$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa File: c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa (raw, json) Hash identifier: zXjNYceWifpSuEGLOz6YqIlnzRhSk/07u/jCGCELtGo= Subject key identifier: F0:E0:D9:F0:EB:89:03:BA:5A:35:0D:CF:3C:4D:7E:E2:08:79:9A:C5 Certificate issuer: /CN=058ef11e-32ea-4ce9-8998-b435c442a300 Certificate serial: 010D0C9F43285849B310C27DF97747911FD9B700 Authority key identifier: 1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa Signing time: Wed 30 Apr 2025 16:17:17 +0000 ROA not before: Wed 30 Apr 2025 16:17:17 +0000 ROA not after: Tue 29 Jul 2025 16:17:17 +0000 asID: 23013 IP address blocks: 23.128.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b3:10:c2:7d:f9:77:47:91:1f:d9:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058ef11e-32ea-4ce9-8998-b435c442a300 Validity Not Before: Apr 30 16:17:17 2025 GMT Not After : Jul 29 16:17:17 2025 GMT Subject: CN=16195770-8f25-4f15-a8c7-72ef1e0979f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:c8:2e:39:b1:f5:2a:d8:53:2c:ba:ba:33: 7b:e0:14:e8:cb:5b:72:16:8e:4b:f2:e0:cf:98:43: d9:9b:2f:84:d6:65:f9:26:7b:49:7a:d4:6a:ee:93: 71:44:63:be:a0:d7:74:9e:88:c3:0d:ce:67:e1:7b: 9b:9f:1e:bc:29:34:f2:4f:a5:a0:ed:28:e0:15:51: b0:50:3c:46:85:10:e6:09:8f:e5:cd:74:57:17:e2: 9f:3f:7a:e0:8f:7a:2c:b2:66:0f:3d:53:56:51:1a: 9c:13:5f:8f:11:c9:38:36:67:7d:1d:f4:5f:6b:41: eb:c5:99:8e:22:e3:6a:aa:ab:ff:e0:67:7e:06:9c: 2e:06:bc:e0:6b:ba:32:27:23:c4:e9:12:38:0e:23: 0c:d0:16:a3:2c:b8:df:9c:81:c7:98:e4:d3:c3:65: 75:c2:74:32:02:17:1b:d2:41:55:8b:73:93:02:01: fb:70:9d:de:6b:bc:bd:63:2d:7c:c7:c7:e8:c6:6a: 5a:01:f3:fd:2d:99:11:62:37:69:87:a4:f5:0e:89: a4:d8:1d:49:a9:3e:06:de:d5:64:87:a6:c3:07:f0: da:9d:87:d2:ea:b7:8f:78:da:a8:2a:f1:92:d5:16: bd:5b:c1:89:07:ef:4e:63:88:95:ba:9f:7a:36:a4: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E0:D9:F0:EB:89:03:BA:5A:35:0D:CF:3C:4D:7E:E2:08:79:9A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/c0661ad6-203d-36f4-862a-1010f5c1d6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300/058ef11e-32ea-4ce9-8998-b435c442a300.crl X509v3 Authority Key Identifier: keyid:1A:4F:20:1A:B8:2C:21:C3:A6:4D:9D:B5:B8:0F:05:20:B2:4E:EC:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/058ef11e-32ea-4ce9-8998-b435c442a300.cer sbgp-ipAddrBlock: critical IPv4: 23.128.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0d:dc:57:59:6f:21:88:02:fc:ac:56:b5:c0:77:0d:ab:a9: 2f:b8:b0:01:01:85:70:3e:e8:c9:d3:43:d1:21:f9:d4:63:fb: e3:bf:0c:c5:4a:c2:d6:2e:8d:5b:96:50:b9:3b:73:b6:1b:d5: b0:30:32:f9:b1:c5:5e:c7:47:05:6a:2a:91:f1:2e:28:f1:0c: 27:d6:c9:28:63:25:1f:e4:65:ba:12:7c:2e:69:e1:05:43:8f: 94:f2:60:2a:2b:64:fc:23:6c:04:04:97:22:f9:07:b6:3c:d4: 33:42:bd:79:b7:96:3d:79:d3:db:c1:f9:f5:84:52:16:f2:3b: a3:50:c1:f8:24:d5:37:a1:bd:33:f0:41:18:74:56:ca:ae:1d: e3:49:21:ac:9b:fe:75:8a:0d:d9:65:e2:54:67:27:2e:a9:8b: 6c:28:a8:20:60:e9:38:68:46:9c:3b:2f:12:df:a2:8a:6a:a9: f9:23:09:23:5d:77:1c:fe:96:4f:50:2a:73:35:90:fb:1a:fb: 53:f2:87:b2:55:72:a2:5e:d1:09:1b:9b:0d:9c:19:0b:d0:75: 39:59:24:af:5e:12:de:fa:cd:40:e4:a0:93:b8:fb:85:91:d6: 8e:82:d6:45:f1:b9:39:ac:91:ae:94:5f:c3:36:f8:ee:33:79: 17:e2:57:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzEMJ9+XdHkR/ZtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4ZWYxMWUtMzJlYS00Y2U5LTg5OTgtYjQzNWM0NDJh MzAwMB4XDTI1MDQzMDE2MTcxN1oXDTI1MDcyOTE2MTcxN1owLzEtMCsGA1UEAxMk MTYxOTU3NzAtOGYyNS00ZjE1LWE4YzctNzJlZjFlMDk3OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgTILjmx9SrYUyy6ujN74BToy1tyFo5L8uDP mEPZmy+E1mX5JntJetRq7pNxRGO+oNd0nojDDc5n4Xubnx68KTTyT6Wg7SjgFVGw UDxGhRDmCY/lzXRXF+KfP3rgj3ossmYPPVNWURqcE1+PEck4Nmd9HfRfa0HrxZmO IuNqqqv/4Gd+BpwuBrzga7oyJyPE6RI4DiMM0BajLLjfnIHHmOTTw2V1wnQyAhcb 0kFVi3OTAgH7cJ3ea7y9Yy18x8foxmpaAfP9LZkRYjdph6T1Domk2B1JqT4G3tVk h6bDB/DanYfS6rePeNqoKvGS1Ra9W8GJB+9OY4iVup96NqSBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDg2fDriQO6WjUNzzxNfuIIeZrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wNThl ZjExZS0zMmVhLTRjZTktODk5OC1iNDM1YzQ0MmEzMDAvYzA2NjFhZDYtMjAzZC0z NmY0LTg2MmEtMTAxMGY1YzFkNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDU4ZWYxMWUtMzJlYS00Y2U5LTg5 OTgtYjQzNWM0NDJhMzAwLzA1OGVmMTFlLTMyZWEtNGNlOS04OTk4LWI0MzVjNDQy YTMwMC5jcmwwHwYDVR0jBBgwFoAUGk8gGrgsIcOmTZ21uA8FILJO7NMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wNThlZjExZS0zMmVhLTRjZTktODk5OC1iNDM1 YzQ0MmEzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8N3FdZbyGIAvysVrXAdw2rqS+4sAEBhXA+6MnTQ9Eh+dRj++O/DMVK wtYujVuWULk7c7Yb1bAwMvmxxV7HRwVqKpHxLijxDCfWyShjJR/kZboSfC5p4QVD j5TyYCorZPwjbAQElyL5B7Y81DNCvXm3lj1509vB+fWEUhbyO6NQwfgk1TehvTPw QRh0VsquHeNJIayb/nWKDdll4lRnJy6pi2woqCBg6ThoRpw7LxLfoopqqfkjCSNd dxz+lk9QKnM1kPsa+1Pyh7JVcqJe0Qkbmw2cGQvQdTlZJK9eEt76zUDkoJO4+4WR 1o6C1kXxuTmska6UX8M2+O4zeRfiVyo= -----END CERTIFICATE-----Generated at Wed May 14 16:11:22 2025 by rpki-client