$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/67ff5283-e234-3783-9f63-f403e24d73c6.roa File: 67ff5283-e234-3783-9f63-f403e24d73c6.roa (raw, json) Hash identifier: 7yRUMRwH2Bw3c8BFFNm0KiaEsjHyPk2TRE22FF4ikvM= Subject key identifier: DF:DB:34:3E:D0:4C:3D:7F:01:44:31:74:EE:0D:BA:C8:2F:AD:79:B1 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B97ED6E9A1794A69ED7FC9940 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/67ff5283-e234-3783-9f63-f403e24d73c6.roa Signing time: Tue 21 Oct 2025 08:33:09 +0000 ROA not before: Tue 21 Oct 2025 08:33:09 +0000 ROA not after: Mon 19 Jan 2026 09:33:09 +0000 asID: 35039 IP address blocks: 130.214.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:ed:6e:9a:17:94:a6:9e:d7:fc:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 08:33:09 2025 GMT Not After : Jan 19 09:33:09 2026 GMT Subject: CN=8c5c697a-6d4f-4dca-8f5e-08aabd51d6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:84:e4:d3:7b:f8:ba:20:88:33:9c:a6:2f: 77:99:a4:eb:c5:2b:87:19:24:7e:78:4b:50:ce:a1: 94:73:04:3d:b3:ec:34:ee:9a:cd:53:f5:79:a2:fb: 69:c5:65:32:56:a8:c7:54:1f:51:93:f1:df:d1:e9: 55:68:bf:ef:81:9d:1d:9b:48:1c:ea:65:5e:9d:0a: 65:a8:bf:16:a6:5d:fd:62:45:06:58:35:e1:8e:1a: 61:3c:14:d5:db:bf:2f:06:50:8f:c6:5e:c6:50:89: ad:23:1d:f3:b3:a5:96:53:23:aa:97:ae:c9:31:eb: 25:20:6e:8c:01:57:5c:1e:ec:08:25:57:24:06:4b: 36:bb:32:c5:7c:bc:58:68:14:ff:40:fe:32:8a:5b: 22:b0:6f:a8:b8:05:a9:5a:f6:82:af:ec:d2:8d:e0: ce:46:43:ab:82:ba:24:19:ad:07:4d:be:f4:d9:f3: df:8f:2a:47:fe:b2:b3:73:c3:25:35:8a:19:52:53: 95:f6:0c:26:51:90:f0:8e:eb:a3:99:c5:0a:ee:f3: fc:ce:e8:8e:a3:25:a7:e6:7f:7a:68:2c:50:b9:25: 94:5d:c7:84:89:cd:f7:d1:14:38:f8:0d:86:6b:29: 02:92:73:1f:5f:b7:54:66:2b:6d:ab:60:da:f0:70: 9e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DB:34:3E:D0:4C:3D:7F:01:44:31:74:EE:0D:BA:C8:2F:AD:79:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/67ff5283-e234-3783-9f63-f403e24d73c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:3f:6e:8e:cc:c9:a3:17:d0:42:f7:21:c1:e2:96:ce:eb: d4:55:37:92:d6:47:36:65:01:9e:7f:30:32:6b:e0:c1:b7:0d: 85:1c:9e:bb:72:ec:b7:90:7b:fa:c4:17:04:78:fa:b8:c9:77: 80:34:c2:f5:27:f0:d7:72:f0:b8:dc:c9:11:4b:86:08:e6:77: d1:ef:33:3e:81:24:42:47:84:02:22:d2:dd:8c:a4:54:5a:4c: 11:6f:4e:70:b3:88:8c:79:88:e1:a1:29:5a:a0:3d:ad:97:6a: 3e:a4:fa:2c:bf:8d:b6:9d:a1:eb:cc:b9:9c:9b:29:bf:d3:b4: c0:89:45:8a:e5:f5:78:15:1d:f3:5f:51:ee:fe:b9:40:7a:10: 2d:61:3f:84:7d:a4:a7:80:65:ee:50:7e:26:57:0d:ea:a4:99: 78:e9:25:cb:dd:58:2b:64:65:4b:be:bc:d4:91:d4:f1:a2:fc: da:ee:33:c8:c9:41:99:00:5f:27:45:aa:5f:be:79:ec:fb:2e: b0:8f:d7:27:0f:b3:d6:7e:7e:eb:b5:18:32:94:b0:7d:12:65: e2:c5:4d:e5:73:07:42:4f:07:8b:73:aa:b9:3a:8e:43:ac:82: ad:68:70:c7:2b:66:55:6a:11:82:ba:b2:51:78:25:66:2b:db: 6f:e2:9d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX7W6aF5Smntf8mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA4MzMwOVoXDTI2MDExOTA5MzMwOVowLzEtMCsGA1UEAxMk OGM1YzY5N2EtNmQ0Zi00ZGNhLThmNWUtMDhhYWJkNTFkNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvqE5NN7+LogiDOcpi93maTrxSuHGSR+eEtQ zqGUcwQ9s+w07prNU/V5ovtpxWUyVqjHVB9Rk/Hf0elVaL/vgZ0dm0gc6mVenQpl qL8Wpl39YkUGWDXhjhphPBTV278vBlCPxl7GUImtIx3zs6WWUyOql67JMeslIG6M AVdcHuwIJVckBks2uzLFfLxYaBT/QP4yilsisG+ouAWpWvaCr+zSjeDORkOrgrok Ga0HTb702fPfjypH/rKzc8MlNYoZUlOV9gwmUZDwjuujmcUK7vP8zuiOoyWn5n96 aCxQuSWUXceEic330RQ4+A2GaykCknMfX7dUZittq2Da8HCe9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/bND7QTD1/AUQxdO4NusgvrXmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNjdmZjUyODMtZTIzNC0z NzgzLTlmNjMtZjQwM2UyNGQ3M2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADivP26OzMmjF9BC9yHB4pbO69RVN5LWRzZlAZ5/MDJr4MG3DYUcnrty 7LeQe/rEFwR4+rjJd4A0wvUn8Ndy8LjcyRFLhgjmd9HvMz6BJEJHhAIi0t2MpFRa TBFvTnCziIx5iOGhKVqgPa2Xaj6k+iy/jbadoevMuZybKb/TtMCJRYrl9XgVHfNf Ue7+uUB6EC1hP4R9pKeAZe5QfiZXDeqkmXjpJcvdWCtkZUu+vNSR1PGi/NruM8jJ QZkAXydFql++eez7LrCP1ycPs9Z+fuu1GDKUsH0SZeLFTeVzB0JPB4tzqrk6jkOs gq1ocMcrZlVqEYK6slF4JWYr22/inWU= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:49 2025 by rpki-client