$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa File: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json) Hash identifier: Cl8LAoXGLaIfVYG3fLP79Zq95RuLE0xikjbsOD6GOKQ= Subject key identifier: 5E:68:74:A1:83:D0:C6:4E:99:2F:E9:29:41:C2:EB:22:53:54:0B:47 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584E1FA9A7AB3E3752C9A9B26FA8 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 22191 IP address blocks: 130.45.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a7:ab:3e:37:52:c9:a9:b2:6f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=c6428224-6513-4214-9c73-024003ae061a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:26:34:b4:1a:e5:8b:59:6f:75:af:d7:f2:10: db:ef:83:cf:de:9b:f4:16:bd:ec:8b:87:17:0d:3c: 6a:13:47:cb:45:22:46:14:ac:48:e5:12:27:8f:b3: eb:45:33:1f:f5:f3:b6:3f:ed:d9:3b:6e:8b:28:a5: ea:36:ac:d9:17:92:d5:32:c4:bd:e7:8e:e3:e3:f6: 82:97:ee:f4:5f:67:f3:c6:5f:5a:73:0b:73:54:f1: ab:a9:73:bf:0e:de:64:f2:0f:ec:59:e6:c7:34:20: 69:2f:89:51:94:f0:4c:a9:32:ab:2f:fd:07:80:3a: db:ca:1a:b9:10:b8:b5:96:98:db:19:3b:95:e8:31: f9:9e:d9:f4:1e:52:20:bb:fd:1b:68:d7:2f:58:97: 75:bb:c4:36:64:fd:49:e4:a7:e8:2e:a6:23:2d:2f: 4c:22:0e:1a:ad:63:25:0f:b2:73:f8:71:25:4c:b0: 0e:e9:dd:9a:36:ac:a6:67:d5:45:85:e1:d9:32:d5: dd:59:9c:38:59:20:7f:47:1e:06:10:ce:6d:d4:8d: 21:e1:c8:bf:e8:8b:77:84:73:7c:1b:3e:f6:9e:f6: 30:43:34:fd:44:b2:d9:ea:7f:a3:88:e1:63:be:64: 14:ff:00:67:9c:fd:23:fa:0a:21:a6:25:c1:e2:0b: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:68:74:A1:83:D0:C6:4E:99:2F:E9:29:41:C2:EB:22:53:54:0B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:1b:4d:b1:5b:73:a6:90:88:ac:8d:c5:90:e6:10:37:13:0c: 7b:ce:60:af:b6:f7:ad:32:6d:3f:e4:2a:40:85:6b:78:74:4b: 9a:71:2e:ac:30:ae:97:fe:9d:ac:27:d0:ff:86:92:dd:2d:6b: 20:2b:c9:3e:ba:91:06:b7:2b:24:41:eb:14:27:9c:a3:e7:bc: 60:23:17:53:1e:49:69:62:49:ca:60:b2:f4:85:0e:be:f7:ab: 40:20:b9:ac:95:3b:87:b9:25:03:e9:46:31:82:92:50:90:6d: 18:14:08:d1:2e:b5:3c:0c:2e:6a:7f:ce:e6:d1:e0:84:3e:97: db:51:89:f7:1a:ed:3f:5b:e4:e7:f7:c9:a2:94:bb:79:2b:c2: 5f:6b:89:a2:68:c4:6d:78:2b:19:2c:37:b5:e8:a4:8c:36:0f: cb:a4:b0:1e:1a:23:81:df:41:ca:30:c6:d2:a4:ae:d8:bf:b7: 00:b0:a7:71:29:99:40:c1:da:1b:1b:7b:14:f2:44:dc:ef:15: 4d:35:6d:70:98:8d:78:13:5f:ea:80:c4:69:08:91:1d:90:e1: 2d:e2:c9:81:5d:91:80:e4:07:68:8f:c6:69:c6:d1:39:df:d1: 4d:4e:43:04:7a:d6:21:07:c5:8d:dc:6a:c0:58:38:de:fa:b4: e6:44:02:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqaerPjdSyamyb6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk YzY0MjgyMjQtNjUxMy00MjE0LTljNzMtMDI0MDAzYWUwNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSY0tBrli1lvda/X8hDb74PP3pv0Fr3si4cX DTxqE0fLRSJGFKxI5RInj7PrRTMf9fO2P+3ZO26LKKXqNqzZF5LVMsS9547j4/aC l+70X2fzxl9acwtzVPGrqXO/Dt5k8g/sWebHNCBpL4lRlPBMqTKrL/0HgDrbyhq5 ELi1lpjbGTuV6DH5ntn0HlIgu/0baNcvWJd1u8Q2ZP1J5KfoLqYjLS9MIg4arWMl D7Jz+HElTLAO6d2aNqymZ9VFheHZMtXdWZw4WSB/Rx4GEM5t1I0h4ci/6It3hHN8 Gz72nvYwQzT9RLLZ6n+jiOFjvmQU/wBnnP0j+gohpiXB4gsxQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5odKGD0MZOmS/pKUHC6yJTVAtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYTdhOTAwY2UtMjNlZS0z M2IwLTg1Y2UtMzIxMDZjZmQ5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwbTbFbc6aQiKyNxZDmEDcTDHvOYK+2960ybT/kKkCFa3h0S5pxLqww rpf+nawn0P+Gkt0tayAryT66kQa3KyRB6xQnnKPnvGAjF1MeSWliScpgsvSFDr73 q0AguayVO4e5JQPpRjGCklCQbRgUCNEutTwMLmp/zubR4IQ+l9tRifca7T9b5Of3 yaKUu3krwl9riaJoxG14KxksN7XopIw2D8uksB4aI4HfQcowxtKkrti/twCwp3Ep mUDB2hsbexTyRNzvFU01bXCYjXgTX+qAxGkIkR2Q4S3iyYFdkYDkB2iPxmnG0Tnf 0U1OQwR61iEHxY3casBYON76tOZEAtM= -----END CERTIFICATE-----Generated at Sat Jun 13 23:05:19 2026 by rpki-client