$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/89b914f8-26b5-3c75-8625-74710752dc9b.roa File: 89b914f8-26b5-3c75-8625-74710752dc9b.roa (raw, json) Hash identifier: 7oNtIMrHHRltsGkGI3CjJWrXjPirzjeg9BuTukF3eWs= Subject key identifier: 9B:9A:AE:2A:86:01:83:1A:B3:5E:34:28:F6:FA:38:DC:51:0E:DF:EE Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A174CF5D4662935287380 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/89b914f8-26b5-3c75-8625-74710752dc9b.roa Signing time: Tue 21 Oct 2025 09:30:54 +0000 ROA not before: Tue 21 Oct 2025 09:30:54 +0000 ROA not after: Mon 19 Jan 2026 10:30:54 +0000 asID: 35039 IP address blocks: 130.214.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:17:4c:f5:d4:66:29:35:28:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:30:54 2025 GMT Not After : Jan 19 10:30:54 2026 GMT Subject: CN=ea9d8e82-68b1-4b72-aeb5-737e751e4ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c3:75:f6:e1:22:23:d3:f4:d8:fb:b3:1c:3a: 89:5c:89:fc:62:39:94:f2:58:9e:40:eb:21:20:7d: e8:e6:e4:5d:f8:f3:40:7c:ef:e3:cd:bf:c2:c9:f5: 7f:3c:3c:ea:7f:04:7f:39:f2:ba:e0:6f:5d:02:d8: f3:2b:c6:2a:4a:32:97:e7:56:6a:41:77:3f:b5:0c: c9:39:c8:56:63:8e:f6:5a:9c:41:81:e1:fc:54:e1: e8:96:48:60:04:c1:e9:86:d7:5e:00:17:9a:55:e3: 93:e4:56:ea:6b:03:88:c5:b7:4f:dc:0d:f8:12:8d: e9:60:eb:15:e2:2d:be:74:2e:54:e1:dd:ae:c7:db: e8:5a:09:6f:da:ce:5b:41:cd:07:aa:c3:26:1d:f4: 93:8b:07:a4:7d:58:5d:61:81:36:cf:51:5e:79:e2: 58:af:d4:2f:0d:d9:3f:cf:4a:b0:5c:8d:35:33:12: 66:8d:2f:c4:4a:34:1c:e6:b8:bc:c5:01:b2:62:b8: 21:20:3b:3f:74:7f:b8:91:eb:e7:d4:28:67:78:08: e1:7d:62:b3:e5:f5:3f:d9:cf:92:9b:04:ba:69:36: 23:db:b0:e3:c5:aa:7c:b3:fc:57:b7:b5:7b:c6:e2: a0:22:bf:bc:ca:c6:21:f4:d3:35:59:f0:c7:8c:db: 9a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9A:AE:2A:86:01:83:1A:B3:5E:34:28:F6:FA:38:DC:51:0E:DF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/89b914f8-26b5-3c75-8625-74710752dc9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:75:fc:dc:78:fc:32:b4:89:36:ad:d8:9f:b9:d9:77:4c:3e: 63:04:f3:2d:e9:f5:dd:5b:4a:00:bd:83:c7:70:8e:a6:d8:fa: 17:34:a8:4f:ee:f6:24:8a:31:1f:5a:32:e2:0c:6e:5f:b8:68: b4:08:a6:36:3d:de:47:1d:ab:df:9a:e2:02:97:6e:ae:e3:8c: 91:06:47:fc:0b:bc:6f:de:aa:b0:a4:74:a7:21:0c:97:b3:c2: 89:13:0a:5b:2c:9b:01:23:09:c7:3a:5c:0d:14:63:8d:45:ff: d4:64:cf:a4:3f:05:41:93:1d:c9:d9:13:38:b9:ee:37:77:6c: 36:c1:38:39:52:61:ec:d5:f3:ad:eb:8b:9b:9d:b6:30:46:b8: f4:d6:78:85:63:9f:7b:82:10:c3:30:d5:2c:2e:74:ba:1e:39: 68:a7:5d:d8:f2:67:61:f6:cf:90:17:b4:4d:ed:ce:e4:41:75: 89:f5:01:8f:57:69:b3:87:35:b2:57:ff:1a:1b:b4:ae:d8:bf: ae:52:76:6f:83:4b:04:d2:32:ec:df:48:58:8e:ed:a4:9f:3c: 2e:03:53:ac:1d:3b:0f:31:82:55:4b:5e:1b:ef:c4:9e:24:f1: 94:98:e2:ba:a8:8b:88:8e:98:e1:eb:24:f4:00:a5:1b:30:7f: 39:9c:a7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYChdM9dRmKTUoc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzA1NFoXDTI2MDExOTEwMzA1NFowLzEtMCsGA1UEAxMk ZWE5ZDhlODItNjhiMS00YjcyLWFlYjUtNzM3ZTc1MWU0YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sN19uEiI9P02PuzHDqJXIn8YjmU8lieQOsh IH3o5uRd+PNAfO/jzb/CyfV/PDzqfwR/OfK64G9dAtjzK8YqSjKX51ZqQXc/tQzJ OchWY472WpxBgeH8VOHolkhgBMHphtdeABeaVeOT5FbqawOIxbdP3A34Eo3pYOsV 4i2+dC5U4d2ux9voWglv2s5bQc0HqsMmHfSTiwekfVhdYYE2z1FeeeJYr9QvDdk/ z0qwXI01MxJmjS/ESjQc5ri8xQGyYrghIDs/dH+4kevn1ChneAjhfWKz5fU/2c+S mwS6aTYj27Djxap8s/xXt7V7xuKgIr+8ysYh9NM1WfDHjNualQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuariqGAYMas140KPb6ONxRDt/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvODliOTE0ZjgtMjZiNS0z Yzc1LTg2MjUtNzQ3MTA3NTJkYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABd1/Nx4/DK0iTat2J+52XdMPmME8y3p9d1bSgC9g8dwjqbY+hc0qE/u 9iSKMR9aMuIMbl+4aLQIpjY93kcdq9+a4gKXbq7jjJEGR/wLvG/eqrCkdKchDJez wokTClssmwEjCcc6XA0UY41F/9Rkz6Q/BUGTHcnZEzi57jd3bDbBODlSYezV863r i5udtjBGuPTWeIVjn3uCEMMw1SwudLoeOWinXdjyZ2H2z5AXtE3tzuRBdYn1AY9X abOHNbJX/xobtK7Yv65Sdm+DSwTSMuzfSFiO7aSfPC4DU6wdOw8xglVLXhvvxJ4k 8ZSY4rqoi4iOmOHrJPQApRswfzmcpxQ= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:52 2025 by rpki-client