$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa File: b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa (raw, json) Hash identifier: 4djkZEJnyjyjNSvQDbpbvOXrYHOvGlrMiEd4IzcFQOM= Subject key identifier: E2:E2:2E:1F:00:FE:06:FE:B7:9B:C3:CD:55:83:A3:DC:B2:21:91:D6 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584B8917803E83D3112408895E00 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 153371 IP address blocks: 23.130.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:80:3e:83:d3:11:24:08:89:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=c5639719-c741-4111-bed3-e0fe8ca98eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:12:b8:77:62:db:6a:1a:83:ef:b6:0a:cd: a8:70:0c:04:6b:22:35:c7:91:b7:ab:c2:51:6c:cd: 91:23:63:4a:0c:8d:f5:e2:f8:df:13:48:ed:54:ef: 80:0b:dc:73:cd:2e:98:be:7c:23:b6:4f:6c:40:ee: c1:49:0e:36:7d:e6:f9:6c:d1:1d:4d:ab:af:2a:ff: a0:00:9b:70:6b:ae:a7:da:4c:be:6a:c0:d6:aa:af: 7f:78:5f:59:9f:e5:bf:67:47:09:32:79:80:d0:ed: 32:eb:a8:49:3b:83:74:b9:d6:67:2a:e6:d1:22:61: 20:28:38:49:d8:4c:12:6e:a0:e5:b6:cf:2b:a1:8d: e7:b0:6f:7e:3a:2d:57:52:f4:9f:0d:6c:54:05:ae: 3d:20:ad:3c:fb:28:3f:e4:61:af:28:61:1b:35:1f: 1b:ec:6e:84:d5:7a:c7:bc:2f:4c:7d:e6:fc:88:06: 50:39:8e:35:fd:bd:b3:cb:ce:7c:93:f8:b0:b9:67: 5a:5d:02:30:a0:40:55:e7:0e:b2:35:2a:01:0c:69: 0c:20:60:ea:ad:af:2e:ce:f6:41:59:60:7a:7a:33: a4:06:b5:fb:90:36:96:c3:7b:e1:ef:c7:7c:52:47: ec:5a:5a:7e:01:9c:60:e8:1e:25:0b:7b:38:46:69: 9a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E2:2E:1F:00:FE:06:FE:B7:9B:C3:CD:55:83:A3:DC:B2:21:91:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 23.130.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:2c:99:c1:8e:eb:0d:9e:68:d0:17:92:22:34:e0:f8:f2:7c: 7f:ef:0a:8f:df:09:cb:61:ef:28:b1:0d:6a:9c:e8:74:82:19: 12:25:0b:fb:d9:54:f0:e9:29:01:a4:d5:b0:34:38:57:44:04: 0a:68:6b:a4:cb:dd:1c:a0:3e:39:4d:30:82:d0:7c:4e:2f:12: ea:66:cf:8e:b6:59:93:9b:db:16:92:32:24:32:a5:ef:19:dd: f5:e6:64:56:ab:95:2e:1c:63:d1:56:1e:95:6e:d7:55:84:74: d3:3a:7c:8c:15:45:c3:29:92:80:c7:fa:cf:04:cd:fd:06:67: ec:b4:1c:f3:53:e2:1a:91:c6:26:ee:c2:f3:ee:96:ff:1e:0f: 76:3b:28:d5:77:08:08:77:37:be:9a:13:26:9d:fd:94:83:81: ec:d3:e4:c8:ae:5d:0e:2d:ce:b1:19:82:32:63:de:5a:23:2a: 60:6f:42:91:82:27:dc:ba:d2:d7:f9:65:31:a4:47:31:f6:5d: 79:bd:19:78:00:4e:d4:5a:43:4b:af:c9:09:e8:0c:38:5c:fb: ea:cc:a9:b0:91:80:89:d1:05:af:bd:b2:9e:cb:3b:cf:e8:e0: e9:c6:ff:fc:ef:39:2b:00:71:d4:5e:52:2a:b9:34:5e:70:1f: a4:74:72:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4A+g9MRJAiJXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YzU2Mzk3MTktYzc0MS00MTExLWJlZDMtZTBmZThjYTk4ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/MSuHdi22oag++2Cs2ocAwEayI1x5G3q8JR bM2RI2NKDI314vjfE0jtVO+AC9xzzS6Yvnwjtk9sQO7BSQ42feb5bNEdTauvKv+g AJtwa66n2ky+asDWqq9/eF9Zn+W/Z0cJMnmA0O0y66hJO4N0udZnKubRImEgKDhJ 2EwSbqDlts8roY3nsG9+Oi1XUvSfDWxUBa49IK08+yg/5GGvKGEbNR8b7G6E1XrH vC9Mfeb8iAZQOY41/b2zy858k/iwuWdaXQIwoEBV5w6yNSoBDGkMIGDqra8uzvZB WWB6ejOkBrX7kDaWw3vh78d8UkfsWlp+AZxg6B4lC3s4RmmaPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLiLh8A/gb+t5vDzVWDo9yyIZHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvYjU0ODg4ZTgtODE1Ni0z ZDg3LTgzZTEtMmEwZGFkNmZkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEsmcGO6w2eaNAXkiI04PjyfH/vCo/fCcth7yixDWqc6HSCGRIlC/vZ VPDpKQGk1bA0OFdEBApoa6TL3RygPjlNMILQfE4vEupmz462WZOb2xaSMiQype8Z 3fXmZFarlS4cY9FWHpVu11WEdNM6fIwVRcMpkoDH+s8Ezf0GZ+y0HPNT4hqRxibu wvPulv8eD3Y7KNV3CAh3N76aEyad/ZSDgezT5MiuXQ4tzrEZgjJj3lojKmBvQpGC J9y60tf5ZTGkRzH2XXm9GXgATtRaQ0uvyQnoDDhc++rMqbCRgInRBa+9sp7LO8/o 4OnG//zvOSsAcdReUiq5NF5wH6R0cpo= -----END CERTIFICATE-----Generated at Wed Nov 5 07:20:55 2025 by rpki-client