$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa File: b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa (raw, json) Hash identifier: O7YzguSfqRi57ceCO7Yfh5SZMfXCL3Krb8TFq0Ab5jE= Subject key identifier: 18:D8:CC:0B:85:62:0B:D6:4D:EF:A0:38:38:08:0D:B5:B2:9B:BE:74 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F43285849C904F6378B6555CA84CA6C00 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 153371 IP address blocks: 23.130.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:f6:37:8b:65:55:ca:84:ca:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=cd50bb18-1731-4a11-88e4-b6c140ab7ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:c3:e7:26:f7:6d:cf:10:c9:c7:01:d0:20: 73:21:8c:88:9d:fd:2b:c6:a9:8b:d7:99:51:a2:bb: 67:38:15:4e:a8:41:88:22:69:06:5b:38:e6:e5:18: 1c:93:68:0f:0d:e8:83:19:26:e9:13:05:0a:de:97: bf:2a:2b:f9:ca:98:8a:a7:b7:83:aa:ad:ff:41:5e: 15:3d:de:88:5e:de:e9:15:03:99:37:1d:02:8a:25: 38:fb:76:be:ec:c7:26:87:c9:6b:2f:8a:f5:4a:cf: 91:0c:2b:43:c3:6b:4a:fb:fc:68:e5:52:19:92:8f: 7d:bd:b9:ff:7c:b5:c1:86:9c:64:0d:44:86:fb:9b: 09:51:a5:b9:8e:02:b4:0b:31:6b:82:aa:ec:62:41: 23:8c:bc:dc:16:fd:29:04:50:51:1c:54:54:e0:50: f7:17:05:e1:b5:6d:de:4e:40:49:25:8e:76:51:73: 5a:59:56:57:1f:ac:cf:1a:9d:d5:64:5a:10:c6:7d: 92:64:62:24:7e:8a:56:96:e3:44:28:49:1a:b1:52: 6a:16:f8:ac:81:6a:f1:af:8f:5f:d2:56:51:fa:93: 80:45:e9:fb:29:60:35:de:ff:61:7a:b8:aa:9e:e3: b6:dd:98:55:7f:61:f4:73:1f:bf:1a:b2:e7:b9:ba: 05:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D8:CC:0B:85:62:0B:D6:4D:EF:A0:38:38:08:0D:B5:B2:9B:BE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 23.130.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:aa:9f:a5:0f:2c:7f:03:3a:fa:de:7c:94:d0:d5:64:90:07: 70:69:1d:cb:f5:23:df:ef:8e:27:40:fe:39:1c:a0:3b:97:93: 4a:de:a6:69:86:23:ef:81:3d:9d:ff:49:af:40:f3:d0:c7:3f: a9:50:39:b2:50:46:e1:3b:94:39:39:bb:b0:c7:e6:33:79:64: a7:0d:e7:a1:34:30:83:ad:76:73:6d:9c:d6:27:11:61:15:86: 58:2c:c4:2e:f5:92:27:1f:74:1a:6c:32:83:aa:66:c3:42:99: 14:86:2e:f5:4f:d3:80:44:9b:8f:2d:b5:9f:84:8d:52:3f:72: 92:60:24:52:68:88:30:77:af:1d:bb:1b:65:1a:a7:e9:1c:12: 92:73:90:2d:87:f7:59:b0:4f:38:b7:3e:ae:d6:30:ed:81:4f: 46:e2:bd:e1:b3:05:53:03:1a:2f:42:3f:07:7e:b7:9e:49:47: 62:56:95:13:28:74:ce:63:71:0a:0f:05:f9:e6:de:7a:93:e0: 6c:14:fb:46:1c:d0:bf:74:d6:f4:62:ed:0e:bf:a2:13:65:9a: 99:aa:ab:04:60:30:6b:f3:50:7d:e2:98:54:df:42:c6:82:8c: 80:40:f6:4d:68:59:ce:3e:1f:cc:34:6e:ed:5c:6a:b4:0b:74: 09:0e:46:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPY3i2VVyoTKbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk Y2Q1MGJiMTgtMTczMS00YTExLTg4ZTQtYjZjMTQwYWI3Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS3D5yb3bc8QyccB0CBzIYyInf0rxqmL15lR ortnOBVOqEGIImkGWzjm5Rgck2gPDeiDGSbpEwUK3pe/Kiv5ypiKp7eDqq3/QV4V Pd6IXt7pFQOZNx0CiiU4+3a+7Mcmh8lrL4r1Ss+RDCtDw2tK+/xo5VIZko99vbn/ fLXBhpxkDUSG+5sJUaW5jgK0CzFrgqrsYkEjjLzcFv0pBFBRHFRU4FD3FwXhtW3e TkBJJY52UXNaWVZXH6zPGp3VZFoQxn2SZGIkfopWluNEKEkasVJqFvisgWrxr49f 0lZR+pOARen7KWA13v9heriqnuO23ZhVf2H0cx+/GrLnuboFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjYzAuFYgvWTe+gODgIDbWym750MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvYjU0ODg4ZTgtODE1Ni0z ZDg3LTgzZTEtMmEwZGFkNmZkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2qn6UPLH8DOvrefJTQ1WSQB3BpHcv1I9/vjidA/jkcoDuXk0repmmG I++BPZ3/Sa9A89DHP6lQObJQRuE7lDk5u7DH5jN5ZKcN56E0MIOtdnNtnNYnEWEV hlgsxC71kicfdBpsMoOqZsNCmRSGLvVP04BEm48ttZ+EjVI/cpJgJFJoiDB3rx27 G2Uap+kcEpJzkC2H91mwTzi3Pq7WMO2BT0biveGzBVMDGi9CPwd+t55JR2JWlRMo dM5jcQoPBfnm3nqT4GwU+0Yc0L901vRi7Q6/ohNlmpmqqwRgMGvzUH3imFTfQsaC jIBA9k1oWc4+H8w0bu1carQLdAkORn4= -----END CERTIFICATE-----Generated at Fri May 9 08:10:15 2025 by rpki-client