$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa File: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json) Hash identifier: fB9WLFVNCNFRG5YPkOH+vMEZzDF0D0uBS/M6XmE7KsI= Subject key identifier: CE:93:DD:78:C3:DD:AD:8E:EA:9F:79:EB:03:F6:DF:4D:9F:AF:34:21 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F4328584D3F64F0E0E427954077541100 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 22191 IP address blocks: 130.45.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f0:e0:e4:27:95:40:77:54:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=03e9572b-1196-4ed2-ba41-5c58282b5ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:20:50:5f:28:3f:38:7f:08:75:95:c5:79: 8e:6d:0a:d4:1e:00:92:a1:0f:04:07:a8:dd:81:76: 74:95:e4:b7:02:70:86:6c:21:10:3d:eb:1a:d2:8d: 87:ba:1a:e7:6d:59:05:6e:70:ae:98:03:44:1f:c5: a8:06:6d:0c:79:b3:e2:52:e0:a7:b9:5a:43:01:3f: 1a:fd:8d:96:22:62:b7:75:3e:d0:41:19:82:76:72: 0c:c5:68:6f:5d:3f:ea:ca:24:19:6f:27:0f:b8:cc: 84:6d:10:91:81:70:78:3e:a8:e4:ae:b3:73:fb:b3: 43:60:2a:49:7a:0e:28:72:dc:70:84:80:c4:20:53: 39:41:db:15:08:fc:95:89:14:de:8e:c6:f4:c8:8c: 81:e3:68:9d:12:d4:8e:18:28:70:e0:f7:2d:76:52: a5:b3:f9:4e:a1:bf:1b:51:99:0e:60:37:e6:34:94: 8d:c8:f0:9d:9c:05:1b:38:19:f1:65:52:e4:ed:4e: 1d:90:cf:bd:78:17:53:4b:f9:aa:50:be:04:36:a8: f4:4e:70:fd:b0:95:de:5a:59:77:47:cb:77:a1:e7: 44:10:0a:18:e2:ec:a3:d8:e9:37:51:6e:00:80:55: 85:4d:76:c4:cd:56:f7:d5:6f:b5:74:a8:66:5f:0f: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:93:DD:78:C3:DD:AD:8E:EA:9F:79:EB:03:F6:DF:4D:9F:AF:34:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ea:d6:ec:0c:9d:cd:77:17:7f:fa:46:0e:d1:57:37:91:44: 54:43:84:d5:5c:6c:0c:15:87:2c:4f:eb:a8:92:a5:8e:fc:d8: 1f:ed:f5:17:bb:2f:24:8b:78:3e:78:97:db:36:bc:97:8d:e9: 31:18:f4:0a:c3:d6:c1:7a:69:3c:cd:b9:23:9e:3a:3b:f4:6b: 36:03:49:11:51:69:37:ab:18:f7:d1:9f:81:56:39:23:fd:c6: 91:b7:57:74:d7:36:f2:2e:79:2a:45:4e:c6:e7:6c:02:73:a6: 03:8f:50:fc:1f:ea:01:7c:7f:69:7c:2f:ec:f0:52:eb:ed:87: 68:8b:8e:5c:97:c2:86:3b:84:d1:a2:44:7a:8e:70:56:d4:24: 0a:c7:4d:7b:d4:7a:5b:f5:95:20:eb:5e:c5:56:65:d5:64:04: a3:cb:78:60:23:d5:5d:9f:a9:a9:a3:87:af:eb:27:91:2e:29: 1f:1d:bd:ae:6b:06:f4:d1:97:1a:df:9d:e1:96:fd:91:fe:11: ec:d1:7c:1c:70:c6:e6:57:f3:ab:df:57:fb:83:70:f3:c9:dc: 62:b1:98:41:b0:bf:e0:d4:06:1f:4a:b8:2a:2e:39:9e:6a:bf: e5:97:1a:84:53:86:ef:cb:3d:02:80:6f:2b:a3:ea:c7:5c:9b: 24:e1:08:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPDg5CeVQHdUEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MDNlOTU3MmItMTE5Ni00ZWQyLWJhNDEtNWM1ODI4MmI1ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8kgUF8oPzh/CHWVxXmObQrUHgCSoQ8EB6jd gXZ0leS3AnCGbCEQPesa0o2HuhrnbVkFbnCumANEH8WoBm0MebPiUuCnuVpDAT8a /Y2WImK3dT7QQRmCdnIMxWhvXT/qyiQZbycPuMyEbRCRgXB4PqjkrrNz+7NDYCpJ eg4octxwhIDEIFM5QdsVCPyViRTejsb0yIyB42idEtSOGChw4PctdlKls/lOob8b UZkOYDfmNJSNyPCdnAUbOBnxZVLk7U4dkM+9eBdTS/mqUL4ENqj0TnD9sJXeWll3 R8t3oedEEAoY4uyj2Ok3UW4AgFWFTXbEzVb31W+1dKhmXw+OBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6T3XjD3a2O6p956wP2302frzQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYTdhOTAwY2UtMjNlZS0z M2IwLTg1Y2UtMzIxMDZjZmQ5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnq1uwMnc13F3/6Rg7RVzeRRFRDhNVcbAwVhyxP66iSpY782B/t9Re7 LySLeD54l9s2vJeN6TEY9ArD1sF6aTzNuSOeOjv0azYDSRFRaTerGPfRn4FWOSP9 xpG3V3TXNvIueSpFTsbnbAJzpgOPUPwf6gF8f2l8L+zwUuvth2iLjlyXwoY7hNGi RHqOcFbUJArHTXvUelv1lSDrXsVWZdVkBKPLeGAj1V2fqamjh6/rJ5EuKR8dva5r BvTRlxrfneGW/ZH+EezRfBxwxuZX86vfV/uDcPPJ3GKxmEGwv+DUBh9KuCouOZ5q v+WXGoRThu/LPQKAbyuj6sdcmyThCEo= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:25 2026 by rpki-client