$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/49e87a50-8efc-3dd3-9f2f-6d7dbc5b90e5.roa File: 49e87a50-8efc-3dd3-9f2f-6d7dbc5b90e5.roa (raw, json) Hash identifier: 4zJPM7BCCb5E6+UU8iBgFiGimvULbCjH9XuQoV1+Cq0= Subject key identifier: 6A:46:25:FF:98:35:36:72:CA:CF:FB:7B:97:B8:F4:74:F8:59:BC:07 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884E81C7D9E6834C8B59C80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/49e87a50-8efc-3dd3-9f2f-6d7dbc5b90e5.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e8:1c:7d:9e:68:34:c8:b5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=0309f120-1ebc-4441-bf7e-b325dc0d658e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:01:c6:57:12:a7:98:64:49:99:22:2a:d0: ee:bf:5b:f1:18:98:b7:32:cd:47:bc:74:89:4e:e6: 03:66:0e:c6:60:94:15:28:9d:2f:84:e9:fc:e8:10: c7:56:e9:dc:57:8b:fb:99:17:14:93:f3:2d:95:82: aa:64:0c:73:3f:51:7e:27:8c:47:0e:3d:ef:f0:87: 27:6c:7e:52:28:70:74:32:4d:b6:1e:8d:f9:ae:a4: cd:7c:d3:70:9c:10:66:18:34:08:3e:a3:62:6b:c3: 42:c9:d3:63:ce:af:73:4c:c7:74:7f:5d:90:d2:f0: b3:82:62:a1:f0:b3:bc:79:86:a5:b5:23:ab:1c:00: 8e:e7:c2:fb:cd:26:02:47:07:fb:a9:c5:56:5f:bc: 81:98:5b:7a:63:88:3a:78:64:b6:6e:40:b9:65:49: a3:81:d7:bd:f6:6f:f7:21:ed:74:d8:81:ad:93:48: 10:47:d2:27:2c:72:98:2e:c1:39:8e:4d:be:87:5b: 04:4f:b3:6c:b1:e1:fc:37:3e:d5:08:56:18:da:e5: fe:cb:28:e7:3f:e9:dd:85:3a:b8:aa:3f:d0:63:ce: 06:8b:09:a3:73:b0:6d:08:b3:b7:5a:5c:a4:10:ad: aa:44:5a:ae:8c:75:99:bf:b6:1a:21:f8:43:96:b7: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:46:25:FF:98:35:36:72:CA:CF:FB:7B:97:B8:F4:74:F8:59:BC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/49e87a50-8efc-3dd3-9f2f-6d7dbc5b90e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:21:4a:6a:4b:26:f9:73:ef:a2:f1:98:14:de:cb:18:04:6c: bc:2e:3c:a7:4d:ef:e3:93:a8:9a:0d:48:91:b4:c9:a1:5b:e9: f2:42:c8:d4:57:5a:4d:74:06:fe:86:85:58:c7:9b:20:29:97: d0:27:12:67:6f:72:8f:3d:40:9a:4b:ed:63:fc:e6:93:c4:00: 8d:a8:69:5b:d7:54:d5:46:15:03:cc:05:5e:94:ee:27:31:ef: c3:14:5a:e4:3d:8c:24:8d:33:b9:0f:d1:ba:74:a0:95:69:bb: ef:df:43:f1:d0:82:5c:25:c4:0c:05:55:23:e7:ca:91:c6:3c: 5c:76:86:e3:3a:03:01:67:c1:78:14:fc:a2:92:95:fb:aa:d6: 41:23:22:90:29:09:ec:4e:02:de:76:18:47:3f:2b:8d:52:8b: c5:bd:1a:a0:43:17:97:bf:8c:41:88:f4:0a:09:ef:37:55:31: fe:eb:0f:a2:cd:17:df:e8:eb:a3:ee:c3:f9:02:fe:31:a0:c0: e3:36:42:26:64:5c:d6:aa:39:8a:8f:28:4e:29:88:22:d4:1c: a2:41:42:ec:98:ad:83:74:0d:3e:9c:87:ef:86:b9:a5:2b:23: 68:42:6c:3b:75:3a:e1:2d:45:38:cb:d1:64:7a:34:4f:eb:d4: 32:f3:db:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOgcfZ5oNMi1nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MDMwOWYxMjAtMWViYy00NDQxLWJmN2UtYjMyNWRjMGQ2NThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiskBxlcSp5hkSZkiKtDuv1vxGJi3Ms1HvHSJ TuYDZg7GYJQVKJ0vhOn86BDHVuncV4v7mRcUk/MtlYKqZAxzP1F+J4xHDj3v8Icn bH5SKHB0Mk22Ho35rqTNfNNwnBBmGDQIPqNia8NCydNjzq9zTMd0f12Q0vCzgmKh 8LO8eYaltSOrHACO58L7zSYCRwf7qcVWX7yBmFt6Y4g6eGS2bkC5ZUmjgde99m/3 Ie102IGtk0gQR9InLHKYLsE5jk2+h1sET7NsseH8Nz7VCFYY2uX+yyjnP+ndhTq4 qj/QY84Giwmjc7BtCLO3WlykEK2qRFqujHWZv7YaIfhDlrfscQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpGJf+YNTZyys/7e5e49HT4WbwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNDllODdhNTAtOGVmYy0z ZGQzLTlmMmYtNmQ3ZGJjNWI5MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQhSmpLJvlz76LxmBTeyxgEbLwuPKdN7+OTqJoNSJG0yaFb6fJCyNRX Wk10Bv6GhVjHmyApl9AnEmdvco89QJpL7WP85pPEAI2oaVvXVNVGFQPMBV6U7icx 78MUWuQ9jCSNM7kP0bp0oJVpu+/fQ/HQglwlxAwFVSPnypHGPFx2huM6AwFnwXgU /KKSlfuq1kEjIpApCexOAt52GEc/K41Si8W9GqBDF5e/jEGI9AoJ7zdVMf7rD6LN F9/o66Puw/kC/jGgwOM2QiZkXNaqOYqPKE4piCLUHKJBQuyYrYN0DT6ch++GuaUr I2hCbDt1OuEtRTjL0WR6NE/r1DLz24I= -----END CERTIFICATE-----Generated at Mon Apr 6 15:21:21 2026 by rpki-client