$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa File: bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa (raw, json) Hash identifier: A0rH1+ugDbjAw7Pyr7ixVHnv+KN4X+XjniNpbLAnp94= Subject key identifier: A3:97:9E:76:BC:39:DF:68:F5:24:D8:07:ED:76:8A:0F:CF:33:C2:38 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584E38C9BEC46C79210727E7DE00 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa Signing time: Fri 19 Jun 2026 09:00:12 +0000 ROA not before: Fri 19 Jun 2026 09:00:12 +0000 ROA not after: Thu 17 Sep 2026 09:00:12 +0000 asID: 35039 IP address blocks: 130.214.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:38:c9:be:c4:6c:79:21:07:27:e7:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Jun 19 09:00:12 2026 GMT Not After : Sep 17 09:00:12 2026 GMT Subject: CN=b6721058-e15b-4f24-a873-f6c8d03ff7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:54:b3:09:fa:5a:c3:5c:67:c8:29:e5:8e: 64:12:e4:77:02:61:2e:3e:9c:66:ab:95:0c:18:00: 6c:46:f4:81:ac:55:d9:b9:80:c7:04:ba:61:12:48: 4c:c5:f6:0d:2d:1a:04:a0:68:03:46:f3:88:fa:a6: 37:41:a0:b8:2c:fe:91:96:fc:0c:df:b6:3c:1a:01: f1:cf:ff:15:8e:7e:f7:f9:9e:d3:8c:71:00:0a:67: 5e:ea:70:be:54:23:f5:a5:95:cd:e2:fe:c9:e9:b2: 09:3d:90:52:ae:67:48:0e:ca:f7:80:e5:a5:d5:9e: 97:dd:3a:56:89:fd:a1:fe:4b:97:20:be:ba:c3:1e: d8:b2:b7:cc:8d:1a:bd:23:57:f1:d2:29:c7:fc:62: a4:a4:37:7f:fa:13:10:7e:39:5a:65:06:89:c1:b1: ab:2a:c1:92:4d:e5:45:0b:f5:de:0d:6a:98:9b:d3: 23:73:d0:90:fa:ff:5b:a0:07:43:0d:b8:fa:d0:61: 19:28:6d:4a:e9:86:67:a5:b9:18:a8:98:f3:34:e4: 8e:0a:1c:71:72:0a:28:1e:dc:5a:73:d4:e4:56:07: e9:59:6b:39:43:44:16:46:e7:9a:0d:d3:f8:f4:f9: 9a:e4:40:fb:38:a3:4d:40:eb:d0:22:77:7a:eb:fc: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:97:9E:76:BC:39:DF:68:F5:24:D8:07:ED:76:8A:0F:CF:33:C2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8d:04:b0:cf:64:9c:35:5f:1f:e1:05:82:42:c6:72:4e:e2: 47:f4:3a:be:18:2e:a4:d8:a9:6c:fb:c2:96:76:aa:8a:cb:af: c4:2c:e8:a7:be:b3:17:6d:17:d0:f1:cb:21:65:ee:18:89:cc: c4:e3:c4:04:5e:e3:69:6e:ef:79:e3:b6:71:43:b3:11:ae:3a: 9c:fb:ff:1a:9a:47:5e:6a:bf:14:33:d9:07:8a:d9:79:c6:98: b8:c7:d6:d6:cc:6f:42:16:cd:9c:8a:7b:30:e9:b8:ff:87:6b: 24:be:5b:3e:4d:05:ef:21:df:94:8e:67:07:9f:cf:44:7b:1f: 6c:fd:4d:6b:86:13:c0:bc:d7:1f:e3:90:ea:be:62:bc:83:e1: 3e:78:df:34:bb:0f:be:fb:54:3c:6d:a7:77:06:45:01:a8:e3: 6b:79:3d:63:1b:27:23:5b:5e:3e:f3:90:54:ae:e9:48:77:13: ee:8d:ce:a1:54:4e:8f:ba:b4:4e:6d:12:36:98:78:3f:eb:d1: 59:6c:6f:79:47:1f:5c:d3:38:51:87:c8:74:69:06:73:8a:d3: 92:c6:fa:9c:e9:55:e2:5a:4e:a6:85:84:4c:1c:ee:d9:9b:c4: 93:80:85:d4:03:f5:36:36:a7:42:a8:47:f7:5a:d1:d3:64:39: a3:18:b6:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE44yb7EbHkhByfn3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDYxOTA5MDAxMloXDTI2MDkxNzA5MDAxMlowLzEtMCsGA1UEAxMk YjY3MjEwNTgtZTE1Yi00ZjI0LWE4NzMtZjZjOGQwM2ZmN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZUswn6WsNcZ8gp5Y5kEuR3AmEuPpxmq5UM GABsRvSBrFXZuYDHBLphEkhMxfYNLRoEoGgDRvOI+qY3QaC4LP6RlvwM37Y8GgHx z/8Vjn73+Z7TjHEACmde6nC+VCP1pZXN4v7J6bIJPZBSrmdIDsr3gOWl1Z6X3TpW if2h/kuXIL66wx7YsrfMjRq9I1fx0inH/GKkpDd/+hMQfjlaZQaJwbGrKsGSTeVF C/XeDWqYm9Mjc9CQ+v9boAdDDbj60GEZKG1K6YZnpbkYqJjzNOSOChxxcgooHtxa c9TkVgfpWWs5Q0QWRueaDdP49Pma5ED7OKNNQOvQInd66/zgHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOXnna8Od9o9STYB+12ig/PM8I4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYmIxZjYxY2EtZWI5OS0z YTNiLWIyZTMtZTk2ZWE1NzY2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACNBLDPZJw1Xx/hBYJCxnJO4kf0Or4YLqTYqWz7wpZ2qorLr8Qs6Ke+ sxdtF9DxyyFl7hiJzMTjxARe42lu73njtnFDsxGuOpz7/xqaR15qvxQz2QeK2XnG mLjH1tbMb0IWzZyKezDpuP+HayS+Wz5NBe8h35SOZwefz0R7H2z9TWuGE8C81x/j kOq+YryD4T543zS7D777VDxtp3cGRQGo42t5PWMbJyNbXj7zkFSu6Uh3E+6NzqFU To+6tE5tEjaYeD/r0Vlsb3lHH1zTOFGHyHRpBnOK05LG+pzpVeJaTqaFhEwc7tmb xJOAhdQD9TY2p0KoR/da0dNkOaMYtvw= -----END CERTIFICATE-----Generated at Tue Jul 7 13:50:34 2026 by rpki-client