$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c1c938f9-c180-386c-b805-02571096b027.roa File: c1c938f9-c180-386c-b805-02571096b027.roa (raw, json) Hash identifier: GIUYbwYFH61tY4eycmlNhjxG7Rsd3rtNXaC+7WYjdj0= Subject key identifier: 54:D7:7F:98:B1:7A:D4:2D:67:BC:CA:A2:02:93:FF:B3:6E:9C:37:91 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A0791B307282CB3D60440 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c1c938f9-c180-386c-b805-02571096b027.roa Signing time: Tue 21 Oct 2025 09:30:47 +0000 ROA not before: Tue 21 Oct 2025 09:30:47 +0000 ROA not after: Mon 19 Jan 2026 10:30:47 +0000 asID: 35039 IP address blocks: 130.214.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:07:91:b3:07:28:2c:b3:d6:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:30:47 2025 GMT Not After : Jan 19 10:30:47 2026 GMT Subject: CN=d4c6441e-f1f3-476e-93ac-c14f9511c004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:df:62:27:d7:c6:40:16:b7:79:fe:7c:50:5c: e3:e8:fe:c6:fe:ac:59:36:4f:2c:62:46:4b:8d:89: 96:76:4a:6e:36:4c:37:c8:67:ae:3e:d6:c0:d6:83: 5d:30:d7:92:c6:03:34:e7:24:0f:c8:d1:ea:20:52: c9:0a:c3:cc:63:d0:20:5d:23:98:35:d3:99:4c:37: 96:8d:63:2a:61:b1:4b:a6:5e:64:c9:57:d0:64:2e: e1:fc:70:22:80:59:20:fa:13:87:40:c3:4c:1c:36: da:4d:11:2d:95:49:ca:51:5b:78:e2:df:4d:c6:83: 98:13:1d:03:86:ec:92:42:12:3d:7a:b9:08:83:ee: 2c:ae:04:65:e7:c4:e8:5c:0f:b3:b8:a8:f8:10:32: 4e:41:71:fe:72:57:1e:15:6c:89:a5:00:58:e5:c8: 40:1a:ba:39:90:66:92:fb:26:e0:bd:1d:c2:88:c8: ad:81:e0:9b:8b:0f:86:01:81:36:f0:64:83:a2:16: 8f:91:c5:a8:81:9e:a8:1a:e9:43:cf:53:74:5b:2d: 3c:b6:1a:71:fc:b0:32:17:39:f4:c2:b6:b1:56:ea: 08:18:05:36:a2:61:3f:90:0b:51:b8:0c:3f:3f:f1: 94:f1:39:14:bc:5a:d6:b1:f7:79:6a:5a:3f:da:c7: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D7:7F:98:B1:7A:D4:2D:67:BC:CA:A2:02:93:FF:B3:6E:9C:37:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c1c938f9-c180-386c-b805-02571096b027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:60:d3:ba:27:e1:2d:42:90:be:bb:4a:b3:cf:74:5b:bf:ad: d6:fb:c5:b9:31:4d:32:d9:a5:89:61:f4:f8:81:59:94:62:e1: 94:7a:43:3d:c6:7c:10:41:71:1f:76:ae:4f:81:fb:8e:ad:7c: a4:e1:52:88:72:df:29:35:a1:6e:a7:f4:ce:16:08:00:1b:3e: e0:05:0e:20:3e:05:84:6b:7e:a9:6b:d9:b2:e0:68:2c:bb:6c: d0:5e:10:42:9a:6f:f7:07:b8:54:66:e3:b7:d5:bf:c2:94:77: 4c:78:3c:52:d7:c2:ff:30:b1:34:c2:81:2f:1a:a2:4a:c8:0b: 3d:eb:49:70:58:01:4d:d4:db:dd:3f:65:61:2b:72:21:bf:f7: e5:53:a8:14:3e:d6:3e:1f:54:09:b5:79:b2:aa:4f:fe:c1:9d: 4a:44:99:1f:66:13:b2:19:a6:91:55:80:fa:4c:96:e3:88:ae: 8a:c8:1c:cb:b2:8c:34:cf:13:c9:e3:0e:0b:79:17:6b:13:6a: d2:06:86:8f:80:65:ca:c5:d5:48:86:3c:cd:aa:ee:83:8f:6c: fd:50:d3:78:e5:be:ba:e5:f5:d0:14:3a:56:9f:be:7e:1f:81: b5:22:db:f2:22:74:14:4d:0b:56:ea:67:fe:76:ae:c8:56:56: b7:08:53:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCgeRswcoLLPWBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzA0N1oXDTI2MDExOTEwMzA0N1owLzEtMCsGA1UEAxMk ZDRjNjQ0MWUtZjFmMy00NzZlLTkzYWMtYzE0Zjk1MTFjMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d9iJ9fGQBa3ef58UFzj6P7G/qxZNk8sYkZL jYmWdkpuNkw3yGeuPtbA1oNdMNeSxgM05yQPyNHqIFLJCsPMY9AgXSOYNdOZTDeW jWMqYbFLpl5kyVfQZC7h/HAigFkg+hOHQMNMHDbaTREtlUnKUVt44t9NxoOYEx0D huySQhI9erkIg+4srgRl58ToXA+zuKj4EDJOQXH+clceFWyJpQBY5chAGro5kGaS +ybgvR3CiMitgeCbiw+GAYE28GSDohaPkcWogZ6oGulDz1N0Wy08thpx/LAyFzn0 wraxVuoIGAU2omE/kAtRuAw/P/GU8TkUvFrWsfd5alo/2sdaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTXf5ixetQtZ7zKogKT/7NunDeRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzFjOTM4ZjktYzE4MC0z ODZjLWI4MDUtMDI1NzEwOTZiMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1g07on4S1CkL67SrPPdFu/rdb7xbkxTTLZpYlh9PiBWZRi4ZR6Qz3G fBBBcR92rk+B+46tfKThUohy3yk1oW6n9M4WCAAbPuAFDiA+BYRrfqlr2bLgaCy7 bNBeEEKab/cHuFRm47fVv8KUd0x4PFLXwv8wsTTCgS8aokrICz3rSXBYAU3U290/ ZWErciG/9+VTqBQ+1j4fVAm1ebKqT/7BnUpEmR9mE7IZppFVgPpMluOIrorIHMuy jDTPE8njDgt5F2sTatIGho+AZcrF1UiGPM2q7oOPbP1Q03jlvrrl9dAUOlafvn4f gbUi2/IidBRNC1bqZ/52rshWVrcIU/A= -----END CERTIFICATE-----Generated at Mon Oct 27 07:04:54 2025 by rpki-client