$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6fdac4a4-5101-3c0f-8db3-f582da03cddd.roa File: 6fdac4a4-5101-3c0f-8db3-f582da03cddd.roa (raw, json) Hash identifier: Yi+aVf292ymUDH4oy2tlRrHo3bzAjC8IFlRJROwi2IY= Subject key identifier: E8:AA:F8:9D:41:7A:3D:72:70:5D:7B:5C:E3:60:87:7A:58:DB:3B:3F Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884E605F2DAEB06211CE700 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6fdac4a4-5101-3c0f-8db3-f582da03cddd.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e6:05:f2:da:eb:06:21:1c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=3660dd32-52fc-4ba7-b8d3-e7c9bf03497a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:27:06:f8:ad:12:4e:56:57:7a:70:d0:b4: 38:40:63:94:58:da:20:b7:93:22:a8:ce:a2:2c:e2: 51:80:c6:bf:fb:57:a7:66:96:98:22:6a:37:27:57: 5c:e9:bb:c4:44:62:64:ab:65:03:dc:e7:92:91:39: a2:88:94:e3:d0:54:7c:6d:a5:4a:0d:cf:a7:15:17: 17:18:80:a8:8d:e0:a2:5e:07:dd:88:ff:b2:af:ea: ed:06:7a:fe:86:2b:a9:2d:1d:dc:db:31:ce:dc:99: b5:0b:0c:a0:58:93:75:78:4e:15:b6:bb:43:a0:bb: ca:83:36:62:19:ad:43:e8:38:d0:07:00:70:51:b3: d5:a5:8c:fe:6e:52:ac:22:b4:fe:d7:40:af:cd:6a: 3a:1e:e2:09:5f:55:f5:c5:bd:06:14:61:14:a8:dd: 47:66:fd:97:05:31:0e:ff:c0:ba:44:78:a9:6b:49: 19:7e:c7:d9:87:35:99:49:f9:52:9f:0a:db:12:89: 60:3a:61:70:f6:56:04:23:42:ee:32:dd:be:f0:a8: 10:18:e9:c4:3f:0b:70:d9:29:ec:83:42:65:f9:09: ae:75:e1:18:33:f8:49:7f:d6:a3:c3:fd:85:c0:b8: 74:65:c3:4a:f5:d3:b6:af:95:7e:59:3b:62:8e:36: c9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AA:F8:9D:41:7A:3D:72:70:5D:7B:5C:E3:60:87:7A:58:DB:3B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6fdac4a4-5101-3c0f-8db3-f582da03cddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4d:9d:b2:32:93:77:77:01:a3:a9:2a:55:73:fe:70:c4:9f: ce:94:b9:23:94:ef:ea:4e:94:68:fb:a0:66:75:78:d2:95:f7: 44:7c:d9:68:ac:b4:76:af:d3:b8:d5:20:70:a1:79:b2:6b:3e: d3:4c:f4:a2:7c:c1:7f:bf:fe:8d:71:51:be:8a:05:1e:0a:27: 80:ba:dd:a9:24:fb:47:a6:b7:56:c7:eb:16:4b:54:f3:b8:c8: 55:f6:34:0e:cd:2e:65:80:4a:ab:e4:18:0e:5d:ec:55:c9:d5: d6:91:c3:fd:fd:f2:58:5c:be:fd:a0:32:2a:b0:cf:eb:31:1f: 88:7c:cf:e5:67:53:df:fb:1e:d3:39:95:98:0a:ac:41:6b:7d: 0e:6c:52:53:22:38:90:35:58:82:1a:fc:92:7e:3a:df:f6:c7: 77:4d:e5:de:a2:8d:1d:74:25:cb:b3:fe:02:ef:d3:0f:82:9f: d8:6f:8a:2d:6c:3f:f5:64:65:28:cc:13:df:80:4e:e9:fe:e7: 04:41:b3:79:28:ae:fd:33:0d:35:51:39:d0:d1:d3:fe:f6:38: e5:eb:0d:da:e0:c0:4d:e1:dd:29:3a:c8:ec:72:9b:b3:9a:1b: d9:39:86:c4:7b:79:a7:14:e3:1b:0e:c4:77:57:b6:71:8a:d2: 67:08:b8:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOYF8trrBiEc5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MzY2MGRkMzItNTJmYy00YmE3LWI4ZDMtZTdjOWJmMDM0OTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2snBvitEk5WV3pw0LQ4QGOUWNogt5MiqM6i LOJRgMa/+1enZpaYImo3J1dc6bvERGJkq2UD3OeSkTmiiJTj0FR8baVKDc+nFRcX GICojeCiXgfdiP+yr+rtBnr+hiupLR3c2zHO3Jm1CwygWJN1eE4VtrtDoLvKgzZi Ga1D6DjQBwBwUbPVpYz+blKsIrT+10CvzWo6HuIJX1X1xb0GFGEUqN1HZv2XBTEO /8C6RHipa0kZfsfZhzWZSflSnwrbEolgOmFw9lYEI0LuMt2+8KgQGOnEPwtw2Sns g0Jl+QmudeEYM/hJf9ajw/2FwLh0ZcNK9dO2r5V+WTtijjbJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiq+J1Bej1ycF17XONgh3pY2zs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNmZkYWM0YTQtNTEwMS0z YzBmLThkYjMtZjU4MmRhMDNjZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxNnbIyk3d3AaOpKlVz/nDEn86UuSOU7+pOlGj7oGZ1eNKV90R82Wis tHav07jVIHChebJrPtNM9KJ8wX+//o1xUb6KBR4KJ4C63akk+0emt1bH6xZLVPO4 yFX2NA7NLmWASqvkGA5d7FXJ1daRw/398lhcvv2gMiqwz+sxH4h8z+VnU9/7HtM5 lZgKrEFrfQ5sUlMiOJA1WIIa/JJ+Ot/2x3dN5d6ijR10Jcuz/gLv0w+Cn9hvii1s P/VkZSjME9+ATun+5wRBs3korv0zDTVROdDR0/72OOXrDdrgwE3h3Sk6yOxym7Oa G9k5hsR7eacU4xsOxHdXtnGK0mcIuIw= -----END CERTIFICATE-----Generated at Mon Apr 6 15:23:44 2026 by rpki-client