$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/72149c96-e5f8-32e7-9970-19ac509b5370.roa File: 72149c96-e5f8-32e7-9970-19ac509b5370.roa (raw, json) Hash identifier: c/eI8Z4OAAcDEVjSAPNdBRx6WpYY1ZDv4EQ3cALDZ7g= Subject key identifier: 36:2D:94:9F:68:0C:E7:2A:A5:8F:DB:64:CD:35:B5:C7:39:43:D8:99 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B9809BB9C87BCFF610443C200 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/72149c96-e5f8-32e7-9970-19ac509b5370.roa Signing time: Tue 21 Oct 2025 09:30:11 +0000 ROA not before: Tue 21 Oct 2025 09:30:11 +0000 ROA not after: Mon 19 Jan 2026 10:30:11 +0000 asID: 35039 IP address blocks: 130.214.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:09:bb:9c:87:bc:ff:61:04:43:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:30:11 2025 GMT Not After : Jan 19 10:30:11 2026 GMT Subject: CN=40476fa0-ad55-47a7-a6b7-089f27dfa767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2c:ee:fa:8a:90:38:7a:32:3f:07:f5:f0:c5: 9e:37:d6:d2:51:67:ac:17:32:c1:da:fa:e4:cd:bc: f1:af:66:d9:70:44:65:34:8a:4d:e0:38:66:64:4b: 26:63:b5:06:79:2a:5d:61:c9:6d:b7:cd:42:17:e1: ea:61:98:a2:2a:d7:a1:8d:70:20:be:14:f6:27:f4: 99:0f:5e:26:ef:c6:40:8b:af:45:6b:dd:51:57:a7: 60:b9:4f:9c:03:95:f2:38:d4:36:1d:5e:d5:52:84: e9:59:c1:6c:cc:4a:e1:d2:a6:4f:26:54:a6:00:8c: 54:64:2a:0d:a4:d1:23:e9:f3:1d:38:60:9e:93:c5: 13:6b:14:9e:91:82:92:f9:b6:f7:e1:be:74:09:ad: ef:7f:4e:4b:73:93:36:44:f4:f8:b5:2b:d5:3d:df: 54:1e:54:58:75:32:7a:a7:32:39:8c:94:4f:1f:a3: f0:2d:55:23:18:2e:13:47:2d:26:b6:c1:d4:20:b0: 34:a4:b6:c0:64:23:ff:8f:ea:dc:a5:84:45:17:f3: 8c:43:5e:7d:1a:06:57:14:df:71:12:97:c8:3d:5e: 2d:e6:0f:69:7c:84:d1:d8:3f:2b:45:e1:9b:4f:fc: 00:3e:57:86:6a:60:c5:ad:b7:14:3c:95:cb:31:31: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2D:94:9F:68:0C:E7:2A:A5:8F:DB:64:CD:35:B5:C7:39:43:D8:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/72149c96-e5f8-32e7-9970-19ac509b5370.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d0:16:d0:e0:39:5c:b2:df:c8:5a:68:97:a7:29:14:52:a8: 40:d5:2c:1e:68:e2:c9:ac:b2:3e:ef:bb:4c:ae:03:c6:d4:1d: 46:79:37:f5:b4:86:e1:32:3c:f5:4e:7a:fd:af:52:bf:10:8b: 61:11:a6:43:ed:08:42:5c:7a:cb:d9:f5:05:83:ec:d5:22:f4: 1b:16:50:e3:9d:4b:29:aa:14:2b:32:25:49:b8:8e:cf:63:29: 9b:b6:f0:a6:8d:6e:2f:4e:aa:01:5c:a1:8b:e6:7b:c1:c2:73: b5:3c:66:9a:ce:5c:67:1e:58:fd:3f:c2:34:60:f6:3c:26:25: 9a:3c:6d:8f:c5:1c:4c:1f:a6:e2:39:9e:48:ea:3d:78:a4:cc: 52:b8:a8:37:7d:6c:66:9f:9f:ab:5b:81:9b:a8:fc:3d:db:3d: 77:3d:6b:7b:71:59:96:11:e4:4f:46:f2:7a:15:c7:5b:c0:a7: 88:7f:30:0b:3a:e7:b3:b4:32:72:d1:70:5a:99:69:8d:c1:0b: 28:2e:66:c2:74:99:06:fa:39:24:da:7b:48:c9:82:78:98:33: e2:46:bf:38:27:24:dc:20:c6:0b:b2:7a:15:3d:ca:3d:c2:7f: c7:f3:8d:45:dc:59:38:30:ab:85:57:01:b7:77:5c:fd:ef:41: eb:27:f7:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCbuch7z/YQRDwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzAxMVoXDTI2MDExOTEwMzAxMVowLzEtMCsGA1UEAxMk NDA0NzZmYTAtYWQ1NS00N2E3LWE2YjctMDg5ZjI3ZGZhNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Szu+oqQOHoyPwf18MWeN9bSUWesFzLB2vrk zbzxr2bZcERlNIpN4DhmZEsmY7UGeSpdYcltt81CF+HqYZiiKtehjXAgvhT2J/SZ D14m78ZAi69Fa91RV6dguU+cA5XyONQ2HV7VUoTpWcFszErh0qZPJlSmAIxUZCoN pNEj6fMdOGCek8UTaxSekYKS+bb34b50Ca3vf05Lc5M2RPT4tSvVPd9UHlRYdTJ6 pzI5jJRPH6PwLVUjGC4TRy0mtsHUILA0pLbAZCP/j+rcpYRFF/OMQ159GgZXFN9x EpfIPV4t5g9pfITR2D8rReGbT/wAPleGamDFrbcUPJXLMTESPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYtlJ9oDOcqpY/bZM01tcc5Q9iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvNzIxNDljOTYtZTVmOC0z MmU3LTk5NzAtMTlhYzUwOWI1MzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTQFtDgOVyy38haaJenKRRSqEDVLB5o4smssj7vu0yuA8bUHUZ5N/W0 huEyPPVOev2vUr8Qi2ERpkPtCEJcesvZ9QWD7NUi9BsWUOOdSymqFCsyJUm4js9j KZu28KaNbi9OqgFcoYvme8HCc7U8ZprOXGceWP0/wjRg9jwmJZo8bY/FHEwfpuI5 nkjqPXikzFK4qDd9bGafn6tbgZuo/D3bPXc9a3txWZYR5E9G8noVx1vAp4h/MAs6 57O0MnLRcFqZaY3BCyguZsJ0mQb6OSTae0jJgniYM+JGvzgnJNwgxguyehU9yj3C f8fzjUXcWTgwq4VXAbd3XP3vQesn92U= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:51 2025 by rpki-client