$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa File: c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa (raw, json) Hash identifier: fnMge65O8YOTbD47ITwiAX+4IHA3c3O5OzKMTFlH3vU= Subject key identifier: 3B:DA:00:57:51:77:34:A2:4F:92:B6:B4:0F:49:A5:27:43:8E:CF:8C Certificate issuer: /CN=058ef11e-32ea-4ce9-8998-b435c442a300 Certificate serial: 010D0C9F4328584B7427559AE7E5E7F17C0A0E20 Authority key identifier: 1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 23013 IP address blocks: 23.128.20.0/24 maxlen: 32 216.180.120.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:55:9a:e7:e5:e7:f1:7c:0a:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058ef11e-32ea-4ce9-8998-b435c442a300 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=6f1908d2-74a7-4fb5-adfb-dd07a7df38cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8b:62:0c:42:b8:7c:27:3b:41:cd:71:9e:0d: 87:0d:b3:9a:ed:06:3f:8b:28:41:c8:ed:43:c4:f5: cf:5b:53:9a:97:44:d6:f0:08:3a:eb:a4:df:8a:d0: 91:fe:a0:9d:85:40:bc:e6:42:93:08:09:7d:a2:37: b2:74:45:d5:ea:fa:2d:83:fc:28:83:d4:9b:1e:81: 95:c0:75:a4:87:29:55:07:df:73:bf:81:79:19:82: b8:b6:56:8b:e8:80:cc:6d:2d:1e:40:1a:6d:41:38: 8d:bd:76:8e:8d:49:34:b3:20:5c:4a:7c:9e:d2:07: e7:bf:17:05:bd:6f:92:4c:f4:98:5c:c0:47:7d:d5: ae:e0:ee:07:5a:40:0c:a3:ac:2f:f5:02:e0:96:25: 2c:ee:fe:40:e8:d3:42:a2:53:17:27:d0:7f:d7:4c: 35:16:45:c0:48:aa:8a:c5:2e:ac:b3:53:51:f4:db: 7a:bd:55:93:26:2f:4c:a7:56:75:5f:41:78:ad:d4: 59:af:6f:54:6b:a4:ca:2b:9d:90:9e:68:ef:f5:49: b6:61:80:e6:4b:f9:9e:91:7c:f0:c9:0c:75:a3:63: 7b:30:3e:24:fa:6d:7b:d9:b1:65:8b:d5:19:02:f5: 66:5b:4a:c1:8c:6c:73:31:09:39:6e:d5:03:5b:2b: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DA:00:57:51:77:34:A2:4F:92:B6:B4:0F:49:A5:27:43:8E:CF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl X509v3 Authority Key Identifier: keyid:1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer sbgp-ipAddrBlock: critical IPv4: 23.128.20.0/24 216.180.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c6:53:d2:a8:e0:ba:4b:dd:ae:69:06:76:af:84:4e:c1:c2: ce:68:50:96:7c:c9:d1:6b:0e:2e:73:f9:6a:09:a4:85:56:21: a6:f7:62:5c:5a:df:bd:38:d7:19:8a:f4:1f:6e:75:31:1e:63: b5:9e:fe:58:82:8e:82:82:7f:f6:92:61:1c:5e:2e:f6:8e:13: 90:34:ac:67:46:e2:b2:c6:dc:e6:06:c1:e7:a9:98:38:de:20: 81:2a:5a:43:f5:d6:d2:e2:35:e6:67:f3:8f:68:d5:e6:bb:d2: c5:9c:a8:ff:6b:49:5c:a7:87:84:fb:7f:50:3c:86:8d:23:fb: 4c:c7:fc:b7:80:a7:88:0b:bd:f9:89:9f:77:2f:b4:78:b0:52: b1:76:20:6c:7d:00:b2:ee:69:5a:81:87:00:2d:18:62:92:48: 4f:b2:42:96:e8:4a:06:54:92:64:22:38:b5:a8:54:09:80:3f: ae:fe:b8:0d:84:46:e4:b4:c8:58:83:20:dc:d1:2a:cb:fc:48: 9b:18:c7:01:96:0e:b3:06:9d:50:85:d1:88:7b:aa:0c:95:4d: c0:01:43:11:15:99:47:6e:17:d3:0b:20:da:df:65:af:a3:38: 96:83:6d:4f:9e:10:d6:e1:d8:c7:fb:5e:b4:6e:cd:34:a5:ad: 9b:78:e1:a0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEt0J1Wa5+Xn8XwKDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4ZWYxMWUtMzJlYS00Y2U5LTg5OTgtYjQzNWM0NDJh MzAwMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NmYxOTA4ZDItNzRhNy00ZmI1LWFkZmItZGQwN2E3ZGYzOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjItiDEK4fCc7Qc1xng2HDbOa7QY/iyhByO1D xPXPW1Oal0TW8Ag666TfitCR/qCdhUC85kKTCAl9ojeydEXV6votg/wog9SbHoGV wHWkhylVB99zv4F5GYK4tlaL6IDMbS0eQBptQTiNvXaOjUk0syBcSnye0gfnvxcF vW+STPSYXMBHfdWu4O4HWkAMo6wv9QLgliUs7v5A6NNColMXJ9B/10w1FkXASKqK xS6ss1NR9Nt6vVWTJi9Mp1Z1X0F4rdRZr29Ua6TKK52Qnmjv9Um2YYDmS/mekXzw yQx1o2N7MD4k+m172bFli9UZAvVmW0rBjGxzMQk5btUDWyvP+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDvaAFdRdzSiT5K2tA9JpSdDjs+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNThl ZjExZS0zMmVhLTRjZTktODk5OC1iNDM1YzQ0MmEzMDAvYzA2NjFhZDYtMjAzZC0z NmY0LTg2MmEtMTAxMGY1YzFkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDU4ZWYxMWUtMzJlYS00Y2U5LTg5 OTgtYjQzNWM0NDJhMzAwLzA1OGVmMTFlLTMyZWEtNGNlOS04OTk4LWI0MzVjNDQy YTMwMC5jcmwwHwYDVR0jBBgwFoAUGk8gGrgsIcOmTZ21uA8FILJO7NMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNThlZjExZS0zMmVhLTRjZTktODk5OC1iNDM1 YzQ0MmEzMDAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4AUAwQC 2LR4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB3GU9Ko4LpL3a5pBnavhE7Bws5oUJZ8ydFrDi5z+WoJpIVW Iab3Ylxa37041xmK9B9udTEeY7We/liCjoKCf/aSYRxeLvaOE5A0rGdG4rLG3OYG weepmDjeIIEqWkP11tLiNeZn849o1ea70sWcqP9rSVynh4T7f1A8ho0j+0zH/LeA p4gLvfmJn3cvtHiwUrF2IGx9ALLuaVqBhwAtGGKSSE+yQpboSgZUkmQiOLWoVAmA P67+uA2ERuS0yFiDINzRKsv8SJsYxwGWDrMGnVCF0Yh7qgyVTcABQxEVmUduF9ML INrfZa+jOJaDbU+eENbh2Mf7XrRuzTSlrZt44aA= -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:22 2025 by rpki-client