$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa File: 05e775f4-e043-3679-a555-b20b6a536c8a.roa (raw, json) Hash identifier: YKIpFHXv24okZV/7k0P1T8u5iATSmKqDqBZ+qEv66hc= Subject key identifier: 90:12:D4:2C:9B:23:71:13:4F:A0:6C:CD:DA:32:5F:85:DD:62:A2:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927063516FF55E8656F740 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:63:51:6f:f5:5e:86:56:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=40732737-b266-4e1b-a0aa-fdea510b594d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e0:16:a2:be:69:7b:74:37:52:07:06:9b:8c: fa:00:c7:31:d4:b7:4a:e6:4d:d5:61:a3:c2:ec:da: 9e:8c:34:ca:d5:e5:8f:c2:fe:33:b5:c0:07:f3:a3: d2:b4:31:63:30:ee:19:cb:53:07:c0:4e:c3:e7:76: 8d:32:4f:8a:f1:5f:44:7e:41:58:66:41:5f:a6:ae: 03:41:1a:29:de:eb:6f:83:78:8c:eb:17:e0:de:99: 80:46:b0:1d:1e:16:ad:ec:09:b9:cc:91:1a:d7:99: 06:8a:24:05:91:19:dc:91:8a:e0:d9:67:16:67:80: 6e:f2:b0:c4:5b:83:fa:7a:96:3f:a9:a1:37:5d:b9: 0b:2c:4a:c5:2c:85:65:f6:a7:f3:d9:d8:9e:ec:38: f3:17:b9:2c:ed:93:25:cb:e6:b6:45:88:c2:cb:89: c5:2d:2f:0a:20:e9:34:78:4b:5b:99:36:3f:89:d7: a9:a7:c9:08:f8:b2:4c:7b:cd:26:b3:bb:27:62:9e: f4:c5:c6:94:23:21:2c:24:bd:89:de:30:cf:21:26: bc:06:45:3d:c7:27:90:b6:f0:b9:4d:2a:85:a4:08: 9f:18:54:54:e2:fc:df:18:f5:62:2c:31:43:d4:ac: 76:3f:c6:d5:be:37:ac:1c:d2:81:a3:f3:3b:5b:7d: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:D4:2C:9B:23:71:13:4F:A0:6C:CD:DA:32:5F:85:DD:62:A2:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/05e775f4-e043-3679-a555-b20b6a536c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:82:3c:59:02:c2:86:78:11:ba:98:f7:b9:34:7e:42:97:19: 6c:f5:fb:68:ae:38:c6:fa:f0:27:32:16:ce:18:f8:7c:84:8c: 15:f3:a6:6f:76:87:af:3a:1f:6c:d1:84:21:45:6e:1e:4a:47: b1:f8:58:44:1c:4c:58:7f:e6:eb:04:73:57:05:84:5d:eb:44: dd:53:1b:f5:2c:1d:33:6c:e8:c5:07:b9:06:f3:bf:bd:f2:be: 78:c4:6e:75:36:cb:4b:cb:a0:c4:14:06:65:4f:4c:d1:44:e5: ce:32:6c:0b:76:f8:dd:7d:91:8d:e0:84:fd:57:5d:bd:0b:5b: 6b:d9:bb:09:35:bf:30:82:d7:4e:b8:ed:bf:c0:ab:65:22:8c: b2:fe:91:e9:e3:01:1a:7a:9a:16:e2:77:68:df:f3:b0:9b:48: c3:f0:a9:36:a0:48:aa:a3:9b:8a:bc:81:ac:5f:ac:2b:59:3c: 4e:27:66:ca:2a:81:f8:af:4f:c9:dd:54:4d:85:f3:4b:00:89: 8d:f2:72:f6:15:58:97:f4:92:bf:0c:c7:44:5b:11:fd:5c:c2: 34:3d:fa:c9:e9:fc:6a:d4:b2:ce:e0:1b:fe:12:f8:ba:62:75: f7:f3:78:0f:aa:a0:93:48:77:8a:a3:bc:41:44:5e:de:f0:55: e6:db:56:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknBjUW/1XoZW90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NDA3MzI3MzctYjI2Ni00ZTFiLWEwYWEtZmRlYTUxMGI1OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+AWor5pe3Q3UgcGm4z6AMcx1LdK5k3VYaPC 7NqejDTK1eWPwv4ztcAH86PStDFjMO4Zy1MHwE7D53aNMk+K8V9EfkFYZkFfpq4D QRop3utvg3iM6xfg3pmARrAdHhat7Am5zJEa15kGiiQFkRnckYrg2WcWZ4Bu8rDE W4P6epY/qaE3XbkLLErFLIVl9qfz2die7DjzF7ks7ZMly+a2RYjCy4nFLS8KIOk0 eEtbmTY/idepp8kI+LJMe80ms7snYp70xcaUIyEsJL2J3jDPISa8BkU9xyeQtvC5 TSqFpAifGFRU4vzfGPViLDFD1Kx2P8bVvjesHNKBo/M7W30XYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAS1CybI3ETT6BszdoyX4XdYqK/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDVlNzc1ZjQtZTA0My0z Njc5LWE1NTUtYjIwYjZhNTM2YzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+CPFkCwoZ4EbqY97k0fkKXGWz1+2iuOMb68CcyFs4Y+HyEjBXzpm92 h686H2zRhCFFbh5KR7H4WEQcTFh/5usEc1cFhF3rRN1TG/UsHTNs6MUHuQbzv73y vnjEbnU2y0vLoMQUBmVPTNFE5c4ybAt2+N19kY3ghP1XXb0LW2vZuwk1vzCC1064 7b/Aq2UijLL+kenjARp6mhbid2jf87CbSMPwqTagSKqjm4q8gaxfrCtZPE4nZsoq gfivT8ndVE2F80sAiY3ycvYVWJf0kr8Mx0RbEf1cwjQ9+snp/GrUss7gG/4S+Lpi dffzeA+qoJNId4qjvEFEXt7wVebbVj4= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:56 2025 by rpki-client