$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/683b85a1-684c-32de-85fa-d81844ad2b14.roa File: 683b85a1-684c-32de-85fa-d81844ad2b14.roa (raw, json) Hash identifier: WlyFrvXmzCbyRRjd0AAndjNrvnopaI1QLgHf1R+LDBo= Subject key identifier: 4C:F7:1F:D1:5F:C3:E7:63:F1:A6:ED:62:25:6A:65:CA:75:98:A7:8C Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A552B8806631698C9E580 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/683b85a1-684c-32de-85fa-d81844ad2b14.roa Signing time: Tue 21 Oct 2025 09:31:23 +0000 ROA not before: Tue 21 Oct 2025 09:31:23 +0000 ROA not after: Mon 19 Jan 2026 10:31:23 +0000 asID: 35039 IP address blocks: 130.214.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:55:2b:88:06:63:16:98:c9:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:23 2025 GMT Not After : Jan 19 10:31:23 2026 GMT Subject: CN=6f8e5d50-6be1-4139-9cd9-09a6f1b29400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:e5:04:3d:ae:ec:d7:c6:be:a8:ca:aa:b0: 36:fc:0a:3f:df:7b:52:0c:7d:01:7b:48:14:84:f5: 09:8f:b8:96:a8:55:63:61:f0:8c:f9:51:a6:3c:07: 25:cc:a5:01:e9:40:8d:0e:38:0e:b6:c6:22:1e:76: b0:41:22:1b:7e:dd:35:5f:d3:c2:49:9e:48:7a:ed: 92:5e:c3:c5:ad:9c:0c:7d:4d:15:8a:ad:96:a2:2c: d8:f9:c4:77:3c:38:df:93:a7:74:18:a9:23:37:4c: bb:19:34:9a:a4:c0:68:75:69:bb:70:f1:ff:1e:ff: cc:de:3d:05:63:fc:2c:ee:06:ba:0c:b6:81:fb:14: 62:77:34:46:c9:13:ea:f7:d3:ba:b0:67:ff:0e:44: 61:0d:ef:4f:5f:51:1b:11:59:43:d0:9d:5d:a4:7f: f3:fe:22:f3:0c:bf:df:f3:d7:05:f5:57:ad:d8:f0: c6:b7:e2:33:3c:93:53:03:f0:34:9b:93:1a:ed:d1: 26:44:d5:ff:06:ad:b3:e6:a2:01:9e:bd:a4:d0:da: 7c:27:f3:2a:e8:64:24:11:f7:ad:cf:c7:ce:06:46: 68:c7:31:c9:c8:81:42:1b:fd:12:62:5e:6f:9a:8e: e6:07:70:ae:f7:75:c4:c0:f1:6c:e5:e1:37:05:7a: 56:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:1F:D1:5F:C3:E7:63:F1:A6:ED:62:25:6A:65:CA:75:98:A7:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/683b85a1-684c-32de-85fa-d81844ad2b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f8:81:2c:d2:13:af:51:3c:36:9e:e8:7a:4c:fe:22:7b:36: 9e:0f:03:31:86:a1:fd:df:37:55:d5:67:7f:7d:91:6b:b0:cd: 32:12:f1:d1:60:40:16:0a:0f:13:e0:10:48:f6:e3:a4:e5:62: 3e:49:e4:b8:fa:d8:a2:12:b4:b7:e4:99:f7:8a:b9:9c:42:eb: a3:ac:2f:40:e4:f9:3b:1f:8a:bc:31:a4:86:41:31:5b:7d:88: 67:f3:2c:e9:cd:e7:0c:67:b5:2f:dc:0a:7f:fa:0b:02:2b:d9: 73:34:5c:4c:ad:d1:f8:00:3b:ef:a6:70:b8:b8:3b:2d:9a:19: f9:29:b5:e0:0b:d2:6c:30:42:33:88:d7:ca:a3:58:56:61:ff: 35:87:53:2c:5f:a9:4e:c9:b9:56:9f:2c:ff:29:c1:2e:09:c5: ee:77:4f:b2:f7:7b:45:88:ee:6e:84:37:4a:49:c9:e3:b2:ac: 6e:0d:6c:c3:26:ad:1e:23:dc:bd:8e:00:e6:8e:4f:0c:ec:af: 3e:39:3f:50:78:ee:14:e3:cf:1a:4f:aa:3a:28:4f:2e:03:69: 67:5f:e4:e2:1e:7c:56:06:df:0a:ce:6f:17:13:9e:02:0c:13: 0f:4c:15:89:0f:98:00:39:88:89:12:aa:26:b0:4a:e0:0d:2f: 5c:25:7b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYClUriAZjFpjJ5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEyM1oXDTI2MDExOTEwMzEyM1owLzEtMCsGA1UEAxMk NmY4ZTVkNTAtNmJlMS00MTM5LTljZDktMDlhNmYxYjI5NDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6krlBD2u7NfGvqjKqrA2/Ao/33tSDH0Be0gU hPUJj7iWqFVjYfCM+VGmPAclzKUB6UCNDjgOtsYiHnawQSIbft01X9PCSZ5Ieu2S XsPFrZwMfU0Viq2WoizY+cR3PDjfk6d0GKkjN0y7GTSapMBodWm7cPH/Hv/M3j0F Y/ws7ga6DLaB+xRidzRGyRPq99O6sGf/DkRhDe9PX1EbEVlD0J1dpH/z/iLzDL/f 89cF9Vet2PDGt+IzPJNTA/A0m5Ma7dEmRNX/Bq2z5qIBnr2k0Np8J/Mq6GQkEfet z8fOBkZoxzHJyIFCG/0SYl5vmo7mB3Cu93XEwPFs5eE3BXpWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz3H9Ffw+dj8abtYiVqZcp1mKeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNjgzYjg1YTEtNjg0Yy0z MmRlLTg1ZmEtZDgxODQ0YWQyYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIL4gSzSE69RPDae6HpM/iJ7Np4PAzGGof3fN1XVZ399kWuwzTIS8dFg QBYKDxPgEEj246TlYj5J5Lj62KIStLfkmfeKuZxC66OsL0Dk+TsfirwxpIZBMVt9 iGfzLOnN5wxntS/cCn/6CwIr2XM0XEyt0fgAO++mcLi4Oy2aGfkpteAL0mwwQjOI 18qjWFZh/zWHUyxfqU7JuVafLP8pwS4Jxe53T7L3e0WI7m6EN0pJyeOyrG4NbMMm rR4j3L2OAOaOTwzsrz45P1B47hTjzxpPqjooTy4DaWdf5OIefFYG3wrObxcTngIM Ew9MFYkPmAA5iIkSqiawSuANL1wlexI= -----END CERTIFICATE-----Generated at Mon Oct 27 07:05:00 2025 by rpki-client