$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa File: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json) Hash identifier: +r9k9bM4Rtdb0CjXFysZw25u7RDPF/mImlk7ogdVsTI= Subject key identifier: D6:D2:B6:0D:4E:A0:60:80:C9:E1:BE:10:71:3A:62:95:2F:39:00:B3 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584B80B76CA1F1271B96C35FADA0 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 22191 IP address blocks: 130.45.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6c:a1:f1:27:1b:96:c3:5f:ad:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=3b9d7929-35f0-425d-95c5-b65e0c999f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:6e:2e:a4:3d:e8:ba:86:bc:8c:71:32:85: fd:1c:76:0a:d5:95:ca:69:d6:47:f5:dc:d7:46:2d: 00:1d:17:98:19:6e:f5:ea:38:ee:74:df:bd:0b:3d: e8:96:bc:75:e3:67:68:07:e4:96:12:57:a6:3f:c6: 56:fd:9e:a6:5d:38:d2:99:f6:e8:16:ef:e2:44:6c: b1:ea:25:c4:22:da:04:08:b1:45:a7:9b:b5:60:a4: 2a:a1:dc:65:e8:b5:b4:c0:3e:a8:e2:b5:21:8d:b1: b0:50:23:0e:21:55:a3:13:e7:f4:db:12:d2:42:13: 1c:f7:56:a1:96:b3:04:71:30:71:97:a3:79:0d:0b: 53:ea:28:0a:66:12:3f:85:0f:4d:5a:9a:39:71:91: f1:10:80:58:ae:81:61:88:4c:70:b7:38:6e:88:9d: d1:40:9d:c1:94:f3:72:65:20:9e:b5:db:87:cf:e8: 0c:56:19:34:b3:de:d0:6a:67:6f:a2:78:a9:6b:90: 54:f3:8e:4b:92:ad:75:e1:4e:b8:cb:22:fd:1b:7a: 7e:3b:b8:c9:32:64:9f:06:f2:7e:0e:da:c3:7f:81: 26:23:18:82:3c:85:36:42:04:88:df:84:1f:e9:4d: 62:8a:b8:e6:3e:c3:93:ae:13:07:2b:08:88:0b:f5: 03:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D2:B6:0D:4E:A0:60:80:C9:E1:BE:10:71:3A:62:95:2F:39:00:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:4d:c0:51:14:09:22:fc:d0:2c:37:f7:7b:7a:63:68:a5:13: 75:e8:6a:67:70:e8:ee:e2:84:2e:88:af:ae:c1:ca:12:6c:a4: e6:d3:af:b4:b4:90:98:d9:8d:c1:fa:0a:ca:48:3b:a9:25:e5: 83:53:d7:01:57:0d:04:ec:f4:eb:f4:8a:9b:79:7b:ff:a5:e6: 21:d4:48:bc:91:32:a8:1e:da:ee:58:db:59:d8:10:08:bc:ed: 5a:5f:9a:6a:dc:4f:e4:e5:6f:b3:56:48:1d:30:0a:29:3c:dc: fb:ee:e3:35:1d:62:7e:ef:d2:2a:21:71:6b:4e:bf:4f:3c:cc: a9:c6:b9:a8:cd:46:f7:76:d2:7c:bc:a9:7e:48:1c:df:20:f7: c5:a9:01:48:8a:0c:14:9a:12:a2:03:16:11:86:f2:9c:00:ad: 8f:5f:30:1c:9a:eb:9e:95:39:1b:86:80:52:33:b4:4a:6b:18: 42:2e:0e:90:d1:85:ff:cf:78:5c:9c:56:3b:7e:c9:42:a2:d1: 2c:97:7c:bf:a6:d2:e1:6e:ea:00:ea:37:2f:1b:76:3a:0a:57: a9:59:5c:22:8d:13:bd:99:c5:07:bb:10:ca:d3:53:43:09:0b: b7:69:35:22:a3:9f:d7:19:fe:84:89:bf:05:3f:d5:ee:14:bc: 43:ba:1a:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2yh8ScblsNfraAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk M2I5ZDc5MjktMzVmMC00MjVkLTk1YzUtYjY1ZTBjOTk5ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWxuLqQ96LqGvIxxMoX9HHYK1ZXKadZH9dzX Ri0AHReYGW716jjudN+9Cz3olrx142doB+SWElemP8ZW/Z6mXTjSmfboFu/iRGyx 6iXEItoECLFFp5u1YKQqodxl6LW0wD6o4rUhjbGwUCMOIVWjE+f02xLSQhMc91ah lrMEcTBxl6N5DQtT6igKZhI/hQ9NWpo5cZHxEIBYroFhiExwtzhuiJ3RQJ3BlPNy ZSCetduHz+gMVhk0s97Qamdvonipa5BU845Lkq114U64yyL9G3p+O7jJMmSfBvJ+ DtrDf4EmIxiCPIU2QgSI34Qf6U1iirjmPsOTrhMHKwiIC/UDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbStg1OoGCAyeG+EHE6YpUvOQCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYTdhOTAwY2UtMjNlZS0z M2IwLTg1Y2UtMzIxMDZjZmQ5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdNwFEUCSL80Cw393t6Y2ilE3Xoamdw6O7ihC6Ir67ByhJspObTr7S0 kJjZjcH6CspIO6kl5YNT1wFXDQTs9Ov0ipt5e/+l5iHUSLyRMqge2u5Y21nYEAi8 7VpfmmrcT+Tlb7NWSB0wCik83Pvu4zUdYn7v0iohcWtOv088zKnGuajNRvd20ny8 qX5IHN8g98WpAUiKDBSaEqIDFhGG8pwArY9fMBya656VORuGgFIztEprGEIuDpDR hf/PeFycVjt+yUKi0SyXfL+m0uFu6gDqNy8bdjoKV6lZXCKNE72ZxQe7EMrTU0MJ C7dpNSKjn9cZ/oSJvwU/1e4UvEO6Gvg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:13 2025 by rpki-client