$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa File: 037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (raw, json) Hash identifier: hPE+0sThEzqoUeSN6j6l/5Xe7nj26UT9itqpecKWn5c= Subject key identifier: ED:FC:AE:7D:99:D6:E7:7B:F6:0C:8C:0A:65:5F:F9:F9:5B:99:0B:E8 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584AD50661365F211C2031B5AB80 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa Signing time: Tue 12 Aug 2025 13:00:43 +0000 ROA not before: Tue 12 Aug 2025 13:00:43 +0000 ROA not after: Mon 10 Nov 2025 14:00:43 +0000 asID: 395388 IP address blocks: 23.190.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d5:06:61:36:5f:21:1c:20:31:b5:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Aug 12 13:00:43 2025 GMT Not After : Nov 10 14:00:43 2025 GMT Subject: CN=7e178ae8-f480-497c-9400-f80e44a92177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:52:ad:94:fd:8f:90:a2:35:79:a3:55:f2:b0: 25:c2:74:73:ab:47:6b:02:f3:56:24:78:07:a9:84: 51:bf:fc:8b:bd:6e:b8:58:35:8b:f4:87:55:c5:8a: c3:8a:53:47:7f:51:91:49:f9:01:93:2e:64:ae:52: b9:2b:94:eb:3e:ef:eb:f5:47:d5:53:c5:c5:95:ce: 9b:dd:60:e3:01:3d:5e:c1:31:55:c2:a0:c1:93:a4: c6:81:4d:ff:b2:11:76:d9:91:14:e1:dc:cf:4f:bb: 9d:4c:bf:cd:bf:5b:3f:96:03:e0:21:36:7f:83:9e: 9d:43:c7:35:eb:55:fb:65:e8:b3:e1:c0:6f:70:11: a8:fa:ea:54:16:86:9c:18:38:5e:c6:04:d9:52:df: 7c:ae:fa:8e:24:cc:71:e8:f2:ee:7a:ea:47:a3:df: f6:98:ca:19:8b:f1:25:7d:7f:d3:5d:32:93:1e:38: 08:8d:d7:de:ff:bf:b7:ec:62:04:f8:7f:c8:63:6f: da:00:31:d8:a6:fd:03:af:6e:f0:56:0c:37:d0:c2: ed:e7:b9:01:94:a5:d8:41:a3:8a:26:bb:10:b5:46: 39:59:5a:74:fd:47:bf:25:35:92:3a:20:23:db:c1: 24:46:f7:ec:de:09:f9:db:f6:34:72:b3:cb:46:21: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FC:AE:7D:99:D6:E7:7B:F6:0C:8C:0A:65:5F:F9:F9:5B:99:0B:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv4: 23.190.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:cb:4d:63:59:58:71:e2:80:ea:08:01:72:19:30:e4:2e:8c: 24:91:21:54:3f:0f:94:8e:1a:ef:11:bc:6e:4b:78:cd:ad:b1: 47:b1:5f:15:64:a0:72:bd:ae:56:52:de:14:17:6b:6f:7d:a3: a5:0a:d9:64:77:8f:1b:3e:19:d2:9e:75:74:aa:6b:c5:2e:f0: 13:cf:97:3a:c6:2a:c6:ce:87:c5:a4:7a:fc:2f:49:c6:dc:83: 0a:30:12:ef:2d:ff:a7:3f:78:e8:e6:19:89:3e:56:d5:cb:41: dc:57:22:b8:ec:41:9c:e7:7a:ab:f6:2b:1e:5c:f5:84:5e:e8: 3a:16:0a:fd:e6:b7:01:3d:a8:11:fc:3d:25:82:6b:6c:f1:9f: 1d:f7:0a:4b:a7:3a:47:66:db:71:de:94:c0:fd:c8:24:ed:fb: 35:9b:e2:58:c9:2c:31:96:10:82:33:03:2f:b2:e9:3c:da:61: 47:39:c0:05:51:be:73:7e:66:2f:eb:ce:23:9f:c1:0c:14:f6: a9:db:8c:39:55:de:9a:5c:98:f0:26:9f:f8:b1:c9:f4:73:7a: 0c:e4:72:e6:33:6a:d6:c5:92:f9:44:14:dd:7d:89:84:31:ce: 83:83:a1:c9:57:76:29:68:9a:b1:88:50:29:d0:c2:36:73:e5: b5:19:79:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErVBmE2XyEcIDG1q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDgxMjEzMDA0M1oXDTI1MTExMDE0MDA0M1owLzEtMCsGA1UEAxMk N2UxNzhhZTgtZjQ4MC00OTdjLTk0MDAtZjgwZTQ0YTkyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVKtlP2PkKI1eaNV8rAlwnRzq0drAvNWJHgH qYRRv/yLvW64WDWL9IdVxYrDilNHf1GRSfkBky5krlK5K5TrPu/r9UfVU8XFlc6b 3WDjAT1ewTFVwqDBk6TGgU3/shF22ZEU4dzPT7udTL/Nv1s/lgPgITZ/g56dQ8c1 61X7Zeiz4cBvcBGo+upUFoacGDhexgTZUt98rvqOJMxx6PLueupHo9/2mMoZi/El fX/TXTKTHjgIjdfe/7+37GIE+H/IY2/aADHYpv0Dr27wVgw30MLt57kBlKXYQaOK JrsQtUY5WVp0/Ue/JTWSOiAj28EkRvfs3gn52/Y0crPLRiGDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO38rn2Z1ud79gyMCmVf+flbmQvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMDM3MjQxYjYtODg3Zi0z ZmU5LTgwYzgtNzA5MGJhMmU2ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF75IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfLTWNZWHHigOoIAXIZMOQujCSRIVQ/D5SOGu8RvG5LeM2tsUexXxVk oHK9rlZS3hQXa299o6UK2WR3jxs+GdKedXSqa8Uu8BPPlzrGKsbOh8WkevwvScbc gwowEu8t/6c/eOjmGYk+VtXLQdxXIrjsQZzneqv2Kx5c9YRe6DoWCv3mtwE9qBH8 PSWCa2zxnx33CkunOkdm23HelMD9yCTt+zWb4ljJLDGWEIIzAy+y6TzaYUc5wAVR vnN+Zi/rziOfwQwU9qnbjDlV3ppcmPAmn/ixyfRzegzkcuYzatbFkvlEFN19iYQx zoODoclXdilomrGIUCnQwjZz5bUZeYs= -----END CERTIFICATE-----Generated at Sun Aug 24 09:46:13 2025 by rpki-client