$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa File: 0da6d8fd-8256-3417-8ced-8017e077244e.roa (raw, json) Hash identifier: EI42qmH9uu0weDFv4HcceVVXXGh/vnE5Y30jNaj5e2Y= Subject key identifier: 27:6A:3B:07:C1:39:4D:DF:64:7E:4F:D8:F9:88:EB:08:86:3E:74:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C8590885AF127BA59500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c8:59:08:85:af:12:7b:a5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=acc747d8-6fb2-4fe5-b164-96a9bc7c0972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:9d:f6:ee:25:f1:c7:7d:04:ef:38:e4:6e: 9d:e9:10:fc:de:e3:db:55:c1:56:13:c4:36:03:85: 42:1f:9f:eb:7d:de:92:f8:a5:bc:46:d5:62:46:7d: 58:bc:5c:7c:2e:95:67:78:e9:ca:dc:65:4f:53:02: b0:59:80:39:18:9f:55:47:4e:22:67:5c:48:4c:dc: 3b:4a:75:0d:5a:31:47:c2:29:99:9a:2b:70:67:eb: 28:2b:91:31:68:06:76:ef:84:63:4c:d4:fc:45:3b: d2:72:91:77:9a:7f:d8:06:d0:40:37:72:c4:4b:23: 58:e9:62:cf:f9:5f:71:7a:88:8b:eb:f7:84:3a:ba: 3c:35:0b:8f:bc:13:fd:eb:95:1c:5d:fd:9b:4a:52: 71:71:87:d7:4a:01:0b:03:04:16:1b:67:c8:40:4e: a7:a8:99:aa:a2:90:7a:77:1f:25:e9:84:63:43:78: f8:0e:a3:b6:13:5a:5b:e5:a0:86:24:9c:e7:a7:a7: db:70:64:e5:f7:39:d5:8d:88:b9:86:86:7a:af:dd: f2:66:e7:80:12:7e:48:3e:64:04:cb:51:16:a3:34: ef:23:2f:4c:00:e7:67:45:42:10:e9:cf:08:d3:03: 4f:e2:8a:da:3c:d4:05:89:04:97:79:a8:d6:5d:dd: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6A:3B:07:C1:39:4D:DF:64:7E:4F:D8:F9:88:EB:08:86:3E:74:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0da6d8fd-8256-3417-8ced-8017e077244e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1f:5e:d1:4b:e1:bf:15:19:b6:b4:2b:a6:60:7b:af:09:49: 10:e7:14:7b:1a:65:46:c3:21:ee:52:44:19:e6:9c:2f:21:0d: 2e:d7:30:66:7d:73:dd:1c:2c:da:80:c1:61:e2:4d:6a:60:d4: d6:45:84:86:fd:10:4d:8d:4a:d0:ba:5b:bb:85:5f:04:ac:18: ed:ac:c9:06:65:5f:8a:a6:86:9a:28:cd:ba:c9:92:b8:64:1a: 6d:a5:45:81:85:f3:ec:2d:bd:59:a2:a4:c5:e5:19:1a:ae:2b: 74:7d:aa:95:bf:da:9b:68:96:de:08:ec:87:6e:01:05:8f:61: 36:ff:de:23:8e:26:ac:2c:1e:83:c5:26:d5:3f:58:d4:10:08: c4:93:31:f5:de:f0:41:78:d7:86:5e:91:8e:f6:43:e8:6f:99: fa:ec:7d:09:7e:8c:1c:9d:7e:62:91:a4:c3:b8:c3:b1:56:58: 97:1e:ca:08:df:8a:31:64:c2:98:28:a4:3a:10:f3:30:af:1d: 87:18:7c:56:e7:81:07:cd:58:6a:ad:c6:08:e2:82:71:ed:32: f0:80:f4:a2:d6:f4:64:ea:58:b0:0d:15:80:bf:53:41:f4:16: f8:29:6a:db:89:7d:fa:a0:98:27:9d:f3:0b:a5:e5:28:6a:1a: d2:11:38:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8hZCIWvEnullQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YWNjNzQ3ZDgtNmZiMi00ZmU1LWIxNjQtOTZhOWJjN2MwOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhid9u4l8cd9BO845G6d6RD83uPbVcFWE8Q2 A4VCH5/rfd6S+KW8RtViRn1YvFx8LpVneOnK3GVPUwKwWYA5GJ9VR04iZ1xITNw7 SnUNWjFHwimZmitwZ+soK5ExaAZ274RjTNT8RTvScpF3mn/YBtBAN3LESyNY6WLP +V9xeoiL6/eEOro8NQuPvBP965UcXf2bSlJxcYfXSgELAwQWG2fIQE6nqJmqopB6 dx8l6YRjQ3j4DqO2E1pb5aCGJJznp6fbcGTl9znVjYi5hoZ6r93yZueAEn5IPmQE y1EWozTvIy9MAOdnRUIQ6c8I0wNP4oraPNQFiQSXeajWXd2L0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdqOwfBOU3fZH5P2PmI6wiGPnQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGRhNmQ4ZmQtODI1Ni0z NDE3LThjZWQtODAxN2UwNzcyNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEfXtFL4b8VGba0K6Zge68JSRDnFHsaZUbDIe5SRBnmnC8hDS7XMGZ9 c90cLNqAwWHiTWpg1NZFhIb9EE2NStC6W7uFXwSsGO2syQZlX4qmhpoozbrJkrhk Gm2lRYGF8+wtvVmipMXlGRquK3R9qpW/2ptolt4I7IduAQWPYTb/3iOOJqwsHoPF JtU/WNQQCMSTMfXe8EF414ZekY72Q+hvmfrsfQl+jBydfmKRpMO4w7FWWJceygjf ijFkwpgopDoQ8zCvHYcYfFbngQfNWGqtxgjignHtMvCA9KLW9GTqWLANFYC/U0H0 FvgpatuJffqgmCed8wul5ShqGtIROOw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:53 2025 by rpki-client