$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa File: bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa (raw, json) Hash identifier: 5bImf6ak4B9DlH4xGwmtafwsMCdVlkSUOTgoE6pem4c= Subject key identifier: 9A:64:A9:F0:8B:51:4B:B8:FD:41:11:9C:84:17:8D:A9:EA:D2:66:DB Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B97ED76B4B336B61D88D31C38 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa Signing time: Tue 21 Oct 2025 08:33:13 +0000 ROA not before: Tue 21 Oct 2025 08:33:13 +0000 ROA not after: Mon 19 Jan 2026 09:33:13 +0000 asID: 35039 IP address blocks: 130.214.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:ed:76:b4:b3:36:b6:1d:88:d3:1c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 08:33:13 2025 GMT Not After : Jan 19 09:33:13 2026 GMT Subject: CN=ca8e9fbf-a828-438c-8364-4be0314572c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:f2:bd:7f:24:4f:02:b1:ef:f1:d9:0e:4d: 5f:05:e2:16:13:df:eb:4c:18:aa:38:77:76:d5:93: c8:59:8c:2d:0d:03:f7:0a:d2:94:80:a8:0f:ce:b4: c1:07:09:4c:a4:7c:b5:aa:ab:2b:ab:ed:df:4f:12: 9d:e7:2b:61:0e:02:24:41:01:9a:81:01:9c:da:61: c3:88:2b:be:2e:f5:17:bd:ee:cb:b2:1a:9e:24:04: e1:f3:56:b1:59:ed:38:a3:6c:f8:ca:bf:11:e9:11: 44:04:c8:ba:f4:79:7e:a6:dd:29:85:2f:55:4d:a1: 8e:59:e9:e5:56:9c:bd:eb:51:d3:f1:a8:dd:27:3c: 20:8c:23:8f:f0:00:50:b7:e1:89:3c:75:59:8e:2c: 8a:f7:78:87:f2:ba:b6:27:00:f8:11:bf:39:6e:9b: d4:87:07:9b:f8:34:fa:73:ac:6c:3f:6f:ad:13:13: be:3b:3e:b5:3c:d1:8c:07:d1:da:ab:4e:31:c9:f9: 22:74:ce:88:b5:21:66:e2:7c:e9:49:41:a5:8c:01: 18:cb:62:b2:9d:98:17:28:61:5e:68:43:c0:64:b6: f8:67:1f:45:49:53:6d:49:1d:d1:80:d2:90:74:dd: 78:fc:21:4e:20:ee:37:6d:d9:ee:ab:92:8e:db:41: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:A9:F0:8B:51:4B:B8:FD:41:11:9C:84:17:8D:A9:EA:D2:66:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/bb1f61ca-eb99-3a3b-b2e3-e96ea5766c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3d:ef:17:78:72:f5:1a:89:2d:d6:7d:af:72:75:6a:54:19: ff:c3:05:e8:ac:87:8c:20:ec:69:94:ee:e4:a2:20:b1:48:05: 85:66:27:6a:aa:81:9c:75:e2:39:68:3f:df:9b:5d:06:a0:c7: 1b:10:a3:b2:13:d3:1f:99:36:8f:c7:ea:6b:da:fa:fa:c9:e4: 73:1c:01:8f:9e:e4:f8:37:89:0a:b1:32:d2:0e:44:f9:08:78: e8:df:80:96:a7:8b:de:cf:8f:79:53:e8:0d:d1:30:22:fb:8e: 1c:de:07:f0:2c:3e:7f:d0:9b:b1:e5:66:42:b4:5b:40:16:e0: 5d:44:05:31:09:11:c8:00:55:07:c6:8f:ce:33:74:c1:35:11: 35:f0:17:3c:ac:8b:db:77:1b:65:b6:e1:4d:9d:3a:3f:75:02: 1f:b6:c2:9d:32:d9:9a:e0:04:41:94:b7:14:4d:1b:64:25:17: 2f:3f:2a:88:cd:59:7b:0f:d5:cc:84:b5:a8:36:4d:8b:85:27: 5c:1e:29:60:fc:e8:56:5c:fe:be:f0:e0:e2:ab:e9:c5:83:cf: 2f:4f:f0:32:a5:f8:7b:0b:06:38:48:65:bf:dc:8e:80:f8:93: f3:10:a3:0f:1d:6f:1d:cb:b9:5c:d0:28:8b:b1:82:9f:48:7f: d3:8c:2a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuX7Xa0sza2HYjTHDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA4MzMxM1oXDTI2MDExOTA5MzMxM1owLzEtMCsGA1UEAxMk Y2E4ZTlmYmYtYTgyOC00MzhjLTgzNjQtNGJlMDMxNDU3MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZPyvX8kTwKx7/HZDk1fBeIWE9/rTBiqOHd2 1ZPIWYwtDQP3CtKUgKgPzrTBBwlMpHy1qqsrq+3fTxKd5ythDgIkQQGagQGc2mHD iCu+LvUXve7LshqeJATh81axWe04o2z4yr8R6RFEBMi69Hl+pt0phS9VTaGOWenl Vpy961HT8ajdJzwgjCOP8ABQt+GJPHVZjiyK93iH8rq2JwD4Eb85bpvUhweb+DT6 c6xsP2+tExO+Oz61PNGMB9Haq04xyfkidM6ItSFm4nzpSUGljAEYy2KynZgXKGFe aEPAZLb4Zx9FSVNtSR3RgNKQdN14/CFOIO43bdnuq5KO20E3VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpkqfCLUUu4/UERnIQXjanq0mbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYmIxZjYxY2EtZWI5OS0z YTNiLWIyZTMtZTk2ZWE1NzY2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE97xd4cvUaiS3Wfa9ydWpUGf/DBeish4wg7GmU7uSiILFIBYVmJ2qq gZx14jloP9+bXQagxxsQo7IT0x+ZNo/H6mva+vrJ5HMcAY+e5Pg3iQqxMtIORPkI eOjfgJani97Pj3lT6A3RMCL7jhzeB/AsPn/Qm7HlZkK0W0AW4F1EBTEJEcgAVQfG j84zdME1ETXwFzysi9t3G2W24U2dOj91Ah+2wp0y2ZrgBEGUtxRNG2QlFy8/KojN WXsP1cyEtag2TYuFJ1weKWD86FZc/r7w4OKr6cWDzy9P8DKl+HsLBjhIZb/cjoD4 k/MQow8dbx3LuVzQKIuxgp9If9OMKgk= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:56 2025 by rpki-client