$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5a9c41f5-ebbc-3125-8b01-b2e4d9b285f5.roa File: 5a9c41f5-ebbc-3125-8b01-b2e4d9b285f5.roa (raw, json) Hash identifier: BDieJYzqHtJEdl6dcsN9tESBY3114Rg6ZDSq4cGPrAE= Subject key identifier: 45:8E:47:66:67:82:41:F9:98:E8:49:48:00:10:B7:2F:26:EA:15:30 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A48DF038176F9AEA78F80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5a9c41f5-ebbc-3125-8b01-b2e4d9b285f5.roa Signing time: Tue 21 Oct 2025 09:31:17 +0000 ROA not before: Tue 21 Oct 2025 09:31:17 +0000 ROA not after: Mon 19 Jan 2026 10:31:17 +0000 asID: 35039 IP address blocks: 130.214.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:48:df:03:81:76:f9:ae:a7:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:17 2025 GMT Not After : Jan 19 10:31:17 2026 GMT Subject: CN=639b5de0-4457-4128-a8a8-c50fd093daa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:36:23:44:9d:13:bd:70:d5:ca:1c:4d:78:77: 93:15:14:1d:bc:b8:b6:ca:0e:9b:5a:e3:16:4e:af: 82:22:75:b2:ec:30:3f:5c:64:75:64:73:a7:9c:04: fd:54:ee:7c:7a:af:f1:8c:4a:c7:c9:6b:2f:d7:4d: 60:98:31:69:9f:96:12:c3:08:4a:5b:83:bf:e2:32: 51:1a:a2:be:5d:9d:b0:c4:5d:28:f1:c9:58:1e:9d: 13:52:a3:9e:bd:5e:00:92:69:dd:27:c4:7f:e5:9a: bf:70:66:b5:31:0c:5b:c8:42:ab:07:39:d9:19:29: 3e:84:db:2f:b5:fe:72:cb:13:f6:61:e4:6c:f3:85: ea:11:50:db:ed:89:d8:f3:0a:88:ee:b3:b9:8f:0f: 0a:be:b9:d1:d9:ed:3c:e3:49:bf:9a:ed:ff:35:2b: ab:58:39:ab:ef:7e:6b:85:1f:0e:4e:ca:62:d1:ef: 26:17:d0:ee:51:b4:ef:87:34:62:d9:3c:43:1e:22: 05:e9:df:0b:61:68:f5:de:73:57:a0:b6:d6:fe:7f: 18:d4:56:68:2c:73:be:f3:8b:01:66:39:fd:32:02: 5d:4b:2f:7e:f5:15:9d:61:e2:0c:40:ca:1b:72:fd: e0:0a:23:27:e1:c4:ac:95:7d:f0:95:f8:fe:a0:be: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8E:47:66:67:82:41:F9:98:E8:49:48:00:10:B7:2F:26:EA:15:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/5a9c41f5-ebbc-3125-8b01-b2e4d9b285f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e1:f9:09:e6:ad:63:e8:bc:fb:60:05:99:9a:93:15:d4:fc: f7:9e:2b:d1:25:b2:83:cc:db:c5:12:ae:85:b6:46:5f:02:6f: 9b:6c:da:6b:43:44:ee:bf:1a:56:22:46:ef:e4:bc:1e:b6:0c: ca:e6:18:06:32:53:62:dd:dd:89:11:c1:fc:93:43:20:94:0d: 2f:5c:54:63:6c:78:66:8f:65:90:d1:aa:48:71:61:fb:42:a2: d2:dc:db:cf:25:41:d4:3f:81:5a:fa:7e:17:2c:4c:72:35:24: 27:4e:a6:26:73:bd:85:c8:0d:9a:bf:f1:7e:a5:77:42:fa:8e: 83:5a:27:0b:c2:61:0a:84:22:ac:08:3f:a7:e6:6e:82:67:d5: 06:48:eb:09:e6:86:ec:ae:8c:65:65:43:18:d9:89:4f:91:c0: db:ed:6b:d0:0b:ef:3c:bc:58:56:06:52:4f:44:71:ef:de:4c: 11:b9:70:c0:fa:c7:4a:11:4f:25:ac:16:ad:1b:a4:0b:79:79: 4e:11:95:5d:2c:1e:ae:16:bf:88:21:d5:85:98:46:f9:b2:b4: ed:c0:b9:5f:e5:a3:86:61:b4:ea:3f:ca:69:fa:81:60:90:b1: a2:91:b2:f9:a4:98:a4:a2:dc:cc:d9:36:55:15:21:f0:86:fe: 49:e1:a3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCkjfA4F2+a6nj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzExN1oXDTI2MDExOTEwMzExN1owLzEtMCsGA1UEAxMk NjM5YjVkZTAtNDQ1Ny00MTI4LWE4YTgtYzUwZmQwOTNkYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jYjRJ0TvXDVyhxNeHeTFRQdvLi2yg6bWuMW Tq+CInWy7DA/XGR1ZHOnnAT9VO58eq/xjErHyWsv101gmDFpn5YSwwhKW4O/4jJR GqK+XZ2wxF0o8clYHp0TUqOevV4AkmndJ8R/5Zq/cGa1MQxbyEKrBznZGSk+hNsv tf5yyxP2YeRs84XqEVDb7YnY8wqI7rO5jw8KvrnR2e0840m/mu3/NSurWDmr735r hR8OTspi0e8mF9DuUbTvhzRi2TxDHiIF6d8LYWj13nNXoLbW/n8Y1FZoLHO+84sB Zjn9MgJdSy9+9RWdYeIMQMobcv3gCiMn4cSslX3wlfj+oL5+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWOR2ZngkH5mOhJSAAQty8m6hUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNWE5YzQxZjUtZWJiYy0z MTI1LThiMDEtYjJlNGQ5YjI4NWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPh+QnmrWPovPtgBZmakxXU/PeeK9ElsoPM28USroW2Rl8Cb5ts2mtD RO6/GlYiRu/kvB62DMrmGAYyU2Ld3YkRwfyTQyCUDS9cVGNseGaPZZDRqkhxYftC otLc288lQdQ/gVr6fhcsTHI1JCdOpiZzvYXIDZq/8X6ld0L6joNaJwvCYQqEIqwI P6fmboJn1QZI6wnmhuyujGVlQxjZiU+RwNvta9AL7zy8WFYGUk9Ece/eTBG5cMD6 x0oRTyWsFq0bpAt5eU4RlV0sHq4Wv4gh1YWYRvmytO3AuV/lo4ZhtOo/ymn6gWCQ saKRsvmkmKSi3MzZNlUVIfCG/knho20= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:57 2025 by rpki-client