$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa File: 037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (raw, json) Hash identifier: aeOSKx8jXcCnISBqx2zY1sY98VktYuwLNgiUVInmz/0= Subject key identifier: 08:89:C6:4C:30:AB:65:1A:27:78:62:3A:3A:BC:57:B2:BB:A3:0C:83 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584BB5C255DBF47BE96FA7F32F80 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 395388 IP address blocks: 23.190.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:55:db:f4:7b:e9:6f:a7:f3:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=f60ec9b1-3ff8-4e7c-a4a3-2b8b89b90269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:04:71:5c:9f:72:45:8d:d5:ea:e9:83:02: ee:a5:9e:d6:1f:ab:61:1d:88:7d:b8:f5:77:7f:ce: fa:75:05:b1:fd:86:e8:f5:7c:6b:fc:da:34:cb:3d: ab:2f:91:d8:6f:5e:1e:04:21:0c:64:af:97:5e:52: b9:e6:31:6b:a7:e0:56:d0:e8:49:89:4b:67:a0:3b: 46:67:99:96:8c:e6:fe:6f:00:a4:c1:f1:32:e2:a5: d3:b9:25:75:40:cb:49:cd:c7:97:5a:e1:de:34:db: 36:fe:9f:db:6b:89:be:15:bc:41:46:bf:da:1e:1a: c6:f8:17:28:ac:9e:a0:2b:2c:e8:2d:8a:49:1b:97: 00:66:14:fe:e2:1e:5e:af:43:6d:3f:e9:b5:1f:df: 24:33:14:92:45:d0:28:f8:12:f0:24:05:a1:63:a0: 7d:4e:35:95:aa:f0:c3:54:97:30:d6:fb:05:76:72: 24:8f:4f:8b:6c:82:b8:0d:de:50:d3:6c:3d:63:87: cd:c8:6a:db:80:d7:62:5c:55:21:f5:e4:a2:ce:07: c7:16:cb:e5:6d:00:73:15:1b:2f:0d:eb:1b:69:32: 5a:3a:e2:9b:92:10:81:a1:0a:5c:12:a5:4d:d6:d1: f1:97:6b:79:20:3d:a5:00:a7:17:e7:ed:56:87:91: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:89:C6:4C:30:AB:65:1A:27:78:62:3A:3A:BC:57:B2:BB:A3:0C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv4: 23.190.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3a:4c:0f:09:6b:61:da:09:4b:fa:c2:c4:7e:72:9b:81:cd: 50:1a:ad:44:75:3d:26:8f:55:df:a3:62:f4:eb:18:67:ea:cf: 5e:98:43:2c:5e:d6:2b:e2:ad:ca:e6:8a:9a:d7:a9:f6:59:c7: ab:b2:57:ae:a2:a7:af:84:39:db:3a:a5:94:36:a8:a2:2c:bc: a4:d5:d6:5a:e3:87:39:0d:35:61:a7:96:37:41:fe:a0:3f:1f: 29:88:aa:a1:b4:7f:d4:a7:ff:fa:3a:0b:a4:b4:b5:e6:30:e7: c8:8d:fb:7a:50:f0:80:60:0f:33:d2:ab:fa:c0:6f:58:ab:ee: cd:cc:63:5d:30:72:7e:22:cc:4a:b0:02:aa:77:7c:e6:2a:29: 79:fb:4b:3b:e9:97:c1:76:b3:8f:13:55:c6:b4:19:c8:20:51: 65:ee:3a:04:da:66:fa:4f:e6:44:e7:b5:80:47:56:0b:5a:a5: db:6c:3b:7c:36:bd:ff:69:45:2e:df:09:13:12:5e:fd:93:a0: ab:8e:e2:48:bb:8a:49:b7:88:1e:83:9a:bc:e1:de:8f:83:30: 00:68:94:7e:4d:37:98:ef:be:16:8a:b6:bd:b7:5c:7b:56:63: 3e:06:21:2d:09:47:f8:a0:b4:2a:b3:f6:40:d4:46:3c:13:b8: bc:d4:6f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wlXb9Hvpb6fzL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjYwZWM5YjEtM2ZmOC00ZTdjLWE0YTMtMmI4Yjg5YjkwMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSoEcVyfckWN1erpgwLupZ7WH6thHYh9uPV3 f876dQWx/Ybo9Xxr/No0yz2rL5HYb14eBCEMZK+XXlK55jFrp+BW0OhJiUtnoDtG Z5mWjOb+bwCkwfEy4qXTuSV1QMtJzceXWuHeNNs2/p/ba4m+FbxBRr/aHhrG+Bco rJ6gKyzoLYpJG5cAZhT+4h5er0NtP+m1H98kMxSSRdAo+BLwJAWhY6B9TjWVqvDD VJcw1vsFdnIkj0+LbIK4Dd5Q02w9Y4fNyGrbgNdiXFUh9eSizgfHFsvlbQBzFRsv DesbaTJaOuKbkhCBoQpcEqVN1tHxl2t5ID2lAKcX5+1Wh5EvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiJxkwwq2UaJ3hiOjq8V7K7owyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMDM3MjQxYjYtODg3Zi0z ZmU5LTgwYzgtNzA5MGJhMmU2ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF75IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM6TA8Ja2HaCUv6wsR+cpuBzVAarUR1PSaPVd+jYvTrGGfqz16YQyxe 1ivircrmiprXqfZZx6uyV66ip6+EOds6pZQ2qKIsvKTV1lrjhzkNNWGnljdB/qA/ HymIqqG0f9Sn//o6C6S0teYw58iN+3pQ8IBgDzPSq/rAb1ir7s3MY10wcn4izEqw Aqp3fOYqKXn7Szvpl8F2s48TVca0GcggUWXuOgTaZvpP5kTntYBHVgtapdtsO3w2 vf9pRS7fCRMSXv2ToKuO4ki7ikm3iB6Dmrzh3o+DMABolH5NN5jvvhaKtr23XHtW Yz4GIS0JR/igtCqz9kDURjwTuLzUb04= -----END CERTIFICATE-----Generated at Wed Nov 5 04:14:22 2025 by rpki-client