$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa File: b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa (raw, json) Hash identifier: SQkm34fzqIjG0+guGDMqbjCX/HEGb6fqaHyDPOXJ7Cg= Subject key identifier: BD:4C:44:CA:A6:B4:19:10:DE:C3:C7:D9:DF:5A:D7:65:30:6A:DD:51 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584AA85BBCD298BD77BD55CDC260 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 153371 IP address blocks: 23.130.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:bc:d2:98:bd:77:bd:55:cd:c2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=cdee1818-c852-4404-a138-703a78b79831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:62:0d:43:83:36:ac:9a:0d:e9:74:72:89: d5:98:70:e0:31:f9:1a:89:fa:d1:00:43:30:b1:65: 91:b0:70:ad:32:0a:75:37:99:57:fc:44:de:5a:0a: 6f:63:f1:39:62:a0:05:64:f9:16:cb:d0:aa:d2:87: 29:13:ae:09:48:95:db:1a:7a:5f:86:fe:fe:f7:08: a2:c6:93:56:8e:ed:65:e1:18:85:25:c4:55:28:19: b7:51:1e:e2:67:8f:e7:a3:e5:50:ae:4e:e8:42:f7: b9:58:91:1b:fe:4d:cb:1a:cc:1e:d7:99:3e:53:3d: 00:21:51:97:cb:d9:78:b3:1f:9e:a8:fb:f3:d4:ab: be:a8:f1:8e:fe:fc:d3:ad:e0:79:07:33:55:76:7e: 1b:a5:05:44:73:ea:7b:0d:55:b6:2d:86:e5:f9:7c: e5:e7:59:d1:35:26:37:0f:cc:c0:0a:45:8e:8e:3c: 4e:8e:40:de:4e:06:1d:8b:27:f9:04:f4:89:ca:33: 88:0c:a7:f4:db:04:1b:4b:3a:25:85:f4:b6:55:61: f9:35:c1:e3:47:90:46:36:6a:6c:19:3a:ad:61:64: 30:e7:a5:87:9b:28:2f:ac:7f:1b:42:94:a7:13:ae: 39:a4:2d:18:79:06:23:a4:8a:dc:c8:40:cd:9a:31: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4C:44:CA:A6:B4:19:10:DE:C3:C7:D9:DF:5A:D7:65:30:6A:DD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 23.130.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6f:e5:40:4e:f1:a9:e4:52:3a:4d:54:53:9d:87:44:3d:c4: cb:3a:62:1d:bd:44:06:14:7e:28:bd:39:9c:67:34:85:54:2a: 0b:d9:00:89:97:c5:f1:96:ae:f3:f5:34:86:79:ad:ba:94:22: 8a:ef:f5:d9:16:96:18:20:aa:e1:ba:01:40:ea:db:b4:55:d3: 2d:5a:3b:c3:c2:e3:57:28:be:a4:f0:3f:8f:4f:64:11:64:a2: de:8d:92:35:f5:3e:2b:ac:b9:58:b6:1f:cf:43:b1:4f:1b:c2: 95:96:aa:28:67:97:a5:33:4d:24:89:32:02:15:92:90:97:0e: 8f:4f:be:50:c4:ab:9c:ea:38:ce:f5:f7:d6:70:42:c2:f9:a9: c3:bb:e3:79:4b:e5:fd:7d:f8:fa:0f:b7:f9:16:ce:54:18:18: f5:d1:30:32:70:69:c3:12:46:2d:1e:95:80:61:5e:7b:c7:f6: ea:49:82:02:d9:68:a0:b7:4f:21:f0:cf:5b:e9:5e:a9:87:6d: 02:2b:b7:06:1e:82:3a:e2:5b:bf:39:cb:62:5a:9a:71:e7:f6: 38:a3:13:3c:a2:40:d8:a8:11:ca:28:a2:0a:bc:2c:f9:d1:cd: c1:df:84:dc:fe:c4:34:f1:09:35:ec:56:33:9b:ef:7e:b4:c2: f2:25:e8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7zSmL13vVXNwmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk Y2RlZTE4MTgtYzg1Mi00NDA0LWExMzgtNzAzYTc4Yjc5ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovxiDUODNqyaDel0conVmHDgMfkaifrRAEMw sWWRsHCtMgp1N5lX/ETeWgpvY/E5YqAFZPkWy9Cq0ocpE64JSJXbGnpfhv7+9wii xpNWju1l4RiFJcRVKBm3UR7iZ4/no+VQrk7oQve5WJEb/k3LGswe15k+Uz0AIVGX y9l4sx+eqPvz1Ku+qPGO/vzTreB5BzNVdn4bpQVEc+p7DVW2LYbl+Xzl51nRNSY3 D8zACkWOjjxOjkDeTgYdiyf5BPSJyjOIDKf02wQbSzolhfS2VWH5NcHjR5BGNmps GTqtYWQw56WHmygvrH8bQpSnE645pC0YeQYjpIrcyEDNmjHNfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1MRMqmtBkQ3sPH2d9a12Uwat1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvYjU0ODg4ZTgtODE1Ni0z ZDg3LTgzZTEtMmEwZGFkNmZkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBv5UBO8ankUjpNVFOdh0Q9xMs6Yh29RAYUfii9OZxnNIVUKgvZAImX xfGWrvP1NIZ5rbqUIorv9dkWlhggquG6AUDq27RV0y1aO8PC41covqTwP49PZBFk ot6NkjX1PiusuVi2H89DsU8bwpWWqihnl6UzTSSJMgIVkpCXDo9PvlDEq5zqOM71 99ZwQsL5qcO743lL5f19+PoPt/kWzlQYGPXRMDJwacMSRi0elYBhXnvH9upJggLZ aKC3TyHwz1vpXqmHbQIrtwYegjriW785y2JamnHn9jijEzyiQNioEcooogq8LPnR zcHfhNz+xDTxCTXsVjOb7360wvIl6GE= -----END CERTIFICATE-----Generated at Wed Aug 6 12:40:30 2025 by rpki-client