$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa File: 9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa (raw, json) Hash identifier: yxzP5YmiRLDGv/6MauEo5E1qkh7reQydYl3FmsC71RQ= Subject key identifier: 58:FC:EF:C6:C8:CF:1B:E1:BE:88:C3:B2:E8:E3:8C:2F:3F:5A:07:A0 Certificate issuer: /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Certificate serial: 010D0C9F4328584DC4F6675FC2B2E17E01A1B700 Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa Signing time: Fri 08 May 2026 21:16:29 +0000 ROA not before: Fri 08 May 2026 21:16:29 +0000 ROA not after: Thu 06 Aug 2026 21:16:29 +0000 asID: 16509 IP address blocks: 130.248.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c4:f6:67:5f:c2:b2:e1:7e:01:a1:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Validity Not Before: May 8 21:16:29 2026 GMT Not After : Aug 6 21:16:29 2026 GMT Subject: CN=78201d84-ae2e-41b2-9419-af6943c8f515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:81:83:9d:31:c7:db:c6:b3:66:63:36:ad:98: fe:e4:3f:ae:fb:55:48:e8:1e:81:1e:6a:22:d3:d1: 10:fb:72:b4:99:1b:96:49:ec:28:b1:65:fc:e9:9f: ea:ff:33:1b:4d:a2:fa:99:94:ca:08:76:a3:0c:c9: 14:d6:5b:d4:7c:53:c6:75:d5:48:27:b5:10:62:f7: dc:3c:b7:8d:0e:8d:d8:9b:42:46:01:72:1f:0e:e7: 26:29:dd:ca:72:07:fe:89:c5:96:94:52:8b:1b:6f: 3b:b5:0a:7d:22:46:f4:f7:50:b6:c1:a8:e1:e3:29: fe:59:b3:60:1b:6f:67:8c:cb:1f:28:37:b8:45:16: 33:8b:74:1b:e4:e8:09:15:ac:29:37:45:bf:c3:7a: b4:9a:29:88:5f:b6:8e:fa:fd:56:c6:16:fc:e0:1c: 83:7e:9d:f5:73:d6:68:51:d4:e8:9d:51:16:e8:22: 43:72:79:ed:32:b1:ae:6e:bc:24:43:67:81:a9:f4: 81:70:eb:46:d8:26:6d:a7:a7:6c:df:6b:d5:d7:b5: d8:3d:15:d4:99:50:c4:3a:33:18:0b:ea:22:37:84: f8:fb:73:c8:46:a9:68:6c:02:cc:5f:58:d1:7c:2e: b8:e1:68:15:46:b3:ae:35:a8:da:36:61:b5:f0:2d: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FC:EF:C6:C8:CF:1B:E1:BE:88:C3:B2:E8:E3:8C:2F:3F:5A:07:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl X509v3 Authority Key Identifier: keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer sbgp-ipAddrBlock: critical IPv4: 130.248.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:68:cd:72:98:b9:34:87:d0:e0:f3:90:51:06:a4:60:df:5f: 75:ea:d0:42:50:25:2e:a8:c5:fd:1b:66:62:84:f7:74:c4:79: 1c:cd:0e:80:e2:f9:fa:3e:02:c0:2c:06:a8:98:83:79:e3:ba: fb:c0:34:5d:e6:e2:04:83:c8:70:8c:0f:e2:43:56:fa:cb:0a: 91:db:fd:ca:c5:60:06:56:e1:fb:f5:50:d6:fb:49:f4:14:63: 2a:9f:fd:2d:b8:28:0c:f7:ed:02:32:3a:38:82:06:b1:0d:70: 21:19:81:0d:72:7f:50:48:99:2f:81:a8:fa:a1:a7:ef:d3:76: b3:60:92:c3:0b:57:f6:ce:37:7d:74:c1:e0:07:ce:f6:8d:49: d9:31:0a:68:b2:e0:b6:8c:66:4f:aa:17:d1:ea:e1:c8:02:f8: 23:94:3e:8b:9a:ea:b0:18:3d:e5:5d:77:1e:7d:20:93:12:2f: da:7b:b9:a3:be:a6:6f:2f:f0:89:ff:f5:6b:47:35:73:a7:49: 93:a4:54:a3:a9:68:d5:6a:6d:93:64:d4:76:0a:28:ba:43:e2: 81:64:d9:44:f0:92:1a:74:9e:a9:be:3a:86:b3:5d:0c:96:6c: 02:37:4b:8d:50:d6:20:f8:ea:cd:4c:9f:11:10:c3:c2:0c:ca: 9c:45:ad:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3E9mdfwrLhfgGhtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx MmJkMB4XDTI2MDUwODIxMTYyOVoXDTI2MDgwNjIxMTYyOVowLzEtMCsGA1UEAxMk NzgyMDFkODQtYWUyZS00MWIyLTk0MTktYWY2OTQzYzhmNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4GDnTHH28azZmM2rZj+5D+u+1VI6B6BHmoi 09EQ+3K0mRuWSewosWX86Z/q/zMbTaL6mZTKCHajDMkU1lvUfFPGddVIJ7UQYvfc PLeNDo3Ym0JGAXIfDucmKd3Kcgf+icWWlFKLG287tQp9Ikb091C2wajh4yn+WbNg G29njMsfKDe4RRYzi3Qb5OgJFawpN0W/w3q0mimIX7aO+v1Wxhb84ByDfp31c9Zo UdTonVEW6CJDcnntMrGubrwkQ2eBqfSBcOtG2CZtp6ds32vV17XYPRXUmVDEOjMY C+oiN4T4+3PIRqlobALMX1jRfC644WgVRrOuNajaNmG18C14cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj878bIzxvhvojDsujjjC8/WgegMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0 MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvOTg0OWRkYWEtODUxOS0z YjdjLWJiYzUtYWY2NTZiMmY4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1 MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz ZWUyNTEyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ozXKYuTSH0ODzkFEGpGDfX3Xq0EJQJS6oxf0bZmKE93TEeRzNDoDi +fo+AsAsBqiYg3njuvvANF3m4gSDyHCMD+JDVvrLCpHb/crFYAZW4fv1UNb7SfQU Yyqf/S24KAz37QIyOjiCBrENcCEZgQ1yf1BImS+BqPqhp+/TdrNgksMLV/bON310 weAHzvaNSdkxCmiy4LaMZk+qF9Hq4cgC+COUPoua6rAYPeVddx59IJMSL9p7uaO+ pm8v8In/9WtHNXOnSZOkVKOpaNVqbZNk1HYKKLpD4oFk2UTwkhp0nqm+OoazXQyW bAI3S41Q1iD46s1MnxEQw8IMypxFrfQ= -----END CERTIFICATE-----Generated at Wed May 13 07:45:58 2026 by rpki-client