$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/1ace1a1d-7678-3904-8d91-da2281e92075.roa File: 1ace1a1d-7678-3904-8d91-da2281e92075.roa (raw, json) Hash identifier: NVEllR55WKb2NZhnT4u7yfbSZAXAcNB2ahaU6oW2MPg= Subject key identifier: 97:E4:55:F0:11:1F:2D:DA:4C:DA:87:23:3E:76:AD:C5:03:6D:03:8F Certificate issuer: /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Certificate serial: 010D0C9F4328584F497470F96D09A78E94F6BB00 Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/1ace1a1d-7678-3904-8d91-da2281e92075.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 130.248.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:70:f9:6d:09:a7:8e:94:f6:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc5ed966-4a00-4545-8f2c-b4b23c7c46eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:82:8d:2e:07:7f:f6:76:04:85:f4:fd:55: 04:c1:99:64:6e:c3:4e:fa:b2:c4:af:e9:9c:9a:bc: c8:fe:da:fc:ee:3e:d3:16:f2:5c:fc:0a:6d:45:fb: 41:99:f6:b6:1a:eb:ee:28:05:a9:5f:04:e0:14:69: 91:d9:0e:30:b6:49:35:04:ca:65:e1:bb:37:44:31: 8a:a9:73:6f:68:d5:e8:a4:03:86:54:f4:e0:42:d8: 90:a2:04:4d:d0:c0:1a:67:67:ff:5f:01:ac:0e:aa: a6:38:b0:fc:80:9c:53:1d:d5:73:f4:b5:f8:11:f9: 57:85:ee:96:d2:b9:7e:48:38:8f:8f:c0:aa:66:2a: ba:3d:ca:ed:77:ee:b1:03:7b:ae:27:26:55:e0:6f: da:bc:23:9e:b2:d6:be:b5:fd:9e:e1:a3:9a:c0:20: 66:1a:9d:65:6f:dc:3c:8f:07:18:ab:2d:9e:f9:49: a1:1b:6a:92:dd:71:92:a7:7a:18:a7:3b:cc:c8:62: 8c:b6:ac:c7:5b:65:a5:b2:be:18:31:a0:91:c6:78: 63:c8:e0:2a:d0:a9:bd:72:e2:c3:99:58:d1:33:7c: c8:ff:d9:49:f9:32:77:0e:cb:2f:fd:32:84:bf:a5: 51:c3:22:cf:89:b3:88:67:a3:b8:0e:3c:c7:53:45: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E4:55:F0:11:1F:2D:DA:4C:DA:87:23:3E:76:AD:C5:03:6D:03:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/1ace1a1d-7678-3904-8d91-da2281e92075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl X509v3 Authority Key Identifier: keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer sbgp-ipAddrBlock: critical IPv4: 130.248.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:14:22:cf:62:a9:ec:eb:d3:4e:18:38:5d:4c:3b:35:98:30: 56:e8:01:d6:54:7c:9d:05:70:73:bf:b0:24:bd:32:51:d6:95: 06:68:79:b2:26:ef:6e:db:cc:50:43:e1:a2:0f:7d:a9:f0:a9: 0a:80:58:b0:ec:5f:d7:aa:25:67:48:29:1f:45:e0:60:33:f8: bc:82:b5:40:9b:0e:43:39:ec:3a:1e:3a:18:db:d0:03:87:6a: fe:ea:3b:94:0f:8b:1f:ab:bb:62:05:2d:e2:a9:21:13:e2:c2: bc:ff:11:fe:a6:83:55:ce:1a:c6:06:c5:87:32:7c:89:ec:25: 53:ae:3d:21:e0:23:e3:aa:74:9e:8d:13:84:8a:5d:a0:5b:91: 43:1f:6d:40:98:24:a4:0a:eb:da:68:4c:02:29:a1:96:84:0b: 42:f4:dc:e4:da:04:01:d0:18:83:55:a2:e6:99:4b:c9:8b:16: 3b:c6:75:29:c8:22:61:0c:8d:cc:44:95:06:50:49:4d:55:8e: 39:f5:ef:f4:73:61:ab:31:26:82:ee:f7:f7:ac:8e:df:7b:07: 87:7f:f3:0d:06:36:91:f5:f2:bc:b5:fa:1a:4e:90:54:6a:6a: 1f:3f:e6:08:8e:c9:92:a7:d5:cd:76:1e:db:9e:3d:0c:98:81: e1:cc:7d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHD5bQmnjpT2uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx MmJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM1ZWQ5NjYtNGEwMC00NTQ1LThmMmMtYjRiMjNjN2M0NmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT6CjS4Hf/Z2BIX0/VUEwZlkbsNO+rLEr+mc mrzI/tr87j7TFvJc/AptRftBmfa2GuvuKAWpXwTgFGmR2Q4wtkk1BMpl4bs3RDGK qXNvaNXopAOGVPTgQtiQogRN0MAaZ2f/XwGsDqqmOLD8gJxTHdVz9LX4EflXhe6W 0rl+SDiPj8CqZiq6Pcrtd+6xA3uuJyZV4G/avCOesta+tf2e4aOawCBmGp1lb9w8 jwcYqy2e+UmhG2qS3XGSp3oYpzvMyGKMtqzHW2Wlsr4YMaCRxnhjyOAq0Km9cuLD mVjRM3zI/9lJ+TJ3Dssv/TKEv6VRwyLPibOIZ6O4DjzHU0VgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfkVfARHy3aTNqHIz52rcUDbQOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0 MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvMWFjZTFhMWQtNzY3OC0z OTA0LThkOTEtZGEyMjgxZTkyMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1 MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz ZWUyNTEyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvipMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMUIs9iqezr004YOF1MOzWYMFboAdZUfJ0FcHO/sCS9MlHWlQZoebIm 727bzFBD4aIPfanwqQqAWLDsX9eqJWdIKR9F4GAz+LyCtUCbDkM57DoeOhjb0AOH av7qO5QPix+ru2IFLeKpIRPiwrz/Ef6mg1XOGsYGxYcyfInsJVOuPSHgI+OqdJ6N E4SKXaBbkUMfbUCYJKQK69poTAIpoZaEC0L03OTaBAHQGINVouaZS8mLFjvGdSnI ImEMjcxElQZQSU1Vjjn17/RzYasxJoLu9/esjt97B4d/8w0GNpH18ry1+hpOkFRq ah8/5giOyZKn1c12HtuePQyYgeHMfR4= -----END CERTIFICATE-----Generated at Tue Oct 6 01:34:19 2026 by rpki-client