$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa File: 037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (raw, json) Hash identifier: si2gbjYRYgpoCo2HZ6umL2VLaZojVhU6QP+88Bfdht8= Subject key identifier: 07:A3:EF:E1:34:AA:2A:68:8C:A2:D1:D3:8D:04:91:F9:72:65:BE:0C Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F43285849F44A5CF8C45DE0A586C55E80 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 395388 IP address blocks: 23.190.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5c:f8:c4:5d:e0:a5:86:c5:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=6b99da59-d372-4fef-860c-98328a4634be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a7:c2:f4:1a:9c:ab:65:3a:34:86:99:29:01: 0a:8c:5f:75:64:e1:91:1b:79:62:63:65:9c:97:24: b8:7a:af:f0:de:49:fd:ef:28:3e:a8:07:4f:17:56: 65:6b:df:13:bc:76:06:48:d1:44:1d:81:a7:84:65: a9:71:b9:94:d8:65:56:4e:0e:0e:fc:80:52:e3:c5: f4:27:94:84:58:e8:a5:9f:5c:b9:51:2e:0d:26:19: 87:06:9c:be:af:f9:da:0d:e6:67:56:2d:dc:28:ce: 71:aa:94:af:eb:7a:bd:60:2d:88:bf:dd:4e:95:8c: 1b:be:f9:24:7b:17:d2:9f:3c:92:01:2a:bc:b0:d2: 2c:c6:41:4a:87:b4:b0:e0:9b:c2:6e:1a:05:fc:63: 98:f4:44:52:29:b4:61:3b:7e:4d:60:99:00:5f:7c: f9:04:98:8b:d6:0e:0f:b0:ac:c8:9a:61:3e:a5:ec: b2:33:19:4c:82:a4:5d:88:1a:d5:3f:b9:2d:c2:07: db:c2:78:80:65:26:ad:0f:e6:f8:95:ce:ad:76:5b: 6b:52:a7:d1:3b:a8:68:7b:82:64:1b:5f:91:f2:06: e6:52:5d:fb:d1:36:86:29:a6:97:ad:45:de:9d:7d: de:ce:19:68:7b:be:52:39:87:34:35:cf:6d:4f:c1: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:EF:E1:34:AA:2A:68:8C:A2:D1:D3:8D:04:91:F9:72:65:BE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv4: 23.190.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:75:60:7b:a0:0c:8b:7d:0a:a2:6a:35:19:e5:5d:78:c1:8d: d8:a1:3e:b2:ba:b4:c8:87:1e:20:5f:4e:92:3f:62:7d:54:c4: cc:03:34:98:18:b4:ff:33:84:51:84:1e:b6:e1:74:39:83:ad: 67:ee:1c:02:a8:d0:93:61:f6:04:16:ee:f9:b2:49:79:2a:4a: f1:0f:0a:1b:fd:7f:c1:f7:5f:31:db:66:33:3b:b1:9a:62:6e: 4d:6d:ba:45:ef:83:9a:8d:53:d3:e7:03:5e:66:8b:11:2f:09: 9a:b7:47:0c:2e:ed:b5:2c:47:c3:19:89:f9:4a:d4:a5:3b:ae: 3e:8e:5b:f5:ef:13:1a:6b:6c:53:86:e8:53:a8:56:bb:ce:1b: 9a:a7:fa:53:69:00:e9:bd:ce:3e:d2:00:30:e5:6f:87:5c:39: 43:9d:ac:09:c0:c1:a7:7c:37:d5:00:2b:46:26:d7:3b:99:b9: 55:7d:91:f7:af:f7:6b:2c:16:96:94:ba:fe:2c:bf:0f:0e:be: f5:41:61:ab:bb:2d:01:4f:73:bd:b9:e0:43:34:6e:49:83:53: 7a:17:6d:58:d1:07:5b:1a:18:c4:e4:7b:66:89:8f:91:24:d0: f6:00:b9:78:4c:9d:a1:8b:b2:9d:29:88:9d:15:16:a4:18:36: 5a:84:ef:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0Slz4xF3gpYbFXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk NmI5OWRhNTktZDM3Mi00ZmVmLTg2MGMtOTgzMjhhNDYzNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqfC9Bqcq2U6NIaZKQEKjF91ZOGRG3liY2Wc lyS4eq/w3kn97yg+qAdPF1Zla98TvHYGSNFEHYGnhGWpcbmU2GVWTg4O/IBS48X0 J5SEWOiln1y5US4NJhmHBpy+r/naDeZnVi3cKM5xqpSv63q9YC2Iv91OlYwbvvkk exfSnzySASq8sNIsxkFKh7Sw4JvCbhoF/GOY9ERSKbRhO35NYJkAX3z5BJiL1g4P sKzImmE+peyyMxlMgqRdiBrVP7ktwgfbwniAZSatD+b4lc6tdltrUqfRO6hoe4Jk G1+R8gbmUl370TaGKaaXrUXenX3ezhloe75SOYc0Nc9tT8EDxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAej7+E0qipojKLR040EkflyZb4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMDM3MjQxYjYtODg3Zi0z ZmU5LTgwYzgtNzA5MGJhMmU2ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF75IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV1YHugDIt9CqJqNRnlXXjBjdihPrK6tMiHHiBfTpI/Yn1UxMwDNJgY tP8zhFGEHrbhdDmDrWfuHAKo0JNh9gQW7vmySXkqSvEPChv9f8H3XzHbZjM7sZpi bk1tukXvg5qNU9PnA15mixEvCZq3Rwwu7bUsR8MZiflK1KU7rj6OW/XvExprbFOG 6FOoVrvOG5qn+lNpAOm9zj7SADDlb4dcOUOdrAnAwad8N9UAK0Ym1zuZuVV9kfev 92ssFpaUuv4svw8OvvVBYau7LQFPc7254EM0bkmDU3oXbVjRB1saGMTke2aJj5Ek 0PYAuXhMnaGLsp0piJ0VFqQYNlqE7yM= -----END CERTIFICATE-----Generated at Mon Jun 30 13:38:32 2025 by rpki-client