$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa File: c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa (raw, json) Hash identifier: ujY4WHYLgaRDR8BNROQdz9Pd00SEGb/Tc/fYui+ArUc= Subject key identifier: 36:BF:7C:B5:23:01:7E:54:BC:24:12:A5:61:50:30:16:50:A7:98:63 Certificate issuer: /CN=058ef11e-32ea-4ce9-8998-b435c442a300 Certificate serial: 010D0C9F4328584AA3611153ADEE5D56C5A30B40 Authority key identifier: 1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa Signing time: Sun 20 Jul 2025 01:00:50 +0000 ROA not before: Sun 20 Jul 2025 01:00:50 +0000 ROA not after: Sat 18 Oct 2025 01:00:50 +0000 asID: 23013 IP address blocks: 23.128.20.0/24 maxlen: 32 216.180.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a3:61:11:53:ad:ee:5d:56:c5:a3:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058ef11e-32ea-4ce9-8998-b435c442a300 Validity Not Before: Jul 20 01:00:50 2025 GMT Not After : Oct 18 01:00:50 2025 GMT Subject: CN=da479b5b-58f1-4355-aee2-db117147f447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f2:06:bf:69:63:90:28:60:01:1e:da:f5:e3: de:69:a9:57:d5:01:c0:ea:bd:01:e1:2d:d6:be:aa: cf:44:e7:1b:7c:2a:a0:f7:24:0f:27:e4:4d:e1:6d: b4:9c:42:ec:68:96:3b:10:33:6e:45:1d:ff:22:9c: 9b:09:95:48:9a:e8:7c:91:09:0a:88:62:d9:4a:96: 78:5f:a5:af:48:10:76:c6:55:21:3c:60:2a:f5:f1: ae:10:55:89:7a:56:5a:b3:2a:d2:42:7a:5b:fb:12: 59:4e:70:55:51:67:05:e7:6f:94:61:84:45:78:c7: 0e:f3:88:d9:3a:a1:88:ed:85:44:32:5e:e3:29:d4: e6:d5:f2:46:a0:ac:ea:64:49:b2:65:c0:6f:e3:7f: 8e:c4:27:29:cd:00:2f:87:32:a3:05:6f:2b:7c:57: 0d:c3:73:44:c4:67:cf:a6:cd:65:df:d8:99:e6:76: c5:af:91:2b:eb:71:a2:97:6c:1b:ea:7d:00:d2:a8: 46:f3:e2:47:75:20:67:83:fa:94:60:99:e2:fa:78: 43:e4:31:82:c8:a6:54:fd:b1:8d:c9:dd:b0:0f:92: 9f:38:ba:9a:2b:b3:fe:67:b2:68:f5:19:c5:be:be: c1:6d:b2:27:44:13:5d:50:56:61:69:8b:0a:9a:a8: 75:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BF:7C:B5:23:01:7E:54:BC:24:12:A5:61:50:30:16:50:A7:98:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl X509v3 Authority Key Identifier: keyid:1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer sbgp-ipAddrBlock: critical IPv4: 23.128.20.0/24 216.180.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:64:20:1e:7e:6d:3f:17:c5:3d:3d:95:da:d0:b1:9b:37:6f: 40:5e:ad:f2:64:a0:e5:73:c1:25:4f:11:48:56:d2:de:ea:06: 8d:94:d4:78:16:d7:aa:63:b4:cb:fc:53:54:be:5a:73:7a:df: 09:cd:47:77:86:ec:26:3a:06:17:93:8c:a2:04:f8:da:bf:86: 86:1a:5f:d6:e2:9b:17:b1:cf:63:4e:fc:ec:fc:4c:97:5d:a9: e2:c2:a0:d7:ed:aa:04:aa:26:e0:5a:76:85:7d:a6:06:c0:fd: 5f:93:40:9e:2c:73:a6:11:ec:14:fd:5d:d0:9a:7d:9c:6f:a7: 22:b7:45:df:ad:30:ae:95:ae:1c:24:3e:b9:91:5b:d4:03:87: 46:b9:52:22:1e:9c:04:bd:1b:d9:aa:67:ae:a7:ec:a8:e4:d8: c8:b8:38:2a:0f:be:2b:06:d7:82:e8:27:66:c7:66:e9:01:3e: 05:09:71:9c:29:94:8b:ec:eb:f7:39:aa:e4:7e:1a:c1:4a:17: 87:8d:c9:c3:5d:e0:6e:7e:11:cb:09:05:a5:f1:ba:55:8e:59: 7c:30:8e:b7:97:e2:49:a4:4d:61:fe:00:cf:19:25:b9:55:25: 07:1b:ca:7b:35:d5:6e:9e:ae:28:66:55:70:ae:ed:e4:c1:1f: c5:ec:19:85 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqjYRFTre5dVsWjC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4ZWYxMWUtMzJlYS00Y2U5LTg5OTgtYjQzNWM0NDJh MzAwMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk ZGE0NzliNWItNThmMS00MzU1LWFlZTItZGIxMTcxNDdmNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PIGv2ljkChgAR7a9ePeaalX1QHA6r0B4S3W vqrPROcbfCqg9yQPJ+RN4W20nELsaJY7EDNuRR3/IpybCZVImuh8kQkKiGLZSpZ4 X6WvSBB2xlUhPGAq9fGuEFWJelZasyrSQnpb+xJZTnBVUWcF52+UYYRFeMcO84jZ OqGI7YVEMl7jKdTm1fJGoKzqZEmyZcBv43+OxCcpzQAvhzKjBW8rfFcNw3NExGfP ps1l39iZ5nbFr5Er63Gil2wb6n0A0qhG8+JHdSBng/qUYJni+nhD5DGCyKZU/bGN yd2wD5KfOLqaK7P+Z7Jo9RnFvr7BbbInRBNdUFZhaYsKmqh1cwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDa/fLUjAX5UvCQSpWFQMBZQp5hjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNThl ZjExZS0zMmVhLTRjZTktODk5OC1iNDM1YzQ0MmEzMDAvYzA2NjFhZDYtMjAzZC0z NmY0LTg2MmEtMTAxMGY1YzFkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDU4ZWYxMWUtMzJlYS00Y2U5LTg5 OTgtYjQzNWM0NDJhMzAwLzA1OGVmMTFlLTMyZWEtNGNlOS04OTk4LWI0MzVjNDQy YTMwMC5jcmwwHwYDVR0jBBgwFoAUGk8gGrgsIcOmTZ21uA8FILJO7NMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNThlZjExZS0zMmVhLTRjZTktODk5OC1iNDM1 YzQ0MmEzMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4AUAwQC 2LR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIBkIB5+bT8XxT09ldrQsZs3b0BerfJkoOVzwSVPEUhW0t7q Bo2U1HgW16pjtMv8U1S+WnN63wnNR3eG7CY6BheTjKIE+Nq/hoYaX9bimxexz2NO /Oz8TJddqeLCoNftqgSqJuBadoV9pgbA/V+TQJ4sc6YR7BT9XdCafZxvpyK3Rd+t MK6VrhwkPrmRW9QDh0a5UiIenAS9G9mqZ66n7Kjk2Mi4OCoPvisG14LoJ2bHZukB PgUJcZwplIvs6/c5quR+GsFKF4eNycNd4G5+EcsJBaXxulWOWXwwjreX4kmkTWH+ AM8ZJblVJQcbyns11W6erihmVXCu7eTBH8XsGYU= -----END CERTIFICATE-----Generated at Sun Aug 10 04:15:28 2025 by rpki-client