$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5900bd7f-b329-3e01-9038-9fa314bc762f.roa File: 5900bd7f-b329-3e01-9038-9fa314bc762f.roa (raw, json) Hash identifier: pOJRoNn/Qb42f2SmdWHRWIMsPosGUXREdg2pWWpyDSg= Subject key identifier: 7F:4E:0E:9E:DD:18:CE:51:0F:90:40:EF:B5:08:25:97:FB:FC:59:6A Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B97ED78BA6E688FEA60D62180 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5900bd7f-b329-3e01-9038-9fa314bc762f.roa Signing time: Tue 21 Oct 2025 08:33:14 +0000 ROA not before: Tue 21 Oct 2025 08:33:14 +0000 ROA not after: Mon 19 Jan 2026 09:33:14 +0000 asID: 35039 IP address blocks: 130.214.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:ed:78:ba:6e:68:8f:ea:60:d6:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 08:33:14 2025 GMT Not After : Jan 19 09:33:14 2026 GMT Subject: CN=bab0fbdc-dc48-4139-b3da-3ec45e44047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:48:41:ed:1e:74:de:21:70:f8:f0:21:90: df:15:82:fc:4b:ca:41:82:c3:ae:82:e2:b2:a9:17: 52:8f:ba:e3:ef:27:96:8e:78:14:94:02:86:1f:fb: 39:54:bf:db:ea:54:63:be:18:04:61:96:ae:ea:36: bb:2f:eb:ff:bf:22:dc:c1:2b:65:93:32:f1:f7:61: 12:23:c1:b2:eb:78:6f:01:19:ba:8e:f8:55:aa:b0: ab:ea:0a:37:dd:49:dc:5c:2a:90:d0:a1:d8:8e:b4: 36:a7:27:d2:b4:0e:dd:25:c9:92:fa:fb:95:d2:ab: d6:a7:85:fa:e2:ae:05:4b:9c:5b:37:90:e5:95:c6: dd:a4:07:4b:a2:62:75:ab:03:55:35:41:d1:3c:39: 7f:b4:e8:7f:2d:cf:96:7a:de:3d:47:d3:60:5f:fe: 3e:62:56:a6:81:39:ba:17:32:14:e3:07:da:27:80: 1f:9c:28:bc:36:d2:70:d9:1d:23:b7:93:ca:37:4a: 17:22:78:ef:66:a5:f6:a5:9f:5c:3c:48:9b:cd:02: b4:25:c7:da:f0:14:e6:95:c9:aa:32:4c:e2:25:94: 70:ed:22:94:89:0b:cf:37:fb:69:6e:af:53:c1:fc: 24:9b:19:77:e4:f7:12:21:6f:ca:53:91:18:ae:81: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4E:0E:9E:DD:18:CE:51:0F:90:40:EF:B5:08:25:97:FB:FC:59:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5900bd7f-b329-3e01-9038-9fa314bc762f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a1:47:98:21:45:4e:d3:a6:21:2b:4f:6e:aa:c8:6d:a6:3e: 02:46:d5:aa:4b:d3:2c:cb:4a:01:f3:87:26:35:80:ec:7f:79: 2d:92:b7:4c:78:32:a1:7d:cc:3d:7a:f5:a0:af:c5:ad:0e:f6: 28:4f:ae:35:65:ad:3c:a3:38:ff:9d:56:fb:3a:67:17:1e:ec: 8c:be:51:d2:c6:47:73:1e:27:9f:1c:18:c4:20:85:89:27:35: c7:ed:84:09:11:b1:e0:89:29:b2:f6:6a:05:e0:d2:74:79:be: f9:ac:54:24:02:4b:38:b4:d2:1a:c2:8a:fa:0b:4a:f7:70:dc: e4:d9:fd:cc:c3:a5:00:3e:e8:8d:f2:43:c0:38:7c:bd:20:ed: ad:7c:c1:cf:bb:ff:65:34:e8:0e:09:5f:ee:c9:c6:89:18:78: c2:58:4f:98:64:8f:c9:c9:99:84:aa:81:03:b2:b1:fc:73:82: fb:5b:66:f0:4b:84:d3:dd:f8:26:4c:68:6a:98:94:5b:f8:9a: 45:1a:7a:0e:95:52:63:07:c5:61:b4:f9:7c:29:68:25:86:77: 44:8d:db:e5:c0:7e:13:9f:6e:70:56:d6:0d:51:34:26:f8:ba: 5d:a3:50:9f:12:35:43:f2:ff:9e:6f:b3:44:d8:45:15:4a:8a: 8f:b6:cd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX7Xi6bmiP6mDWIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA4MzMxNFoXDTI2MDExOTA5MzMxNFowLzEtMCsGA1UEAxMk YmFiMGZiZGMtZGM0OC00MTM5LWIzZGEtM2VjNDVlNDQwNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquRIQe0edN4hcPjwIZDfFYL8S8pBgsOuguKy qRdSj7rj7yeWjngUlAKGH/s5VL/b6lRjvhgEYZau6ja7L+v/vyLcwStlkzLx92ES I8Gy63hvARm6jvhVqrCr6go33UncXCqQ0KHYjrQ2pyfStA7dJcmS+vuV0qvWp4X6 4q4FS5xbN5DllcbdpAdLomJ1qwNVNUHRPDl/tOh/Lc+Wet49R9NgX/4+YlamgTm6 FzIU4wfaJ4AfnCi8NtJw2R0jt5PKN0oXInjvZqX2pZ9cPEibzQK0Jcfa8BTmlcmq MkziJZRw7SKUiQvPN/tpbq9Twfwkmxl35PcSIW/KU5EYroG/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9ODp7dGM5RD5BA77UIJZf7/FlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNTkwMGJkN2YtYjMyOS0z ZTAxLTkwMzgtOWZhMzE0YmM3NjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABChR5ghRU7TpiErT26qyG2mPgJG1apL0yzLSgHzhyY1gOx/eS2St0x4 MqF9zD169aCvxa0O9ihPrjVlrTyjOP+dVvs6Zxce7Iy+UdLGR3MeJ58cGMQghYkn NcfthAkRseCJKbL2agXg0nR5vvmsVCQCSzi00hrCivoLSvdw3OTZ/czDpQA+6I3y Q8A4fL0g7a18wc+7/2U06A4JX+7JxokYeMJYT5hkj8nJmYSqgQOysfxzgvtbZvBL hNPd+CZMaGqYlFv4mkUaeg6VUmMHxWG0+XwpaCWGd0SN2+XAfhOfbnBW1g1RNCb4 ul2jUJ8SNUPy/55vs0TYRRVKio+2zYI= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:53 2025 by rpki-client