$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa File: 5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa (raw, json) Hash identifier: aqKMVYtmORlj4iVtPJOxRbfoj5AwZZvTP0Mje3W7kKk= Subject key identifier: AA:D1:92:50:F4:69:5D:44:D3:E1:4D:8F:A7:B8:B4:C2:BE:F0:89:07 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884E6AD72A58974528E78C0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e6:ad:72:a5:89:74:52:8e:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=6924f24a-8467-4927-9f04-d00bb4e8d878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:2a:91:85:10:11:15:67:9e:5f:70:06:10: c2:2d:ec:d0:29:14:8b:cb:80:de:85:ad:0c:8d:83: 56:6a:7d:9a:7a:5e:8c:ab:d5:b3:e6:5f:66:84:6b: f0:ed:b6:b0:5b:ac:65:f8:44:7d:b8:c6:9a:d6:8e: b7:ff:f3:be:25:81:76:ad:59:dc:8e:4e:53:ee:ec: f9:12:0b:78:05:df:25:83:9f:c0:2f:6d:9f:0b:12: 39:9d:70:0c:45:e3:26:6b:e9:97:69:22:ca:17:dd: 29:a4:b5:0c:48:b7:6a:d1:45:9c:8a:b2:87:36:dc: 70:4c:3a:20:79:c3:52:19:fe:3c:75:cd:37:55:df: 0d:d4:9f:76:1a:86:c6:63:30:4a:6f:2c:c9:7e:4e: bf:52:7d:b5:9c:c8:60:99:ed:23:6c:85:7f:a0:12: aa:a9:3f:48:af:e1:31:c6:77:1c:55:b8:f8:b1:c0: 5e:9f:ff:8f:ef:49:cb:b2:29:b0:6a:b3:4b:8f:3d: be:ad:5e:29:1c:38:42:ef:82:e6:a2:0f:a5:1d:68: 1e:05:9f:03:5b:39:9e:00:03:00:93:8c:52:fd:1d: 62:72:a2:43:41:07:c0:00:a7:39:cb:ff:61:58:33: 6a:5e:b2:6d:b5:35:ea:32:bc:a6:3f:4a:cb:30:41: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:92:50:F4:69:5D:44:D3:E1:4D:8F:A7:B8:B4:C2:BE:F0:89:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5578c2eb-ec9b-3a78-987e-67b09469ac3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:91:fb:0d:fa:99:ca:50:63:a1:32:e6:cb:89:fe:c1:62:bb: 28:19:13:76:f8:7b:69:01:df:7f:b5:6e:ec:c4:e0:a1:c5:ea: ab:cc:2f:d7:49:0b:a7:5e:ba:89:c0:e5:90:7c:f0:3b:42:92: 74:8a:6a:10:be:87:58:9d:d2:bc:7c:08:23:20:11:c7:07:f3: ec:ed:ff:24:72:c6:55:aa:72:0e:37:14:00:a0:dc:81:b1:7f: 59:73:f8:bf:89:d0:00:fd:b4:50:4a:99:08:b5:12:32:36:9f: 4a:b7:ad:1d:09:83:e9:9c:ad:ff:a5:4a:58:76:f3:d8:90:9a: 21:73:d6:d6:44:18:8a:d1:63:7f:0c:03:80:78:d3:4d:9e:88: 4d:2d:e4:44:19:30:f6:8c:59:d7:1b:9f:8e:79:fa:40:08:67: bc:7b:ad:94:8d:4d:7a:59:98:83:de:14:58:f5:1b:51:f7:c6: 3d:d5:e5:e6:c1:57:49:54:a4:fa:35:71:b7:22:2a:a4:eb:ad: 14:30:54:ba:ed:b9:52:88:f1:3d:6a:0a:06:f3:f3:f9:8b:23: de:b7:54:75:44:48:c4:e3:b8:45:51:fd:90:c9:83:46:72:52: 35:0e:51:de:eb:54:b4:76:67:7e:0e:71:b5:66:24:8a:24:91: b4:e2:34:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOatcqWJdFKOeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk NjkyNGYyNGEtODQ2Ny00OTI3LTlmMDQtZDAwYmI0ZThkODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoQqkYUQERVnnl9wBhDCLezQKRSLy4Deha0M jYNWan2ael6Mq9Wz5l9mhGvw7bawW6xl+ER9uMaa1o63//O+JYF2rVncjk5T7uz5 Egt4Bd8lg5/AL22fCxI5nXAMReMma+mXaSLKF90ppLUMSLdq0UWcirKHNtxwTDog ecNSGf48dc03Vd8N1J92GobGYzBKbyzJfk6/Un21nMhgme0jbIV/oBKqqT9Ir+Ex xnccVbj4scBen/+P70nLsimwarNLjz2+rV4pHDhC74Lmog+lHWgeBZ8DWzmeAAMA k4xS/R1icqJDQQfAAKc5y/9hWDNqXrJttTXqMrymP0rLMEF01wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrRklD0aV1E0+FNj6e4tMK+8IkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNTU3OGMyZWItZWM5Yi0z YTc4LTk4N2UtNjdiMDk0NjlhYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGR+w36mcpQY6Ey5suJ/sFiuygZE3b4e2kB33+1buzE4KHF6qvML9dJ C6deuonA5ZB88DtCknSKahC+h1id0rx8CCMgEccH8+zt/yRyxlWqcg43FACg3IGx f1lz+L+J0AD9tFBKmQi1EjI2n0q3rR0Jg+mcrf+lSlh289iQmiFz1tZEGIrRY38M A4B4002eiE0t5EQZMPaMWdcbn455+kAIZ7x7rZSNTXpZmIPeFFj1G1H3xj3V5ebB V0lUpPo1cbciKqTrrRQwVLrtuVKI8T1qCgbz8/mLI963VHVESMTjuEVR/ZDJg0Zy UjUOUd7rVLR2Z34OcbVmJIokkbTiNKM= -----END CERTIFICATE-----Generated at Mon Apr 6 15:23:04 2026 by rpki-client