$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa File: c9644e08-577c-3dec-bbcf-f4819e54c795.roa (raw, json) Hash identifier: x/sngntYU9tjHnkZF6xEEt+a4w+MDGpeu7yS+M8z+Aw= Subject key identifier: F2:46:33:77:1F:4C:C7:46:15:C9:22:85:6C:16:49:24:EE:C6:CB:36 Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584D5884E09292B4C3D43B2E9030 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa Signing time: Tue 31 Mar 2026 01:00:23 +0000 ROA not before: Tue 31 Mar 2026 01:00:23 +0000 ROA not after: Mon 29 Jun 2026 01:00:23 +0000 asID: 35039 IP address blocks: 130.214.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:84:e0:92:92:b4:c3:d4:3b:2e:90:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Mar 31 01:00:23 2026 GMT Not After : Jun 29 01:00:23 2026 GMT Subject: CN=223b35d7-80da-45b5-a735-b88d88dba9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:aa:1b:f5:22:d6:20:23:8d:dd:8d:b9:ea: 61:f0:cd:98:b0:f9:5d:cb:7d:5f:ea:e5:30:90:ec: cb:f1:05:e1:84:d2:a9:2d:b9:b9:df:41:ec:b0:7f: 91:47:4b:50:41:32:a0:1c:e6:2c:fe:18:67:ec:0b: f1:7f:0c:13:0a:85:61:50:3a:9b:cb:4b:2a:a4:cf: e8:2b:2a:05:58:a1:3b:60:a9:ba:70:1d:f4:7a:df: 0d:34:9e:3f:f4:5c:5d:67:e4:76:b9:cd:d7:19:c2: f4:a9:da:ce:e4:34:cf:90:0c:fa:22:3d:d0:9c:c1: 96:47:b2:9d:99:e6:02:c1:cc:7e:ea:03:64:7d:98: 8e:cc:27:14:a6:c0:81:4c:ab:d0:1a:aa:83:a9:25: d0:c6:b6:68:12:0d:b0:1c:ac:03:d6:d9:5f:5a:e7: d6:64:ff:64:95:01:80:91:fd:49:0f:d6:ac:15:2f: 1d:2f:eb:1f:69:c5:96:4a:f4:9f:dd:44:21:22:bb: 92:a1:7a:15:7c:46:1a:4b:7e:a1:75:5f:57:db:c3: d5:97:48:b6:59:35:61:56:74:27:4d:cc:e2:77:44: 37:fc:84:02:98:f8:03:41:94:cf:e2:19:18:77:4c: 79:9d:4f:e6:b6:40:88:9e:9c:d0:79:ce:c7:f0:8f: 9b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:46:33:77:1F:4C:C7:46:15:C9:22:85:6C:16:49:24:EE:C6:CB:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/c9644e08-577c-3dec-bbcf-f4819e54c795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1a:e8:ab:49:4d:a0:a1:87:a6:4a:b0:66:6f:0e:c8:8b:b3: b8:90:7a:48:0f:01:0d:d4:2c:27:9f:73:16:6d:ac:43:14:5a: 4e:8d:9d:91:b5:0d:82:b2:03:f6:ff:4b:3d:ee:99:1c:3d:1d: e0:f8:eb:b6:c1:e5:c4:dd:fe:37:f6:be:d5:55:00:5c:7b:dc: 9c:69:8e:12:c3:7e:e5:41:73:21:35:91:58:ad:75:3e:2b:dc: 74:76:08:8d:65:60:42:89:2c:80:c1:74:4b:68:a9:e2:4e:69: 95:f4:e9:cb:9b:5e:f3:d0:56:e5:1f:41:43:75:00:af:25:68: 44:eb:f8:d2:45:49:45:a5:77:14:55:b4:1b:04:b4:64:de:6d: 19:27:3d:63:d6:b7:8d:9d:41:57:22:d7:2e:b3:83:0b:6c:a3: 34:53:39:33:4e:1c:88:21:b3:c8:11:3f:e2:17:a6:69:8d:bc: 69:61:d0:19:f1:82:c1:94:b6:e7:da:48:b7:97:b6:3f:a7:b4: 12:85:79:e2:2f:33:a2:8a:8e:0c:1c:f3:a2:79:1f:a2:b3:63: a7:05:69:e7:75:31:84:15:64:d1:ea:16:6e:f0:d8:3d:27:e5: 0f:43:93:95:f1:20:2d:e4:ce:72:82:de:0e:0a:fb:17:94:f6: d0:35:2f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1YhOCSkrTD1DsukDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI2MDMzMTAxMDAyM1oXDTI2MDYyOTAxMDAyM1owLzEtMCsGA1UEAxMk MjIzYjM1ZDctODBkYS00NWI1LWE3MzUtYjg4ZDg4ZGJhOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjOqG/Ui1iAjjd2Nueph8M2YsPldy31f6uUw kOzL8QXhhNKpLbm530HssH+RR0tQQTKgHOYs/hhn7AvxfwwTCoVhUDqby0sqpM/o KyoFWKE7YKm6cB30et8NNJ4/9FxdZ+R2uc3XGcL0qdrO5DTPkAz6Ij3QnMGWR7Kd meYCwcx+6gNkfZiOzCcUpsCBTKvQGqqDqSXQxrZoEg2wHKwD1tlfWufWZP9klQGA kf1JD9asFS8dL+sfacWWSvSf3UQhIruSoXoVfEYaS36hdV9X28PVl0i2WTVhVnQn Tczid0Q3/IQCmPgDQZTP4hkYd0x5nU/mtkCInpzQec7H8I+bVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJGM3cfTMdGFckihWwWSSTuxss2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvYzk2NDRlMDgtNTc3Yy0z ZGVjLWJiY2YtZjQ4MTllNTRjNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgtbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIa6KtJTaChh6ZKsGZvDsiLs7iQekgPAQ3ULCefcxZtrEMUWk6NnZG1 DYKyA/b/Sz3umRw9HeD467bB5cTd/jf2vtVVAFx73JxpjhLDfuVBcyE1kVitdT4r 3HR2CI1lYEKJLIDBdEtoqeJOaZX06cubXvPQVuUfQUN1AK8laETr+NJFSUWldxRV tBsEtGTebRknPWPWt42dQVci1y6zgwtsozRTOTNOHIghs8gRP+IXpmmNvGlh0Bnx gsGUtufaSLeXtj+ntBKFeeIvM6KKjgwc86J5H6KzY6cFaed1MYQVZNHqFm7w2D0n 5Q9Dk5XxIC3kznKC3g4K+xeU9tA1L5g= -----END CERTIFICATE-----Generated at Mon Apr 6 15:23:03 2026 by rpki-client