$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa File: c9644e08-577c-3dec-bbcf-f4819e54c795.roa (raw, json) Hash identifier: c8VduDy+TyLn2x0qt/fQqxnIOoiQbwU7+E+AZf5Yeu0= Subject key identifier: 8C:25:26:D2:5F:17:5C:BA:03:8B:F6:88:46:B4:56:21:10:69:07:D5 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B980A9B98C17DD85114385380 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa Signing time: Tue 21 Oct 2025 09:31:57 +0000 ROA not before: Tue 21 Oct 2025 09:31:57 +0000 ROA not after: Mon 19 Jan 2026 10:31:57 +0000 asID: 35039 IP address blocks: 130.214.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:0a:9b:98:c1:7d:d8:51:14:38:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 21 09:31:57 2025 GMT Not After : Jan 19 10:31:57 2026 GMT Subject: CN=90249b33-b442-4ff0-951a-6faf1a0b6253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:51:84:b9:c3:b0:41:57:59:08:e7:01:21: d6:20:9c:b0:3c:be:cc:0c:b6:9e:9c:59:a5:a5:49: 6d:e3:f6:bb:ac:e2:85:c3:cb:88:67:ee:b4:c0:fe: bf:41:ac:06:33:d2:b2:8b:9a:92:d3:0b:d5:6d:b5: 00:ef:95:c1:c9:77:9c:df:7d:4b:b2:b1:93:0d:8b: 6a:bd:44:44:a5:36:dd:71:78:db:2e:7c:5b:a2:2a: c4:d8:ba:f7:c4:92:b8:ae:02:97:da:c2:f4:af:b4: 04:26:6a:55:ea:a3:33:3d:83:30:ef:22:a7:5f:a0: 6d:3c:a6:7d:d8:78:c4:97:45:66:62:ae:b4:3a:af: d7:98:12:85:e6:f4:76:36:94:c3:d2:b6:8e:44:fd: 90:fb:aa:30:a7:62:9c:96:81:5d:fd:8b:d1:84:47: ae:e0:01:6b:a7:79:4e:24:ec:5b:2f:d9:f3:31:ef: 30:5e:44:6b:ae:c2:21:58:68:5e:c2:cd:15:f5:f3: 0d:7c:be:10:c5:7e:b1:c4:f2:e8:ac:02:de:be:c1: b6:f5:ab:71:90:a3:70:72:66:6d:27:ff:2c:53:31: 33:16:70:c3:95:b9:78:aa:ea:58:de:81:e0:57:f0: cc:70:8e:5a:65:19:e8:37:59:08:e3:94:23:7d:cc: 67:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:25:26:D2:5F:17:5C:BA:03:8B:F6:88:46:B4:56:21:10:69:07:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:01:7f:ef:a8:4e:68:a9:37:f3:11:a0:09:5c:4a:5a:ca:73: e1:de:2d:47:ac:e3:9c:c4:06:f8:d1:31:5e:ca:bf:59:0a:7c: b4:99:4d:fd:e1:98:2e:00:23:71:49:f2:65:58:b2:93:ca:c5: 1d:ce:4c:86:5d:5d:6c:84:2e:5d:3f:3f:25:c3:17:05:3a:a9: f7:bb:fa:ef:7c:91:b8:4e:e6:52:5d:c1:35:95:94:13:0e:43: 98:ed:9b:b9:cb:5a:02:92:af:fd:f5:19:bd:93:74:f4:3a:6c: fd:a1:9b:84:f5:92:08:f3:5a:76:1b:65:2f:37:db:25:cf:37: 23:15:ad:38:c7:c3:0e:f3:e5:bb:f5:ea:03:5f:55:15:3a:ad: 16:2f:94:fc:af:16:68:2b:fe:d6:a1:46:1d:7d:e8:86:af:34: 2a:c2:3d:85:63:62:da:41:b4:ef:e3:eb:0e:c3:bb:1d:e2:d9: 12:9b:25:27:5a:d9:5e:6e:f7:70:40:5e:77:d7:09:b7:f4:17: b8:bd:8f:70:50:86:ad:ee:99:57:0e:0c:0d:9d:a3:5a:66:74: a6:d0:13:6c:5b:39:71:be:c9:cb:8c:83:34:50:d6:dd:47:17: b7:26:15:5a:4e:2a:cf:73:09:b8:f1:38:cc:7d:af:3e:bc:43: 79:ec:14:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYCpuYwX3YURQ4U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMTA5MzE1N1oXDTI2MDExOTEwMzE1N1owLzEtMCsGA1UEAxMk OTAyNDliMzMtYjQ0Mi00ZmYwLTk1MWEtNmZhZjFhMGI2MjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs29RhLnDsEFXWQjnASHWIJywPL7MDLaenFml pUlt4/a7rOKFw8uIZ+60wP6/QawGM9Kyi5qS0wvVbbUA75XByXec331LsrGTDYtq vUREpTbdcXjbLnxboirE2Lr3xJK4rgKX2sL0r7QEJmpV6qMzPYMw7yKnX6BtPKZ9 2HjEl0VmYq60Oq/XmBKF5vR2NpTD0raORP2Q+6owp2KcloFd/YvRhEeu4AFrp3lO JOxbL9nzMe8wXkRrrsIhWGhews0V9fMNfL4QxX6xxPLorALevsG29atxkKNwcmZt J/8sUzEzFnDDlbl4qupY3oHgV/DMcI5aZRnoN1kI45Qjfcxn/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwlJtJfF1y6A4v2iEa0ViEQaQfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzk2NDRlMDgtNTc3Yy0z ZGVjLWJiY2YtZjQ4MTllNTRjNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYBf++oTmipN/MRoAlcSlrKc+HeLUes45zEBvjRMV7Kv1kKfLSZTf3h mC4AI3FJ8mVYspPKxR3OTIZdXWyELl0/PyXDFwU6qfe7+u98kbhO5lJdwTWVlBMO Q5jtm7nLWgKSr/31Gb2TdPQ6bP2hm4T1kgjzWnYbZS832yXPNyMVrTjHww7z5bv1 6gNfVRU6rRYvlPyvFmgr/tahRh196IavNCrCPYVjYtpBtO/j6w7Dux3i2RKbJSda 2V5u93BAXnfXCbf0F7i9j3BQhq3umVcODA2do1pmdKbQE2xbOXG+ycuMgzRQ1t1H F7cmFVpOKs9zCbjxOMx9rz68Q3nsFMA= -----END CERTIFICATE-----Generated at Mon Oct 27 07:05:02 2025 by rpki-client