$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa File: 45b4cca8-304a-3829-8684-121363defde7.roa (raw, json) Hash identifier: +BaOxAhyGu9KXYbf6AglBz+Jltqlec3d4KIpwwPZ1FM= Subject key identifier: 30:DA:D2:3F:A3:E5:B8:AB:79:D8:B8:7B:74:CC:1E:85:41:BE:3F:1F Certificate issuer: /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Certificate serial: 010D0C9F4328584ADECBBD2D06D8371102790B80 Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 130.248.141.0/24 maxlen: 24 130.248.158.0/24 maxlen: 24 130.248.164.0/24 maxlen: 24 130.248.167.0/24 maxlen: 24 130.248.199.0/24 maxlen: 24 130.248.202.0/24 maxlen: 24 130.248.203.0/24 maxlen: 24 130.248.224.0/24 maxlen: 24 130.248.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:bd:2d:06:d8:37:11:02:79:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=33a8feed-808f-44e9-abc2-8bb3966c9bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:32:3a:8e:c8:f3:20:df:82:af:9a:d5:3a:fa: f3:4a:6b:2b:33:17:7f:cb:75:9c:b5:a5:16:17:1e: da:76:07:bf:7c:5c:3f:65:5d:0e:c7:d1:db:b5:b5: fd:73:5e:3b:13:3c:e8:b2:f6:9a:93:43:91:04:b1: a3:39:ab:b5:b4:85:35:fb:a7:1f:77:42:49:e4:55: 09:98:2c:c3:a3:7d:63:69:66:da:a5:a6:89:3c:21: fc:43:23:24:92:8f:9c:c2:9b:76:c9:d6:74:79:6a: d6:0c:ef:d5:39:62:4c:67:5d:d8:f0:b3:10:01:b3: 12:a2:a4:9d:12:50:32:18:3e:b3:49:4d:8a:51:d9: f8:80:43:f5:a8:21:12:7c:fe:92:91:96:87:c4:4c: 65:a3:0c:99:16:34:1d:76:c7:e2:76:20:3c:3a:11: d1:88:ac:ce:08:37:e2:7e:f9:cb:16:01:41:c0:16: eb:cd:aa:9d:88:64:17:9d:a9:18:70:59:9d:5a:54: 2a:c8:79:40:82:c4:ca:e6:2f:42:c4:6c:c3:e0:c7: ab:d8:94:64:87:5b:5f:15:e3:db:ac:9d:d1:b8:f1: 30:08:51:d1:8c:20:18:4b:8b:5a:9b:bb:bb:74:b1: 08:f3:18:6e:26:01:8d:eb:04:20:b5:c8:70:30:1a: c1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DA:D2:3F:A3:E5:B8:AB:79:D8:B8:7B:74:CC:1E:85:41:BE:3F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/45b4cca8-304a-3829-8684-121363defde7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl X509v3 Authority Key Identifier: keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer sbgp-ipAddrBlock: critical IPv4: 130.248.141.0/24 130.248.158.0/24 130.248.164.0/24 130.248.167.0/24 130.248.199.0/24 130.248.202.0/23 130.248.224.0/24 130.248.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:34:50:22:35:49:1e:5a:c5:11:71:eb:ec:36:a4:f4:40:c7: 99:2c:d6:a7:01:99:1a:f3:ad:b5:e7:ba:13:9e:5c:5a:ef:99: 81:97:d7:5b:40:bb:35:45:e2:67:a5:16:47:68:45:3d:f1:81: c8:60:cb:fc:18:9c:56:51:5e:6a:52:de:9e:18:c7:22:9a:73: e1:d9:65:d4:03:dc:a5:25:9b:f7:38:d3:84:66:0f:5e:e4:f6: fd:00:ed:02:0a:e4:94:21:06:af:9d:80:24:71:d3:c3:dd:ba: 54:68:cd:1b:7e:82:9e:bf:c0:b8:fd:89:bc:10:7d:11:6a:60: 8f:b2:34:00:5d:0c:ac:55:a9:16:92:ca:72:d4:7e:cf:4c:1a: a0:af:28:01:d7:f0:46:21:48:b7:cb:b2:7b:4e:ab:98:03:dc: c5:7c:3a:47:ab:f1:94:6a:4f:38:c9:49:27:6c:ca:2f:b8:be: 5a:aa:9d:da:a4:7f:4d:a0:bd:18:2a:52:1d:a4:80:e6:19:f3: 3e:85:2f:97:10:10:34:af:55:42:1f:36:2f:2c:b1:d7:81:7e: 86:46:6e:0d:f4:c1:25:3f:b6:b1:1f:4c:1b:eb:a4:26:c4:44: ec:f9:6d:a3:75:3c:e0:7d:d8:0e:d3:e0:f3:c4:f9:68:0e:e2: 9c:fc:58:f1 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWErey70tBtg3EQJ5C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx MmJkMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MzNhOGZlZWQtODA4Zi00NGU5LWFiYzItOGJiMzk2NmM5YmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDI6jsjzIN+Cr5rVOvrzSmsrMxd/y3WctaUW Fx7adge/fFw/ZV0Ox9HbtbX9c147Ezzosvaak0ORBLGjOau1tIU1+6cfd0JJ5FUJ mCzDo31jaWbapaaJPCH8QyMkko+cwpt2ydZ0eWrWDO/VOWJMZ13Y8LMQAbMSoqSd ElAyGD6zSU2KUdn4gEP1qCESfP6SkZaHxExlowyZFjQddsfidiA8OhHRiKzOCDfi fvnLFgFBwBbrzaqdiGQXnakYcFmdWlQqyHlAgsTK5i9CxGzD4Mer2JRkh1tfFePb rJ3RuPEwCFHRjCAYS4tam7u7dLEI8xhuJgGN6wQgtchwMBrBpQIDAQABo4IDfzCC A3swHQYDVR0OBBYEFDDa0j+j5biredi4e3TMHoVBvj8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0 MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvNDViNGNjYTgtMzA0YS0z ODI5LTg2ODQtMTIxMzYzZGVmZGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1 MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz ZWUyNTEyYmQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAgviNAwQA gvieAwQAgvikAwQAgvinAwQAgvjHAwQBgvjKAwQAgvjgAwQAgvjrMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AIA0UCI1SR5axRFx6+w2pPRAx5ks1qcBmRrzrbXnuhOeXFrvmYGX11tAuzVF4mel FkdoRT3xgchgy/wYnFZRXmpS3p4YxyKac+HZZdQD3KUlm/c404RmD17k9v0A7QIK 5JQhBq+dgCRx08PdulRozRt+gp6/wLj9ibwQfRFqYI+yNABdDKxVqRaSynLUfs9M GqCvKAHX8EYhSLfLsntOq5gD3MV8Oker8ZRqTzjJSSdsyi+4vlqqndqkf02gvRgq Uh2kgOYZ8z6FL5cQEDSvVUIfNi8ssdeBfoZGbg30wSU/trEfTBvrpCbEROz5baN1 POB92A7T4PPE+WgO4pz8WPE= -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:31 2025 by rpki-client