$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa File: 1598ca3d-5035-3b50-aa15-360fada01876.roa (raw, json) Hash identifier: rCDfkw3L9YzrefhvqUXBQsPJ8arYVoZtj8IMTDn+Vmw= Subject key identifier: FA:31:0B:63:5B:A3:74:E2:5B:6B:EA:EE:9D:C1:8C:DA:FE:57:2B:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BA4869A3C8411A092C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ba:48:69:a3:c8:41:1a:09:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=6b26682b-35e8-485c-ab38-a32e8d9d05a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:b3:40:20:86:97:92:da:14:6d:e6:a8:27: 0b:40:8d:55:31:e1:1b:49:42:ea:03:e5:89:9e:83: 81:e9:23:37:75:22:1b:5f:a8:00:03:9b:04:f7:ae: c3:ca:a4:b4:1e:e9:16:b6:8d:2a:66:16:26:ed:78: 57:84:03:08:0d:93:90:1d:cb:07:4b:4e:3a:5f:2b: 63:f8:1c:f1:45:8e:b8:bf:d8:74:69:48:e5:ac:7e: e0:77:72:93:b1:6c:fa:29:92:4e:02:b4:74:83:a6: 58:65:2a:b6:9c:b7:49:57:a5:d1:04:3b:77:52:0c: b1:3e:32:f9:c2:ca:0b:4d:df:14:9a:6d:57:1c:bf: 77:81:b1:40:65:09:fb:c3:12:ef:99:e1:2f:dd:fe: 8c:05:3a:c2:79:45:76:ec:9e:2e:56:77:56:13:7b: 8d:55:95:ee:c1:16:a0:85:c8:16:ed:b2:78:d6:e9: 11:08:ca:62:90:2d:ef:9d:07:49:77:30:ec:12:87: 83:00:ac:2f:2d:53:c3:ea:e6:a9:9a:ec:3e:61:2a: be:5a:c2:43:f1:8e:c7:11:e2:ad:1d:c6:02:7f:0a: 3e:24:94:69:99:e9:e9:1a:d8:b9:a0:1d:f2:3a:de: 6e:3d:ad:94:9c:c6:e7:0f:fb:69:d0:38:4c:6e:d9: 99:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:31:0B:63:5B:A3:74:E2:5B:6B:EA:EE:9D:C1:8C:DA:FE:57:2B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1598ca3d-5035-3b50-aa15-360fada01876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:54:e0:4b:73:38:40:2f:69:bb:6c:c9:db:a2:4f:e7:13:6d: e1:1b:0d:17:dc:73:2c:c5:5e:ac:92:eb:02:11:6a:9d:97:15: cb:89:e7:bc:53:bd:b3:bd:aa:c2:92:a3:e5:25:5c:9e:df:fe: bc:6b:06:0a:65:02:10:9a:81:7e:6a:10:36:be:20:ed:55:fa: 3c:df:af:46:46:28:fa:29:84:a6:93:fc:0c:fe:40:82:d3:4c: a7:28:a3:1f:4e:fa:50:27:94:fe:52:d5:3e:d6:76:82:3c:87: 9f:a0:44:3d:9a:e9:a1:2f:d0:87:eb:4d:d8:a9:77:eb:c9:e0: d9:ab:ce:54:9f:4c:1a:92:47:42:39:05:32:a4:c3:c6:68:f0: 38:63:7b:ce:d5:5d:bf:a4:23:b8:5c:5a:b8:c3:0a:2e:50:42: 08:27:2d:30:a0:eb:79:a4:40:7f:6d:84:43:1d:8f:63:4c:36: cc:3a:a4:50:18:d7:46:5f:9c:22:e4:4e:ac:42:42:b3:46:d7: c4:8f:70:b4:5a:af:38:a8:2b:74:4e:09:9d:04:79:cf:21:2a: 49:31:c4:c3:c7:b3:ca:d2:be:1f:44:27:d7:2e:22:e2:f1:3b: 8d:06:68:ba:0b:25:2f:c9:18:a2:56:43:bd:86:fa:c5:2a:f7: 06:d1:30:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7pIaaPIQRoJLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NmIyNjY4MmItMzVlOC00ODVjLWFiMzgtYTMyZThkOWQwNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktmzQCCGl5LaFG3mqCcLQI1VMeEbSULqA+WJ noOB6SM3dSIbX6gAA5sE967DyqS0HukWto0qZhYm7XhXhAMIDZOQHcsHS046Xytj +BzxRY64v9h0aUjlrH7gd3KTsWz6KZJOArR0g6ZYZSq2nLdJV6XRBDt3UgyxPjL5 wsoLTd8Umm1XHL93gbFAZQn7wxLvmeEv3f6MBTrCeUV27J4uVndWE3uNVZXuwRag hcgW7bJ41ukRCMpikC3vnQdJdzDsEoeDAKwvLVPD6uapmuw+YSq+WsJD8Y7HEeKt HcYCfwo+JJRpmenpGti5oB3yOt5uPa2UnMbnD/tp0DhMbtmZ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPoxC2Nbo3TiW2vq7p3BjNr+Vys9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU5OGNhM2QtNTAzNS0z YjUwLWFhMTUtMzYwZmFkYTAxODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVU4EtzOEAvabtsyduiT+cTbeEbDRfccyzFXqyS6wIRap2XFcuJ57xT vbO9qsKSo+UlXJ7f/rxrBgplAhCagX5qEDa+IO1V+jzfr0ZGKPophKaT/Az+QILT TKcoox9O+lAnlP5S1T7WdoI8h5+gRD2a6aEv0IfrTdipd+vJ4NmrzlSfTBqSR0I5 BTKkw8Zo8Dhje87VXb+kI7hcWrjDCi5QQggnLTCg63mkQH9thEMdj2NMNsw6pFAY 10ZfnCLkTqxCQrNG18SPcLRarzioK3ROCZ0Eec8hKkkxxMPHs8rSvh9EJ9cuIuLx O40GaLoLJS/JGKJWQ72G+sUq9wbRMLA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:47 2025 by rpki-client