$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa File: b6852be6-b816-3c7d-8609-a9081e875696.roa (raw, json) Hash identifier: d3cN319gVVra0+UwT9AwuU4LEdafwvYRACyOUCEQM3w= Subject key identifier: D0:F7:CF:C6:61:C5:59:E5:59:84:45:66:D1:84:A0:72:4B:3F:48:5C Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884E85F2B770C802BB60180 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e8:5f:2b:77:0c:80:2b:b6:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=d08e7b68-cf52-4434-89fc-d4c39b715d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:0f:4f:5c:54:6c:77:2b:68:6a:55:6c:9f: 3c:44:de:04:35:01:f4:44:dd:01:fb:d1:de:90:cb: f0:0a:13:c2:73:93:ff:26:da:ca:16:27:da:c3:5d: d8:b0:dd:7d:80:80:d2:aa:0a:f9:4b:35:46:9a:d2: c7:2d:6c:dd:37:f3:8d:18:82:ca:30:f3:5d:aa:1a: bd:24:76:96:86:e5:e8:f9:af:55:58:c0:73:9c:0f: f0:4f:88:30:15:5a:28:06:0e:3e:4e:79:5b:40:74: 2e:c6:1d:a0:a6:de:82:77:de:8b:a1:65:d4:24:f9: 23:62:fa:84:fd:e5:2e:ad:71:f9:e7:9d:e3:2c:07: 9e:55:44:f3:a4:29:6d:48:3b:c8:71:9d:6b:23:6a: 41:a5:4b:f5:69:e4:16:11:83:26:8f:5f:6c:dd:91: 83:8c:c4:a4:47:8a:a3:5c:f9:7b:76:23:8f:ff:92: 7e:af:3b:57:f3:c8:8f:d9:be:03:00:d1:de:8f:23: 24:29:53:4f:71:e3:eb:86:8d:d8:49:4b:2a:96:25: 66:26:ad:2b:0c:10:8f:d8:52:55:58:e9:4c:2a:b9: 70:6d:17:85:4c:2a:63:1c:d2:e3:21:bd:72:8a:53: 88:89:cc:5a:60:21:18:bf:ef:17:83:73:23:f9:db: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:CF:C6:61:C5:59:E5:59:84:45:66:D1:84:A0:72:4B:3F:48:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b6852be6-b816-3c7d-8609-a9081e875696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:71:c1:7d:59:87:3b:93:bf:9e:f9:da:1c:f2:46:dc:04:56: a4:c6:2d:5b:80:a2:ce:42:ca:de:84:0f:da:37:f9:8d:73:eb: 7b:a9:a4:de:d7:6f:2b:fa:b5:c4:b4:0b:4f:75:81:f4:fe:cc: 29:32:79:0c:2b:4f:28:94:18:9c:60:66:c9:5c:ff:47:e3:11: a0:7f:01:85:d9:ed:95:7b:53:e5:40:7c:82:43:3a:2f:5d:67: 68:fb:ee:58:d9:28:50:5d:97:c7:e4:c2:fd:bb:fe:c2:c1:75: d2:06:52:03:77:41:85:1c:69:2d:68:9c:a2:80:44:35:3b:74: f0:12:31:6a:52:16:bf:0e:fc:b7:8c:68:b1:be:13:3f:8c:91: f8:4e:40:1c:13:c2:a5:d9:a3:2b:6e:d9:72:18:87:a0:c0:02: a1:bd:1c:07:90:ba:2d:59:0a:e7:e2:a8:5c:2b:6d:71:bb:f8: 64:a5:11:54:46:55:51:21:3f:68:01:41:79:88:4f:5b:36:81: c8:ff:a2:9f:a3:2b:ff:bb:5f:05:61:44:6c:46:f3:47:75:ae: 93:25:40:39:da:45:89:bd:86:68:d1:7f:53:2c:43:e7:cb:75: 2a:89:06:62:74:ab:45:ba:b9:3c:ae:23:57:db:cb:77:fb:c4: 69:85:e2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOhfK3cMgCu2AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk ZDA4ZTdiNjgtY2Y1Mi00NDM0LTg5ZmMtZDRjMzliNzE1ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr48PT1xUbHcraGpVbJ88RN4ENQH0RN0B+9He kMvwChPCc5P/JtrKFifaw13YsN19gIDSqgr5SzVGmtLHLWzdN/ONGILKMPNdqhq9 JHaWhuXo+a9VWMBznA/wT4gwFVooBg4+TnlbQHQuxh2gpt6Cd96LoWXUJPkjYvqE /eUurXH5553jLAeeVUTzpCltSDvIcZ1rI2pBpUv1aeQWEYMmj19s3ZGDjMSkR4qj XPl7diOP/5J+rztX88iP2b4DANHejyMkKVNPcePrho3YSUsqliVmJq0rDBCP2FJV WOlMKrlwbReFTCpjHNLjIb1yilOIicxaYCEYv+8Xg3Mj+ds+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND3z8ZhxVnlWYRFZtGEoHJLP0hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYjY4NTJiZTYtYjgxNi0z YzdkLTg2MDktYTkwODFlODc1Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhxwX1ZhzuTv5752hzyRtwEVqTGLVuAos5Cyt6ED9o3+Y1z63uppN7X byv6tcS0C091gfT+zCkyeQwrTyiUGJxgZslc/0fjEaB/AYXZ7ZV7U+VAfIJDOi9d Z2j77ljZKFBdl8fkwv27/sLBddIGUgN3QYUcaS1onKKARDU7dPASMWpSFr8O/LeM aLG+Ez+MkfhOQBwTwqXZoytu2XIYh6DAAqG9HAeQui1ZCufiqFwrbXG7+GSlEVRG VVEhP2gBQXmIT1s2gcj/op+jK/+7XwVhRGxG80d1rpMlQDnaRYm9hmjRf1MsQ+fL dSqJBmJ0q0W6uTyuI1fby3f7xGmF4nI= -----END CERTIFICATE-----Generated at Mon Apr 6 15:23:45 2026 by rpki-client