$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa File: 4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa (raw, json) Hash identifier: f2IelM2TBgoPcBHP14MKWveIzHWUYTX2+eYVwo6bLuo= Subject key identifier: CE:97:93:E3:CD:CB:28:D7:2C:57:27:30:F5:D9:5C:9B:5A:D4:2C:FE Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A8DCFA88646ED1BEC90C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa Signing time: Tue 21 Oct 2025 09:31:50 +0000 ROA not before: Tue 21 Oct 2025 09:31:50 +0000 ROA not after: Mon 19 Jan 2026 10:31:50 +0000 asID: 35039 IP address blocks: 130.214.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:8d:cf:a8:86:46:ed:1b:ec:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:50 2025 GMT Not After : Jan 19 10:31:50 2026 GMT Subject: CN=cb960a97-f2ea-4a14-b90e-cf744a905465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:9e:8d:19:08:85:ae:6d:db:37:2a:8f:2e: 1e:6f:10:e1:5d:5d:7d:db:59:12:4e:eb:01:bb:ea: 4a:6e:ab:87:2b:d6:93:90:7e:1a:13:5b:18:e3:6b: b3:73:2f:2e:74:a7:07:f7:bd:26:f4:5b:c5:01:85: 29:4d:11:16:0f:8b:36:01:46:76:4e:fb:81:18:91: e6:b0:fd:0b:de:4e:cf:a0:4d:81:48:90:cc:cf:e0: 76:62:0b:dc:aa:f3:75:14:e3:62:4b:e6:e3:b9:9f: 77:dc:7a:fd:c9:fb:fd:3c:f0:02:ec:55:e2:14:bd: e9:20:fd:50:86:fa:e2:28:f3:8d:18:20:f4:d2:70: a8:e2:ec:89:0f:0e:8f:7a:9c:a9:64:5f:58:ec:38: 25:f9:fd:3e:40:18:e6:ba:42:c1:ef:e9:56:63:24: 14:5c:41:14:b8:14:79:74:bc:fe:96:01:26:d4:84: c9:3c:fa:94:8d:79:21:dd:23:5e:77:d5:32:7f:fa: 8d:02:37:7e:d0:46:f7:01:d7:8f:0b:d6:dc:9d:cb: cd:12:e2:9f:38:68:35:27:b0:d5:b8:46:c3:21:3c: 7a:29:5a:97:b1:4d:40:9a:8c:f1:aa:8a:36:71:aa: 08:1d:7f:25:24:af:89:66:8a:a0:0f:8f:3a:37:b3: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:93:E3:CD:CB:28:D7:2C:57:27:30:F5:D9:5C:9B:5A:D4:2C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:05:6d:61:fa:63:f0:ae:01:16:63:1c:6c:48:2c:cf:49:a1: 58:ed:d2:85:e6:42:01:08:e7:0e:b4:44:f6:c6:7b:d8:7d:61: 1b:ed:b6:24:8f:57:2a:eb:f1:9b:66:0b:9d:b2:1e:0f:ac:07: 82:88:c7:3d:18:b6:4e:75:2b:e8:a7:87:0a:8d:21:bc:e7:43: 59:50:b6:d3:af:37:2a:85:4d:d1:2c:e9:a2:71:55:e6:22:c6: 1f:9d:31:fc:5b:4c:b5:a4:b5:24:22:13:d9:b2:92:07:86:35: 7d:50:ef:17:ab:19:73:a1:cd:7d:39:7c:33:8b:61:71:b1:93: 39:ef:90:c3:f5:c1:a0:da:5e:be:4b:01:10:49:98:37:14:5a: 8a:c6:60:c5:7e:80:59:2e:26:02:8b:53:2c:0b:1b:9f:83:f9: 99:26:a3:1b:87:b9:b6:6f:87:95:78:10:c6:dd:3f:b0:6a:34: 3a:4c:b4:44:60:89:2d:14:1f:70:18:8a:6f:0c:c9:3c:9d:08: 38:e5:c6:13:7d:42:e4:a4:e9:e5:ce:36:9f:9d:80:30:91:a6: 75:6f:b0:e3:97:ef:e6:83:86:f3:17:14:b8:25:1f:eb:22:67: 22:26:b5:e0:0d:b3:2d:70:c7:4c:93:71:0f:c1:e4:73:ec:27: 3a:92:01:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCo3PqIZG7RvskMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzE1MFoXDTI2MDExOTEwMzE1MFowLzEtMCsGA1UEAxMk Y2I5NjBhOTctZjJlYS00YTE0LWI5MGUtY2Y3NDRhOTA1NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/qejRkIha5t2zcqjy4ebxDhXV1921kSTusB u+pKbquHK9aTkH4aE1sY42uzcy8udKcH970m9FvFAYUpTREWD4s2AUZ2TvuBGJHm sP0L3k7PoE2BSJDMz+B2YgvcqvN1FONiS+bjuZ933Hr9yfv9PPAC7FXiFL3pIP1Q hvriKPONGCD00nCo4uyJDw6PepypZF9Y7Dgl+f0+QBjmukLB7+lWYyQUXEEUuBR5 dLz+lgEm1ITJPPqUjXkh3SNed9Uyf/qNAjd+0Eb3AdePC9bcncvNEuKfOGg1J7DV uEbDITx6KVqXsU1Amozxqoo2caoIHX8lJK+JZoqgD486N7NOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6Xk+PNyyjXLFcnMPXZXJta1Cz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNGE4ZmRmOGYtNjg0MS0z Zjc3LThjYzktNTFkNzE1NDJjNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgta+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYFbWH6Y/CuARZjHGxILM9JoVjt0oXmQgEI5w60RPbGe9h9YRvttiSP Vyrr8ZtmC52yHg+sB4KIxz0Ytk51K+inhwqNIbznQ1lQttOvNyqFTdEs6aJxVeYi xh+dMfxbTLWktSQiE9mykgeGNX1Q7xerGXOhzX05fDOLYXGxkznvkMP1waDaXr5L ARBJmDcUWorGYMV+gFkuJgKLUywLG5+D+ZkmoxuHubZvh5V4EMbdP7BqNDpMtERg iS0UH3AYim8MyTydCDjlxhN9QuSk6eXONp+dgDCRpnVvsOOX7+aDhvMXFLglH+si ZyImteANsy1wx0yTcQ/B5HPsJzqSAaQ= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:52 2025 by rpki-client