$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cff183fa-2588-3e54-833a-fea363c3e18f.roa File: cff183fa-2588-3e54-833a-fea363c3e18f.roa (raw, json) Hash identifier: T+6LHNjkcuDSzcV+0JscPHkEvB2y+GYfAeisy4dNYGo= Subject key identifier: 40:02:7E:7F:4C:CA:6C:8C:C7:A4:F6:20:D9:E0:28:A8:E8:B0:D4:FB Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a Certificate serial: 010D0C9F4328584B9A5D958777CEA483D1AD6F80 Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cff183fa-2588-3e54-833a-fea363c3e18f.roa Signing time: Wed 22 Oct 2025 05:30:45 +0000 ROA not before: Wed 22 Oct 2025 05:30:45 +0000 ROA not after: Tue 20 Jan 2026 06:30:45 +0000 asID: 0 IP address blocks: 130.214.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9a:5d:95:87:77:ce:a4:83:d1:ad:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a Validity Not Before: Oct 22 05:30:45 2025 GMT Not After : Jan 20 06:30:45 2026 GMT Subject: CN=10e36717-1dfc-4e13-be10-a2dc3704f4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:e1:18:71:25:86:f1:ad:d3:69:6b:dc:8c: 13:4d:9c:3b:a4:e4:79:33:cc:59:40:1e:66:84:01: fb:85:e4:e4:29:a7:c9:8f:02:45:5c:a4:a1:05:63: 20:fb:ee:c9:67:ba:2f:75:75:5b:93:6e:28:a3:61: 5b:3a:a0:ac:0a:ac:9c:76:34:46:57:b7:67:87:09: 9a:d3:2f:21:a5:51:73:e2:f9:f5:4b:a4:8b:1b:6e: d4:0f:36:e5:91:1d:58:fb:4e:8c:ec:68:e1:23:6f: 00:08:45:f9:55:9e:57:77:27:c0:1f:ce:a2:f2:66: 6e:df:86:54:dc:87:2c:bd:ee:fd:ee:bd:b2:14:c2: 91:d8:91:11:6d:61:4c:71:4e:ca:06:bb:65:56:1c: cc:e3:08:bc:68:41:24:61:c5:62:e9:f6:f3:b7:c0: e5:f4:5d:99:06:c9:04:e8:43:ea:8c:08:c5:72:60: 7d:3e:9c:b0:88:c9:8b:cc:41:5b:fa:d7:b6:4d:86: 93:9c:58:f0:78:3d:e3:93:1c:7d:f4:0b:cc:2d:11: ab:d0:c6:71:83:da:1d:6f:6d:a8:9a:79:a9:df:52: 20:7a:e1:83:c5:3f:d2:9b:00:de:9d:ea:c6:54:32: 20:e5:9b:70:29:c5:90:f1:8b:b9:2f:7b:7c:a8:41: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:02:7E:7F:4C:CA:6C:8C:C7:A4:F6:20:D9:E0:28:A8:E8:B0:D4:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/cff183fa-2588-3e54-833a-fea363c3e18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl X509v3 Authority Key Identifier: keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer sbgp-ipAddrBlock: critical IPv4: 130.214.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9e:03:ce:fd:e0:16:79:66:b1:31:44:06:64:53:c0:01:a7: 17:1c:a7:29:2a:84:ba:58:db:36:d1:ff:0a:b2:f6:01:f3:f2: 2c:e1:07:bb:00:13:93:44:e3:71:29:03:98:4f:9f:bb:40:77: 5a:89:c6:d6:a5:0d:d7:e3:47:36:0f:b3:fc:bf:ab:84:b5:17: 94:c8:10:4c:3a:de:74:c3:41:39:15:e1:5a:11:c3:65:ec:94: 48:0d:3d:3f:bf:38:30:56:a9:f6:c6:17:1a:96:aa:f2:d6:f4: 58:8e:bd:b6:29:c2:90:64:87:4e:db:e5:0d:08:36:10:0a:f2: 8c:ad:e3:71:29:a0:89:37:aa:94:60:d7:67:a1:b1:b6:41:81: 18:19:fd:0c:68:13:e4:76:b5:d6:39:23:91:08:0a:c2:f9:23: 7d:67:1c:c0:a0:fd:0c:64:12:d1:e9:77:88:15:54:7b:46:d8: 63:77:61:60:91:a2:d0:de:d7:3d:c0:e4:8b:56:1c:6d:ae:0f: 8a:51:68:d4:80:d4:a3:00:e1:cf:27:14:be:fa:44:83:30:df: c0:e5:0a:13:a9:05:58:5a:7e:a2:80:12:3f:0d:9e:2f:6b:29: a9:57:6d:71:20:09:f7:86:2e:d3:dc:26:d9:c2:ea:70:a8:da: ed:e9:bd:65 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuaXZWHd86kg9Gtb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk ODBhMB4XDTI1MTAyMjA1MzA0NVoXDTI2MDEyMDA2MzA0NVowLzEtMCsGA1UEAxMk MTBlMzY3MTctMWRmYy00ZTEzLWJlMTAtYTJkYzM3MDRmNGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVLhGHElhvGt02lr3IwTTZw7pOR5M8xZQB5m hAH7heTkKafJjwJFXKShBWMg++7JZ7ovdXVbk24oo2FbOqCsCqycdjRGV7dnhwma 0y8hpVFz4vn1S6SLG27UDzblkR1Y+06M7GjhI28ACEX5VZ5XdyfAH86i8mZu34ZU 3Icsve797r2yFMKR2JERbWFMcU7KBrtlVhzM4wi8aEEkYcVi6fbzt8Dl9F2ZBskE 6EPqjAjFcmB9PpywiMmLzEFb+te2TYaTnFjweD3jkxx99AvMLRGr0MZxg9odb22o mnmp31IgeuGDxT/SmwDenerGVDIg5ZtwKcWQ8Yu5L3t8qEHeRQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEACfn9MymyMx6T2INngKKjosNT7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvY2ZmMTgzZmEtMjU4OC0z ZTU0LTgzM2EtZmVhMzYzYzNlMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4 ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx NWEzOGQ4MGEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgtYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWp4Dzv3gFnlmsTFEBmRTwAGnFxynKSqEuljbNtH/CrL2AfPyLOEHuwAT k0TjcSkDmE+fu0B3WonG1qUN1+NHNg+z/L+rhLUXlMgQTDredMNBORXhWhHDZeyU SA09P784MFap9sYXGpaq8tb0WI69tinCkGSHTtvlDQg2EAryjK3jcSmgiTeqlGDX Z6GxtkGBGBn9DGgT5Ha11jkjkQgKwvkjfWccwKD9DGQS0el3iBVUe0bYY3dhYJGi 0N7XPcDki1Ycba4PilFo1IDUowDhzycUvvpEgzDfwOUKE6kFWFp+ooASPw2eL2sp qVdtcSAJ94Yu09wm2cLqcKja7em9ZQ== -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:11 2025 by rpki-client