$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/665dda1e-b1fd-368d-b1e0-a66850198e5b.roa File: 665dda1e-b1fd-368d-b1e0-a66850198e5b.roa (raw, json) Hash identifier: h0s6TTUxb7ueNdGv6pAqGRRfzEPKlS/8MIsm8fDrwzs= Subject key identifier: D4:04:D3:17:4C:F9:4C:12:1B:F5:13:27:1D:82:C2:1E:F1:88:28:F3 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980AC5B830E20075B30F2AE0 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/665dda1e-b1fd-368d-b1e0-a66850198e5b.roa Signing time: Tue 21 Oct 2025 09:32:16 +0000 ROA not before: Tue 21 Oct 2025 09:32:16 +0000 ROA not after: Mon 19 Jan 2026 10:32:16 +0000 asID: 35039 IP address blocks: 130.214.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:c5:b8:30:e2:00:75:b3:0f:2a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:32:16 2025 GMT Not After : Jan 19 10:32:16 2026 GMT Subject: CN=7a816f9f-c93b-4f5e-881e-c7bfebf2cfb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:87:78:21:31:4c:04:01:95:b6:7e:60:ee: 3a:a9:28:12:bc:7b:e8:f8:60:bf:8f:4f:ec:11:a5: 41:5b:1c:10:1e:6d:2b:0b:29:e7:21:c2:fc:72:b5: 42:d7:28:f0:9a:2f:44:ab:ee:0b:d9:b7:3f:9d:6f: 91:25:4f:ee:c1:e0:74:ae:6c:4b:43:44:b5:4f:48: d7:8a:95:42:32:33:2d:c2:32:c0:4f:80:d7:64:58: c4:c0:fd:20:b9:a3:2c:2b:29:75:93:9a:73:3d:50: ba:9c:f3:1e:9a:23:5a:a2:e1:f6:60:82:03:7f:e9: 08:63:5b:5d:81:72:f5:0e:d0:8b:04:d6:16:56:8b: e8:26:10:9f:41:41:f1:57:ff:08:ba:5a:42:95:2d: 44:e8:8a:1c:a4:43:cb:21:a3:6b:be:18:cf:3f:1b: 58:3c:d6:d9:c5:93:c9:f3:94:c1:e0:f8:d3:f6:fa: 96:03:88:89:83:dc:19:9a:72:2f:8e:d9:6c:86:9c: 71:a9:d4:d2:61:a9:3c:a3:fa:8b:d8:c8:15:4f:ec: de:81:52:74:67:a6:84:57:fc:97:42:27:5f:d5:03: 68:62:6f:83:c3:03:73:6e:f1:17:f4:c9:49:a8:7c: 13:98:f0:1d:95:f8:b4:51:df:62:25:ac:9d:69:4d: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:D3:17:4C:F9:4C:12:1B:F5:13:27:1D:82:C2:1E:F1:88:28:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/665dda1e-b1fd-368d-b1e0-a66850198e5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:bd:c4:ce:6f:ce:b1:eb:29:79:09:8e:63:86:32:2f:83:1b: db:f6:36:81:71:56:7d:86:3e:30:7e:a1:91:56:4f:c1:53:ac: 36:e0:07:fc:20:d3:e6:df:6f:9a:44:7c:8e:80:77:0e:7c:6f: e0:a6:22:a5:d2:22:2e:d0:ef:a3:de:6f:63:9b:50:9e:a4:9a: 1e:d0:a4:43:51:10:fe:b4:e5:b7:3c:58:d4:3c:63:ae:28:c4: ef:cb:8c:36:9c:60:8b:d5:50:ee:e2:00:c5:f5:20:7d:71:37: da:c3:1e:a1:86:54:d4:95:53:79:67:be:6f:3e:db:8b:cf:4f: f3:e1:85:e5:6a:ef:25:8f:73:94:5a:41:c7:be:fd:14:ae:02: 1c:09:8f:ac:11:96:be:03:5a:82:e4:bc:67:db:40:ea:09:cd: 06:97:f8:bc:cb:3e:d5:54:b7:c5:21:95:77:58:d4:95:f8:f1: f1:7d:d4:2c:41:78:ad:a8:6e:ca:d8:44:75:8a:ff:72:10:5e: 91:f3:64:6a:42:56:e1:a0:5d:01:44:54:7a:45:cb:31:87:23: 2f:62:f6:ba:51:7d:c3:94:98:14:8a:b5:96:9a:2c:3a:9f:04: 6a:c8:59:11:4a:3d:e7:73:d1:e7:24:d4:66:a9:e8:b0:c3:05: 39:1b:b2:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCsW4MOIAdbMPKuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzIxNloXDTI2MDExOTEwMzIxNlowLzEtMCsGA1UEAxMk N2E4MTZmOWYtYzkzYi00ZjVlLTg4MWUtYzdiZmViZjJjZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjleHeCExTAQBlbZ+YO46qSgSvHvo+GC/j0/s EaVBWxwQHm0rCynnIcL8crVC1yjwmi9Eq+4L2bc/nW+RJU/uweB0rmxLQ0S1T0jX ipVCMjMtwjLAT4DXZFjEwP0guaMsKyl1k5pzPVC6nPMemiNaouH2YIIDf+kIY1td gXL1DtCLBNYWVovoJhCfQUHxV/8IulpClS1E6IocpEPLIaNrvhjPPxtYPNbZxZPJ 85TB4PjT9vqWA4iJg9wZmnIvjtlshpxxqdTSYak8o/qL2MgVT+zegVJ0Z6aEV/yX Qidf1QNoYm+DwwNzbvEX9MlJqHwTmPAdlfi0Ud9iJaydaU3uXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQE0xdM+UwSG/UTJx2Cwh7xiCjzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNjY1ZGRhMWUtYjFmZC0z NjhkLWIxZTAtYTY2ODUwMTk4ZTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW9xM5vzrHrKXkJjmOGMi+DG9v2NoFxVn2GPjB+oZFWT8FTrDbgB/wg 0+bfb5pEfI6Adw58b+CmIqXSIi7Q76Peb2ObUJ6kmh7QpENREP605bc8WNQ8Y64o xO/LjDacYIvVUO7iAMX1IH1xN9rDHqGGVNSVU3lnvm8+24vPT/PhheVq7yWPc5Ra Qce+/RSuAhwJj6wRlr4DWoLkvGfbQOoJzQaX+LzLPtVUt8UhlXdY1JX48fF91CxB eK2obsrYRHWK/3IQXpHzZGpCVuGgXQFEVHpFyzGHIy9i9rpRfcOUmBSKtZaaLDqf BGrIWRFKPedz0eck1Gap6LDDBTkbssk= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:54 2025 by rpki-client