$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa File: 0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa (raw, json) Hash identifier: Y9swkAZwOIk6bNBMhPKTUWhiMS9cJjxQipppM8pRJ6g= Subject key identifier: 9C:C1:56:AA:29:35:08:0B:F7:54:0D:C9:6B:B0:85:43:2C:69:4F:DB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927D009D0EF75B4932D400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:00:9d:0e:f7:5b:49:32:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=dde9e634-7753-4592-ae7d-b84dff3912e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:9e:1e:52:bd:d6:8e:2a:ee:7d:d9:2b:52: 07:0d:20:b9:41:18:08:4e:a2:70:f6:0e:40:90:14: d5:fd:3f:d2:9b:9e:4f:b7:2f:97:b2:7c:11:03:5f: 36:5d:9b:9b:0a:cf:56:81:8a:25:6a:33:7c:1a:51: b6:0f:36:f2:92:cd:56:3a:6f:98:0b:05:d1:a7:a9: 93:f3:8f:08:9b:b8:17:9d:2c:f8:75:0b:94:1f:b1: ca:bd:68:1d:a1:b8:04:6d:09:9b:77:c2:ba:49:3b: 53:6e:2e:12:c6:3c:28:6f:7c:9f:70:73:0f:d6:8a: 0d:ac:45:89:6c:7b:69:25:17:7b:71:00:39:82:a4: ae:5a:c3:63:75:c4:d4:72:01:17:56:4f:97:eb:bc: e3:2b:df:26:8c:2f:e8:09:dc:cc:32:4f:a7:13:62: b8:4a:e8:22:9f:2c:64:eb:8d:16:a0:65:fd:b7:fe: f0:ae:25:a4:91:9f:ad:8b:fb:dd:4c:56:db:fb:e9: ac:72:3f:ae:8f:38:12:86:ca:31:39:f6:fe:25:de: 8c:4d:6e:3b:c0:53:de:5e:d7:22:db:5b:56:1d:f3: 31:46:56:de:07:36:80:6f:09:21:fa:4f:eb:60:1f: 7a:5c:57:60:16:9c:d7:4d:1c:da:ae:83:6b:9d:72: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:56:AA:29:35:08:0B:F7:54:0D:C9:6B:B0:85:43:2C:69:4F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0d76467d-0d4d-3e2b-ad26-dd2ed8276f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:04:84:2a:a0:06:41:95:7c:a6:57:63:94:b7:72:3d:7f:3d: 48:4d:ff:8e:a4:a9:3a:7e:c6:18:a7:30:0f:c6:bc:b4:f9:1e: 6a:1f:9a:b1:04:dc:55:27:55:db:ef:73:34:f8:de:7c:13:cb: 28:9d:be:86:da:ee:3d:35:7e:99:79:36:b5:dc:a7:c0:6e:2d: 86:b0:d0:76:f9:03:f5:ff:68:a2:7a:56:43:c3:f7:55:9b:5f: 2c:56:c1:a4:46:35:a0:bc:f0:ce:73:e3:82:c3:b2:05:a0:40: b3:96:9c:72:61:b6:a8:44:04:2e:b3:34:e9:fb:89:15:0c:59: ab:e3:d5:c8:8a:c8:ff:76:82:58:16:8c:bb:57:bf:47:69:82: bb:9a:02:a2:6b:00:91:77:18:0d:e9:62:4d:82:3f:13:d9:1f: e0:11:77:9b:0e:2a:aa:c5:2e:07:8d:3f:97:63:fa:d8:7d:a7: 2b:f2:1b:58:30:77:74:1d:44:13:33:2f:19:e2:83:81:ca:4c: ef:8b:4f:b8:7e:a0:a6:d7:e1:87:91:3e:70:20:06:c2:de:88: a4:e1:46:46:aa:d2:78:6b:24:7e:33:3b:46:c2:38:9e:dd:6e: f6:ac:ab:af:f1:da:32:1d:b0:2e:ba:75:9f:f2:ba:26:1c:c1: 6c:6d:c5:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn0AnQ73W0ky1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGRlOWU2MzQtNzc1My00NTkyLWFlN2QtYjg0ZGZmMzkxMmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr22eHlK91o4q7n3ZK1IHDSC5QRgITqJw9g5A kBTV/T/Sm55Pty+XsnwRA182XZubCs9WgYolajN8GlG2Dzbyks1WOm+YCwXRp6mT 848Im7gXnSz4dQuUH7HKvWgdobgEbQmbd8K6STtTbi4Sxjwob3yfcHMP1ooNrEWJ bHtpJRd7cQA5gqSuWsNjdcTUcgEXVk+X67zjK98mjC/oCdzMMk+nE2K4Suginyxk 640WoGX9t/7wriWkkZ+ti/vdTFbb++mscj+ujzgShsoxOfb+Jd6MTW47wFPeXtci 21tWHfMxRlbeBzaAbwkh+k/rYB96XFdgFpzXTRzaroNrnXI/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzBVqopNQgL91QNyWuwhUMsaU/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGQ3NjQ2N2QtMGQ0ZC0z ZTJiLWFkMjYtZGQyZWQ4Mjc2ZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQEhCqgBkGVfKZXY5S3cj1/PUhN/46kqTp+xhinMA/GvLT5HmofmrEE 3FUnVdvvczT43nwTyyidvoba7j01fpl5NrXcp8BuLYaw0Hb5A/X/aKJ6VkPD91Wb XyxWwaRGNaC88M5z44LDsgWgQLOWnHJhtqhEBC6zNOn7iRUMWavj1ciKyP92glgW jLtXv0dpgruaAqJrAJF3GA3pYk2CPxPZH+ARd5sOKqrFLgeNP5dj+th9pyvyG1gw d3QdRBMzLxnig4HKTO+LT7h+oKbX4YeRPnAgBsLeiKThRkaq0nhrJH4zO0bCOJ7d bvasq6/x2jIdsC66dZ/yuiYcwWxtxfQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:20 2025 by rpki-client