$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa File: 037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa (raw, json) Hash identifier: Bs5asns33HbJrpdSpNy3KCQVZTF/+gQFJx0w90wETFA= Subject key identifier: 4E:90:70:AE:45:97:1C:AA:D6:4F:7E:52:17:C4:90:E1:6D:19:0E:F0 Certificate issuer: /CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Certificate serial: 010D0C9F4328584D773A71EB74E465AD395BCC80 Authority key identifier: AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 395388 IP address blocks: 23.190.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:71:eb:74:e4:65:ad:39:5b:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71baebf-1a7d-40e5-90c9-370c088ebc71 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=3490b3c3-dda2-461e-9c35-6ebe649bf8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:68:d4:d7:dc:f0:9d:93:4c:eb:a4:0f:6a:e9: 0b:5b:2f:f7:7a:37:16:9c:e4:52:9f:51:b4:88:da: 21:9c:f2:a4:31:99:29:a2:5f:66:6b:7c:35:45:7a: 6a:53:71:9b:b8:99:8f:48:5e:ec:28:ba:ab:8e:d6: c1:67:c1:fd:70:73:6b:55:6e:63:60:c3:3f:9f:6f: cb:bf:72:37:d6:40:52:64:e1:74:1d:a7:89:5f:ba: e9:81:ab:64:37:dc:52:8b:51:f8:16:4d:c0:e6:d7: 87:49:88:94:7b:b7:eb:9e:56:92:d3:37:02:b7:6a: bd:06:b5:e2:34:88:f9:1d:87:4a:66:b2:67:bb:39: fd:39:07:b5:65:c8:4e:92:ef:03:f8:ae:9c:23:9d: 48:89:46:53:bf:61:2f:c0:b8:22:11:09:7e:ec:93: f5:a8:c0:4b:9b:2c:46:bb:ef:7f:1b:85:f0:a1:28: ab:ad:f5:69:85:3e:f6:b8:cc:c0:70:5b:80:08:77: fc:1f:7e:c5:5e:53:f9:8e:f3:d4:e9:d1:63:e3:37: ab:42:36:8b:e6:3f:40:19:09:a8:cc:ab:fc:90:e5: bc:e1:5d:84:c0:e8:81:7b:37:59:ce:e5:15:01:64: cd:65:01:fb:d6:cc:7d:59:7a:4e:bf:65:da:15:58: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:90:70:AE:45:97:1C:AA:D6:4F:7E:52:17:C4:90:E1:6D:19:0E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/037241b6-887f-3fe9-80c8-7090ba2e6dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71/b71baebf-1a7d-40e5-90c9-370c088ebc71.crl X509v3 Authority Key Identifier: keyid:AB:1F:DE:B3:29:CA:4F:D4:72:C5:96:28:DF:07:D7:DC:BD:C1:11:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b71baebf-1a7d-40e5-90c9-370c088ebc71.cer sbgp-ipAddrBlock: critical IPv4: 23.190.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:4e:26:de:a5:af:5f:6a:a4:5c:21:70:d7:97:a2:c1:c4:dd: 3a:9f:36:fe:aa:12:77:97:92:11:ee:ca:16:c5:be:9f:b5:77: 5b:32:b8:0c:83:d1:71:aa:d0:ec:81:83:c5:ef:74:16:cf:c2: 48:6c:22:d0:a2:6a:c4:82:66:a2:7b:57:cf:c4:f1:52:e0:76: 56:c6:cb:de:34:b2:d1:87:e9:31:59:f7:79:ca:ad:d2:13:eb: c0:2d:cd:fb:06:41:9c:0e:b8:d2:1b:6f:ca:8f:e9:67:ce:ad: 2d:c6:ac:38:7d:ec:db:dd:6c:4b:78:0a:75:cd:5f:3f:46:a7: 95:e4:60:a8:65:0f:2e:28:3a:2a:59:46:75:19:ca:c4:0e:f1: 85:88:59:74:f3:e1:53:bc:66:c7:ce:a9:53:69:72:2d:7d:cb: 82:f2:23:23:3e:81:94:7e:77:aa:3c:aa:93:87:42:5e:84:34: ed:2c:58:77:6a:05:4f:a6:db:27:00:93:ce:c8:9e:ae:42:9a: b6:55:43:27:ed:43:c3:59:02:01:a4:08:22:fe:7e:d1:2f:0c: 72:bc:e0:07:89:9f:b9:df:85:12:f7:85:cc:19:dc:98:36:c4: 0e:29:c9:b8:1b:c5:2b:c3:c3:51:76:a3:12:3e:3b:f2:f7:8f: 5b:3c:9d:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13OnHrdORlrTlbzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjcxYmFlYmYtMWE3ZC00MGU1LTkwYzktMzcwYzA4OGVi YzcxMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MzQ5MGIzYzMtZGRhMi00NjFlLTljMzUtNmViZTY0OWJmOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12jU19zwnZNM66QPaukLWy/3ejcWnORSn1G0 iNohnPKkMZkpol9ma3w1RXpqU3GbuJmPSF7sKLqrjtbBZ8H9cHNrVW5jYMM/n2/L v3I31kBSZOF0HaeJX7rpgatkN9xSi1H4Fk3A5teHSYiUe7frnlaS0zcCt2q9BrXi NIj5HYdKZrJnuzn9OQe1ZchOku8D+K6cI51IiUZTv2EvwLgiEQl+7JP1qMBLmyxG u+9/G4XwoSirrfVphT72uMzAcFuACHf8H37FXlP5jvPU6dFj4zerQjaL5j9AGQmo zKv8kOW84V2EwOiBezdZzuUVAWTNZQH71sx9WXpOv2XaFVgpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6QcK5Flxyq1k9+UhfEkOFtGQ7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFi YWViZi0xYTdkLTQwZTUtOTBjOS0zNzBjMDg4ZWJjNzEvMDM3MjQxYjYtODg3Zi0z ZmU5LTgwYzgtNzA5MGJhMmU2ZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjcxYmFlYmYtMWE3ZC00MGU1LTkw YzktMzcwYzA4OGViYzcxL2I3MWJhZWJmLTFhN2QtNDBlNS05MGM5LTM3MGMwODhl YmM3MS5jcmwwHwYDVR0jBBgwFoAUqx/esynKT9RyxZYo3wfX3L3BEScwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzFiYWViZi0xYTdkLTQwZTUtOTBjOS0zNzBj MDg4ZWJjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF75IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1OJt6lr19qpFwhcNeXosHE3TqfNv6qEneXkhHuyhbFvp+1d1syuAyD 0XGq0OyBg8XvdBbPwkhsItCiasSCZqJ7V8/E8VLgdlbGy940stGH6TFZ93nKrdIT 68AtzfsGQZwOuNIbb8qP6WfOrS3GrDh97NvdbEt4CnXNXz9Gp5XkYKhlDy4oOipZ RnUZysQO8YWIWXTz4VO8ZsfOqVNpci19y4LyIyM+gZR+d6o8qpOHQl6ENO0sWHdq BU+m2ycAk87Inq5CmrZVQyftQ8NZAgGkCCL+ftEvDHK84AeJn7nfhRL3hcwZ3Jg2 xA4pybgbxSvDw1F2oxI+O/L3j1s8nZ8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:50:57 2026 by rpki-client