$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/717cf47e-d8d1-3de8-9904-3c78e1c44888.roa File: 717cf47e-d8d1-3de8-9904-3c78e1c44888.roa (raw, json) Hash identifier: ipuAr6ZpAW0SNCvLgeXs0M+csJQg7yROW7iSbI5QtOE= Subject key identifier: 88:28:F4:C8:2D:5E:6F:E5:16:59:0A:49:1C:DA:85:AB:0C:3B:60:BB Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A73939441BA5E138C4300 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/717cf47e-d8d1-3de8-9904-3c78e1c44888.roa Signing time: Tue 21 Oct 2025 09:31:38 +0000 ROA not before: Tue 21 Oct 2025 09:31:38 +0000 ROA not after: Mon 19 Jan 2026 10:31:38 +0000 asID: 35039 IP address blocks: 130.214.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:73:93:94:41:ba:5e:13:8c:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:38 2025 GMT Not After : Jan 19 10:31:38 2026 GMT Subject: CN=b5e3cf5b-ba5b-4c55-8422-cba33d57e9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:1f:f5:4c:ef:73:b7:58:97:a9:1f:6d:20: 1d:dd:e0:5f:54:e5:ac:26:31:db:4f:f1:59:62:d3: 48:95:72:0d:06:3f:e0:6d:de:f4:c3:09:35:ff:83: d9:36:35:ed:ff:45:de:0e:08:7a:01:1e:ad:8e:34: db:e2:b0:bc:69:80:99:6b:fa:78:09:e0:7b:af:17: a1:69:0d:69:86:2c:aa:18:78:7c:82:a1:cf:3f:93: 8d:3e:53:f6:7d:b4:54:89:7f:cf:2d:13:3e:13:c8: ea:57:ee:77:ef:47:9f:9e:c2:08:54:83:39:04:8b: 1a:7b:06:fc:40:b5:1b:62:5b:6c:c3:87:e1:3c:1a: 09:6a:f4:42:77:8a:4a:0e:f3:52:5c:3f:ec:fa:a8: 7a:65:dd:64:25:ea:7e:67:fd:3c:34:29:39:a9:aa: 42:8b:d3:6e:2d:9e:77:07:b4:ef:5d:f7:f6:7e:78: 78:88:d8:0c:63:b0:c2:43:e8:6f:de:08:01:61:ad: a1:0e:ea:98:c5:43:69:65:12:ba:87:79:b0:07:ea: e4:ec:65:f8:65:21:56:5d:e3:42:9b:ae:08:8b:f6: fb:93:60:72:28:14:a1:67:06:81:1c:ec:f1:ed:5f: 66:c9:a0:bf:7f:08:f2:9f:43:e0:40:1f:64:36:33: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:28:F4:C8:2D:5E:6F:E5:16:59:0A:49:1C:DA:85:AB:0C:3B:60:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/717cf47e-d8d1-3de8-9904-3c78e1c44888.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:72:01:82:7c:9d:94:e8:e4:6a:3f:8d:43:a9:1b:8f:b9:3d: 20:4e:49:8d:41:58:ee:1b:04:bb:50:8a:61:b7:40:00:60:9b: 5a:3f:9d:ff:3a:ba:72:96:31:08:d2:77:25:b3:d5:ff:91:46: 91:41:6a:63:8f:21:01:05:f7:32:5b:5f:75:7a:e2:49:85:c5: 5e:c8:25:d9:e5:4c:b8:0b:2b:f0:02:81:6e:aa:cf:e0:0f:c7: 9a:b7:c5:22:cb:e8:98:57:91:94:70:af:ba:7c:9b:7c:fa:79: ea:fa:2a:fd:70:bd:d2:60:5c:5b:05:87:6a:df:87:40:77:32: ab:3a:f5:46:90:60:11:12:da:cf:3e:f8:7d:2b:e4:1a:b2:5c: ee:9d:a7:10:bf:27:b8:ad:e0:17:a7:30:c3:f3:87:b4:1a:8f: 27:ad:39:20:d0:cf:98:0a:3e:c5:1d:ed:0f:38:ea:20:40:e2: 96:58:03:f7:cc:85:57:e6:d7:df:46:95:18:8d:eb:bd:c9:72: 77:26:98:a9:b5:71:d3:09:8e:8f:d6:c6:a5:eb:a2:13:71:ba: 26:9b:80:fa:89:b4:61:7e:47:c3:7a:e2:5c:3f:22:d4:32:93: d1:af:e2:35:3a:49:09:3a:38:20:1f:d7:ae:7c:09:d5:c5:db: cf:f8:b6:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCnOTlEG6XhOMQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEzOFoXDTI2MDExOTEwMzEzOFowLzEtMCsGA1UEAxMk YjVlM2NmNWItYmE1Yi00YzU1LTg0MjItY2JhMzNkNTdlOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Af9Uzvc7dYl6kfbSAd3eBfVOWsJjHbT/FZ YtNIlXINBj/gbd70wwk1/4PZNjXt/0XeDgh6AR6tjjTb4rC8aYCZa/p4CeB7rxeh aQ1phiyqGHh8gqHPP5ONPlP2fbRUiX/PLRM+E8jqV+5370efnsIIVIM5BIsaewb8 QLUbYltsw4fhPBoJavRCd4pKDvNSXD/s+qh6Zd1kJep+Z/08NCk5qapCi9NuLZ53 B7TvXff2fnh4iNgMY7DCQ+hv3ggBYa2hDuqYxUNpZRK6h3mwB+rk7GX4ZSFWXeNC m64Ii/b7k2ByKBShZwaBHOzx7V9myaC/fwjyn0PgQB9kNjO6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgo9MgtXm/lFlkKSRzahasMO2C7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzE3Y2Y0N2UtZDhkMS0z ZGU4LTk5MDQtM2M3OGUxYzQ0ODg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtakMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVyAYJ8nZTo5Go/jUOpG4+5PSBOSY1BWO4bBLtQimG3QABgm1o/nf86 unKWMQjSdyWz1f+RRpFBamOPIQEF9zJbX3V64kmFxV7IJdnlTLgLK/ACgW6qz+AP x5q3xSLL6JhXkZRwr7p8m3z6eer6Kv1wvdJgXFsFh2rfh0B3Mqs69UaQYBES2s8+ +H0r5BqyXO6dpxC/J7it4BenMMPzh7QajyetOSDQz5gKPsUd7Q846iBA4pZYA/fM hVfm199GlRiN673JcncmmKm1cdMJjo/WxqXrohNxuiabgPqJtGF+R8N64lw/ItQy k9Gv4jU6SQk6OCAf1658CdXF28/4tkA= -----END CERTIFICATE-----Generated at Mon Oct 27 07:05:01 2025 by rpki-client