTKPde74v29dBevPzN2RlgiDyvDxPkFvrykhvIA5XT9H/4vtfUoQIn2cgtfxyT+ 7VanaXmb58ynJpS8mYJ4dXA0Vtct7ZnS6XZtxxvIbV6DQAS4Uj06OqOwkT471muu BFUIt2RBi2CIEh1Ixw/h+3kI38MRkBlu679fLk2hUjHba5Ng6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgq8KoP7vR7T5fUqUUsBb1M3EmpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNDc2NzE4MWUtYjY2MS0z ZDg4LTk5MTUtN2I1OWMyZWU4YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC48Dr0BwX7qzf/bA5u/m8F/cEDJHwh7JliyLTtQxt026d/w3qh4NwpS FRj3s03ifQxucs/KGk+kL5AssZNTIJZYGGCzBm78T/fNyHvCqEmhFjpkqm45DeY3 EiwhROVUrfiCVR3o2k+N4dc5xF8qmyTx4pQ1RXGDRFZwcIKR0sFEoIs3lM/DN/jp n/jKhvAjSp44k/EpFu67lAkks09TgKSet08T6Tk3TSmUXZSkejXmKvD1bN6Iadyx QP6NLHa/o+yL0rG0OI/CRBPApdrzuscfp3V2BXw/oLbBDChDeucJt4kpkhpYan77 V6+X+i5Ckoj9zum6ILQFdoSpqQIaRLE= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:56 2025 by rpki-client