$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa File: b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa (raw, json) Hash identifier: wqkWtckcz5edwor58TvSeD7JWQBtUCb67zNw5DD3uk0= Subject key identifier: F8:1A:00:98:7A:0A:9E:A3:57:D6:C3:F8:53:B8:4B:EB:61:27:16:08 Certificate issuer: /CN=058a49b1-635c-42be-b1a3-1465228f2130 Certificate serial: 010D0C9F4328584ECBD1E23F460AFAFBCD63EC70 Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 153371 IP address blocks: 23.130.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e2:3f:46:0a:fa:fb:cd:63:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=de47f1a5-bd54-4763-9d1f-f3dd9bb93095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:3f:70:f6:6d:43:84:8f:e8:3c:9d:73:45: ca:88:f6:73:3c:fc:4a:78:59:4c:15:0d:d5:04:ef: 12:d8:07:57:9a:10:f4:5d:d0:fc:03:f3:b3:0e:77: 3e:10:e0:f2:81:b6:8f:c2:c6:5e:ee:70:a4:9e:9f: 6d:64:17:03:79:72:99:da:a0:f7:eb:b1:f1:05:be: a1:30:c2:fe:00:b9:66:aa:6c:8e:2f:d8:fa:dc:6e: af:fb:31:79:dc:0c:e0:ba:07:7b:d1:97:74:d9:e3: d6:0b:96:35:f4:bc:48:13:49:b1:29:b8:06:6d:f5: cc:82:11:c3:02:a9:24:1b:50:42:a6:a3:44:94:c8: 38:09:08:2d:2e:ba:5a:71:33:1e:97:58:e3:7f:1a: 20:1a:c1:06:d5:91:cd:cb:4f:88:aa:a9:f8:c3:44: 0b:79:f9:89:5e:4a:87:ac:88:f4:30:5a:90:80:05: 8e:9c:56:fc:a4:b6:2f:b1:c7:00:5b:40:48:2a:f6: d3:ca:c8:f9:84:b5:0f:47:53:ff:63:e9:5c:f6:d1: 4b:17:4e:cd:e3:35:1d:3c:da:cd:88:99:13:09:7f: 25:fc:53:74:ce:9b:e0:73:eb:2e:ad:d5:61:da:b5: 88:b6:2d:a7:bc:d2:92:3d:d4:b5:0c:f5:3b:eb:3b: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1A:00:98:7A:0A:9E:A3:57:D6:C3:F8:53:B8:4B:EB:61:27:16:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/b54888e8-8156-3d87-83e1-2a0dad6fde2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl X509v3 Authority Key Identifier: keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer sbgp-ipAddrBlock: critical IPv4: 23.130.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ef:68:70:de:96:08:34:0f:1e:ca:b8:53:56:3a:e7:e9:fe:56: ea:b7:da:69:92:09:12:ca:6b:bf:fc:d8:91:7b:9e:b7:41:c0: f9:f1:21:60:91:03:60:34:c8:93:b9:56:a2:d2:96:f6:13:82: b6:77:2b:16:3b:eb:46:c8:79:65:57:1b:7b:b1:3f:85:71:6d: 50:ed:a0:4e:9c:77:54:9f:8e:c0:22:df:24:06:98:22:4b:89: 0d:c6:82:c7:76:02:b6:34:88:25:26:80:c1:bc:39:8e:84:81: 68:12:07:11:3d:35:a8:d6:dc:1e:37:80:8a:bc:0d:ef:6d:42: ca:94:a0:64:8c:a1:5e:4e:a7:56:2f:a8:55:bf:49:39:19:0c: 7f:31:f0:2d:5d:88:71:55:50:5b:ef:a6:cb:28:dc:fd:ec:9c: 5e:56:01:1d:33:50:9a:07:cd:09:da:ea:e4:44:ce:2c:15:3c: 60:11:d4:c8:51:94:c4:af:20:cd:83:fc:b3:3e:f2:e7:44:bf: 97:f4:fe:08:67:cc:39:0d:15:52:bf:30:ae:a7:f6:f1:6c:8b: 91:fd:f3:5f:e5:d2:a2:a9:23:18:83:8a:ee:29:4a:f9:24:95: bc:fc:28:d2:5c:b8:29:df:79:78:51:50:c9:c8:cd:81:c5:0e: 97:a7:3d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eI/Rgr6+81j7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU4YTQ5YjEtNjM1Yy00MmJlLWIxYTMtMTQ2NTIyOGYy MTMwMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZGU0N2YxYTUtYmQ1NC00NzYzLTlkMWYtZjNkZDliYjkzMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSo/cPZtQ4SP6Dydc0XKiPZzPPxKeFlMFQ3V BO8S2AdXmhD0XdD8A/OzDnc+EODygbaPwsZe7nCknp9tZBcDeXKZ2qD367HxBb6h MML+ALlmqmyOL9j63G6v+zF53Azgugd70Zd02ePWC5Y19LxIE0mxKbgGbfXMghHD AqkkG1BCpqNElMg4CQgtLrpacTMel1jjfxogGsEG1ZHNy0+Iqqn4w0QLefmJXkqH rIj0MFqQgAWOnFb8pLYvsccAW0BIKvbTysj5hLUPR1P/Y+lc9tFLF07N4zUdPNrN iJkTCX8l/FN0zpvgc+surdVh2rWIti2nvNKSPdS1DPU76ztNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgaAJh6Cp6jV9bD+FO4S+thJxYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNThh NDliMS02MzVjLTQyYmUtYjFhMy0xNDY1MjI4ZjIxMzAvYjU0ODg4ZTgtODE1Ni0z ZDg3LTgzZTEtMmEwZGFkNmZkZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDU4YTQ5YjEtNjM1Yy00MmJlLWIx YTMtMTQ2NTIyOGYyMTMwLzA1OGE0OWIxLTYzNWMtNDJiZS1iMWEzLTE0NjUyMjhm MjEzMC5jcmwwHwYDVR0jBBgwFoAUaCUP3rONAi5TxKSqLJfyB3EgXzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNThhNDliMS02MzVjLTQyYmUtYjFhMy0xNDY1 MjI4ZjIxMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAO9ocN6WCDQPHsq4U1Y65+n+Vuq32mmSCRLKa7/82JF7nrdBwPnxIWCR A2A0yJO5VqLSlvYTgrZ3KxY760bIeWVXG3uxP4VxbVDtoE6cd1SfjsAi3yQGmCJL iQ3Ggsd2ArY0iCUmgMG8OY6EgWgSBxE9NajW3B43gIq8De9tQsqUoGSMoV5Op1Yv qFW/STkZDH8x8C1diHFVUFvvpsso3P3snF5WAR0zUJoHzQna6uREziwVPGAR1MhR lMSvIM2D/LM+8udEv5f0/ghnzDkNFVK/MK6n9vFsi5H981/l0qKpIxiDiu4pSvkk lbz8KNJcuCnfeXhRUMnIzYHFDpenPbY= -----END CERTIFICATE-----Generated at Thu Sep 10 22:48:02 2026 by rpki-client