$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa File: ac710d64-e5f6-36cf-a213-06b50a2096e5.roa (raw, json) Hash identifier: D5nrx7Dhdg9Q/2XCnC7oKkUPxGPE3U3kmpR73TeJoBw= Subject key identifier: 60:7C:14:A1:7B:55:B4:01:5A:34:DB:71:BA:D4:56:7B:4B:A4:6B:FC Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A514249EF5ACDFFEDDC80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa Signing time: Tue 21 Oct 2025 09:31:21 +0000 ROA not before: Tue 21 Oct 2025 09:31:21 +0000 ROA not after: Mon 19 Jan 2026 10:31:21 +0000 asID: 35039 IP address blocks: 130.214.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:51:42:49:ef:5a:cd:ff:ed:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:21 2025 GMT Not After : Jan 19 10:31:21 2026 GMT Subject: CN=f31058b5-7420-4cf2-b554-1937a22b17a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:77:95:ad:f9:41:7c:73:6d:f9:0b:ba:0f:5d: 61:07:e9:a3:8a:bd:11:31:a3:6c:a3:8e:0e:7f:4b: 2a:cc:7c:96:f9:89:86:22:2c:78:0c:e4:77:72:71: b0:9c:0a:5f:fb:f4:cb:98:eb:e1:cd:a6:35:06:04: 9a:51:14:52:18:de:60:58:5a:5d:b8:a5:cc:b2:84: af:3f:22:2d:88:ea:6a:23:58:c9:33:66:f2:69:e5: 39:b4:2c:31:f7:36:46:e5:04:46:6c:96:cc:05:ef: b1:69:1b:47:24:8e:b1:a3:02:32:02:51:81:74:f0: ab:17:d3:ba:99:7f:99:a3:92:bb:d8:0a:be:66:a8: 39:f6:ec:3f:c9:66:33:cd:91:d0:68:30:51:ac:1b: 5a:e3:ce:ff:dc:80:ee:e0:6e:cc:49:d5:6f:5c:33: 4f:27:91:a7:fa:6d:e4:bd:57:f2:e1:16:33:5d:01: 63:e0:79:fa:aa:f0:8e:49:50:1a:25:bb:2b:93:2c: 0b:3a:e6:7b:5c:96:83:fd:b4:a4:45:55:a7:ef:49: 35:cf:7a:88:d2:ff:ed:1e:a9:4d:73:b5:ca:9f:b6: ef:10:50:47:cc:bd:34:e8:28:bd:84:bf:10:c6:a0: 48:f8:95:77:bc:e9:dd:0d:15:ad:f3:29:21:44:99: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7C:14:A1:7B:55:B4:01:5A:34:DB:71:BA:D4:56:7B:4B:A4:6B:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ac710d64-e5f6-36cf-a213-06b50a2096e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:fe:0c:56:e0:8a:9e:15:34:e4:a6:d5:bb:be:03:0a:1a:99: 70:3c:40:05:41:bb:00:bc:97:8d:e0:e6:bd:d7:e1:2d:2a:65: 29:c6:3d:78:4d:34:b2:32:c3:30:b2:7d:41:fc:da:3f:53:87: 37:5a:e7:6b:90:cd:8f:b0:d7:0a:4a:d7:a3:34:43:06:8f:d1: b9:a8:89:f9:61:17:a1:9d:45:e2:63:10:de:05:de:e7:9e:46: 11:59:ea:23:47:7e:00:c4:7c:45:32:e3:be:25:08:50:b0:9b: ee:d8:22:cc:5d:b1:a4:c8:3a:25:6a:78:9a:cb:8a:06:25:85: 1b:31:a2:1d:06:c1:67:2b:20:23:44:b7:01:e4:66:a1:95:8f: 28:2c:77:9d:98:8f:ab:cb:36:5f:aa:7a:1c:7a:66:c2:b6:58: e0:6e:bf:bb:10:9f:b3:08:7f:c9:21:ed:a4:29:89:2c:25:c6: 08:dc:ee:56:6d:f0:31:c1:7c:79:2e:7c:6f:8a:eb:da:21:18: dc:37:d7:a5:a6:42:3a:32:be:84:12:54:81:ec:fd:a4:95:e2: 15:29:87:ee:70:3d:ba:e0:b2:31:11:42:c2:b1:7f:10:03:c9: 25:40:92:19:c5:6d:8d:e6:d0:73:e6:2b:ab:b2:a5:18:ce:1f: d3:6c:7f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYClFCSe9azf/t3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzEyMVoXDTI2MDExOTEwMzEyMVowLzEtMCsGA1UEAxMk ZjMxMDU4YjUtNzQyMC00Y2YyLWI1NTQtMTkzN2EyMmIxN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXeVrflBfHNt+Qu6D11hB+mjir0RMaNso44O f0sqzHyW+YmGIix4DOR3cnGwnApf+/TLmOvhzaY1BgSaURRSGN5gWFpduKXMsoSv PyItiOpqI1jJM2byaeU5tCwx9zZG5QRGbJbMBe+xaRtHJI6xowIyAlGBdPCrF9O6 mX+Zo5K72Aq+Zqg59uw/yWYzzZHQaDBRrBta487/3IDu4G7MSdVvXDNPJ5Gn+m3k vVfy4RYzXQFj4Hn6qvCOSVAaJbsrkywLOuZ7XJaD/bSkRVWn70k1z3qI0v/tHqlN c7XKn7bvEFBHzL006Ci9hL8QxqBI+JV3vOndDRWt8ykhRJncLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB8FKF7VbQBWjTbcbrUVntLpGv8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYWM3MTBkNjQtZTVmNi0z NmNmLWEyMTMtMDZiNTBhMjA5NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH+DFbgip4VNOSm1bu+AwoamXA8QAVBuwC8l43g5r3X4S0qZSnGPXhN NLIywzCyfUH82j9Thzda52uQzY+w1wpK16M0QwaP0bmoiflhF6GdReJjEN4F3uee RhFZ6iNHfgDEfEUy474lCFCwm+7YIsxdsaTIOiVqeJrLigYlhRsxoh0GwWcrICNE twHkZqGVjygsd52Yj6vLNl+qehx6ZsK2WOBuv7sQn7MIf8kh7aQpiSwlxgjc7lZt 8DHBfHkufG+K69ohGNw316WmQjoyvoQSVIHs/aSV4hUph+5wPbrgsjERQsKxfxAD ySVAkhnFbY3m0HPmK6uypRjOH9NsfwY= -----END CERTIFICATE-----Generated at Mon Oct 27 07:05:01 2025 by rpki-client