$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa File: 07a1100e-daf4-3414-94dc-e3a2f9e91782.roa (raw, json) Hash identifier: bnhi/r4+S1FkaTGBdyZJFZj9/Uh9U+OpavbAqUWpdDw= Subject key identifier: E0:AF:5A:58:65:9A:E8:58:10:39:BA:93:84:68:B4:FD:D1:B0:1B:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192700C95AC0262A0842B40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:0c:95:ac:02:62:a0:84:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c3de144e-03a6-4911-8e9f-822855cd2459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:b4:7f:11:b3:39:24:db:79:f2:5a:d0:2e: d0:f7:48:38:ac:3d:9c:39:34:28:77:bd:9d:66:d8: 2e:9e:d3:ac:06:aa:cc:7e:73:7c:77:bb:4c:93:a2: 9c:08:ee:a1:2d:b2:d9:f6:06:49:20:6a:b4:17:fa: 57:15:74:ff:10:23:6b:a7:be:7e:73:45:fc:af:ce: 97:8d:db:36:4e:01:df:c4:7b:dd:98:81:86:8e:1f: 35:dc:d9:01:ef:9f:11:f8:4f:8c:4d:57:6e:ce:85: 96:40:14:de:10:46:33:6c:7e:5e:7b:43:7f:f5:3a: e7:b2:dc:0b:17:ba:97:ae:62:d7:dc:c1:5b:a9:f9: ae:82:1a:57:85:8a:62:39:00:0b:ca:5d:69:7c:a6: d6:97:60:a2:e5:d0:cf:9a:b7:3d:6b:64:01:75:e6: be:ba:16:25:f7:d2:c6:ff:24:6c:78:f3:9f:db:fb: 3e:1d:1c:96:b9:83:8d:19:f4:b2:55:ec:bf:f4:e2: 82:cc:1a:ff:11:56:a0:5c:b3:15:33:82:4a:f0:49: 0e:69:8d:dc:30:88:76:9a:8e:d0:ce:a3:28:ed:8c: 95:20:7b:04:a6:17:bf:60:a3:39:cb:7d:da:69:06: d2:60:05:09:43:e1:f4:79:21:96:e0:f3:8d:63:5c: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:5A:58:65:9A:E8:58:10:39:BA:93:84:68:B4:FD:D1:B0:1B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/07a1100e-daf4-3414-94dc-e3a2f9e91782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:eb:d2:ca:c7:a9:31:88:ca:26:d8:11:2b:97:12:f4:39:b9: 17:32:42:4c:c9:45:c3:1a:04:fc:1e:3f:9b:f4:7a:7a:3b:60: 93:2d:8b:0c:0e:fa:f9:05:ef:a2:4e:7c:21:5b:11:7c:de:f8: 79:c8:5c:c8:a1:d6:14:27:98:f8:ae:e9:5d:dc:b6:6a:a6:13: eb:9b:ba:9a:0f:71:26:6f:5d:d0:b3:15:c4:8f:f5:c3:65:fe: 31:af:19:ca:09:e9:bb:e5:2d:84:5f:4f:27:79:75:f9:8a:47: fd:e4:e4:a3:17:8d:9f:34:65:6d:4c:fc:33:ec:c1:38:6a:65: 9d:94:03:7f:98:00:46:eb:0d:1f:65:dd:c4:28:33:86:32:d1: 90:2f:0e:a9:80:78:99:a7:8d:03:47:6a:eb:0d:fa:4b:ee:01: f6:e3:fe:8c:9a:ae:4f:a7:f7:b5:98:1c:87:99:2c:e7:a0:f6: a3:b0:32:bd:99:2f:21:70:19:ea:5a:fb:b2:7c:70:98:82:77: bf:c3:16:43:c5:4b:a0:5d:ad:03:2a:03:cc:94:d0:5a:b4:41: d7:b7:38:09:84:cf:1e:cb:68:63:cf:c1:ad:a1:2e:fb:6b:ad: 0b:31:f6:7a:fe:03:25:95:cb:0d:18:f7:14:95:f3:9b:16:7a: 24:4b:13:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknAMlawCYqCEK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzNkZTE0NGUtMDNhNi00OTExLThlOWYtODIyODU1Y2QyNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YK0fxGzOSTbefJa0C7Q90g4rD2cOTQod72d ZtguntOsBqrMfnN8d7tMk6KcCO6hLbLZ9gZJIGq0F/pXFXT/ECNrp75+c0X8r86X jds2TgHfxHvdmIGGjh813NkB758R+E+MTVduzoWWQBTeEEYzbH5ee0N/9TrnstwL F7qXrmLX3MFbqfmughpXhYpiOQALyl1pfKbWl2Ci5dDPmrc9a2QBdea+uhYl99LG /yRsePOf2/s+HRyWuYONGfSyVey/9OKCzBr/EVagXLMVM4JK8EkOaY3cMIh2mo7Q zqMo7YyVIHsEphe/YKM5y33aaQbSYAUJQ+H0eSGW4PONY1yKvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCvWlhlmuhYEDm6k4RotP3RsBsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDdhMTEwMGUtZGFmNC0z NDE0LTk0ZGMtZTNhMmY5ZTkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnr0srHqTGIyibYESuXEvQ5uRcyQkzJRcMaBPweP5v0eno7YJMtiwwO +vkF76JOfCFbEXze+HnIXMih1hQnmPiu6V3ctmqmE+ubupoPcSZvXdCzFcSP9cNl /jGvGcoJ6bvlLYRfTyd5dfmKR/3k5KMXjZ80ZW1M/DPswThqZZ2UA3+YAEbrDR9l 3cQoM4Yy0ZAvDqmAeJmnjQNHausN+kvuAfbj/oyark+n97WYHIeZLOeg9qOwMr2Z LyFwGepa+7J8cJiCd7/DFkPFS6BdrQMqA8yU0Fq0Qde3OAmEzx7LaGPPwa2hLvtr rQsx9nr+AyWVyw0Y9xSV85sWeiRLE4Y= -----END CERTIFICATE-----Generated at Sat Nov 1 15:22:01 2025 by rpki-client