$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa File: 1b23eff5-5443-3da2-8a61-463d33a56c84.roa (raw, json) Hash identifier: gmtFokaGSUOfOE1ov68TxPBdqDjedgJlHOuDS73tQK0= Subject key identifier: 15:19:0D:7B:B7:85:44:23:41:58:D7:BC:2F:0E:46:5E:B5:9D:B8:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BB658AF423F1BA3BB780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bb:65:8a:f4:23:f1:ba:3b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=82aa95d8-acdd-4346-baf7-bb996116501f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:4e:ee:dc:86:66:b1:8c:80:75:03:72:7f: 8c:6a:e3:0a:4f:81:b2:38:40:15:a9:be:ea:35:84: aa:3a:20:76:42:2f:5e:3b:20:e9:98:30:13:7f:7c: c1:5a:d6:4f:fd:9b:7a:e0:62:7a:89:ea:e8:aa:09: a2:ed:30:ae:64:09:3a:f9:70:f0:36:d2:ee:4b:e2: 0a:60:a1:86:cb:47:06:c8:77:3b:f9:ca:08:10:d6: 40:7e:21:f2:6e:db:df:59:d5:9b:d6:92:21:f2:cf: ed:82:41:ae:eb:85:23:e7:f5:e3:46:86:87:c0:4a: d0:73:ec:76:22:9b:3a:ef:5a:70:76:27:bb:31:8d: b9:96:f2:1b:f0:03:f3:75:90:0e:27:55:b2:17:8a: be:03:fe:3f:13:62:ff:df:25:78:66:d5:e0:c5:4c: d1:1d:8b:f8:79:c4:10:94:2b:f8:9f:db:c5:70:e8: d0:7b:5b:60:e6:45:c5:a6:69:b1:45:fa:39:4f:df: fe:fc:d5:60:fa:ac:b1:97:cb:ee:b5:c2:0a:92:fa: 19:2e:18:be:f8:6e:d3:b3:09:32:67:f4:ce:75:c7: af:bf:fb:46:a5:36:36:40:79:10:36:e9:b0:9b:e7: 95:0b:cb:bd:e1:9d:01:98:fe:28:3b:5f:d6:e9:57: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:19:0D:7B:B7:85:44:23:41:58:D7:BC:2F:0E:46:5E:B5:9D:B8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1b23eff5-5443-3da2-8a61-463d33a56c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c8:98:2e:c6:13:de:32:23:dc:2b:19:0e:b4:23:a1:93:cc: 70:ab:f5:ac:89:d4:47:33:a5:90:27:2b:52:0c:3b:e1:6d:1b: fb:87:14:0c:8d:43:3d:fc:b3:37:ee:85:46:34:dd:a4:f5:05: 6c:2e:fc:82:ce:3b:39:5f:74:46:0d:2d:9f:3d:f4:b3:98:ee: de:ec:44:f7:b7:8f:3f:65:51:34:6d:32:cb:75:86:27:8f:71: e5:b7:46:b2:31:41:9a:33:a9:61:b9:5d:0b:c6:06:05:a0:1d: 1c:bc:20:df:04:f3:54:ee:b7:b2:72:e7:02:68:a5:43:01:62: fb:c7:62:b4:44:5d:9f:db:d8:c0:c5:ba:2f:df:30:62:03:69: 3e:f2:cc:e7:c5:35:8f:cf:cb:a3:e3:d3:00:60:8f:1b:74:8d: ff:3f:42:ab:60:f7:d3:e3:2d:e8:31:a0:54:31:27:20:3d:e5: 0c:8d:d8:0d:41:66:bb:ed:6e:a4:33:71:c8:be:e1:06:c6:69: e5:06:85:93:8b:63:5a:01:65:a4:0e:14:c1:a5:ae:d9:f4:db: 94:db:11:4b:ae:5a:e0:dd:7b:da:bb:10:50:39:fa:07:6e:84: 80:d1:ac:cb:15:3d:d5:d2:56:fc:d9:6d:c2:23:b6:21:48:ca: d5:9f:87:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7tlivQj8bo7t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODJhYTk1ZDgtYWNkZC00MzQ2LWJhZjctYmI5OTYxMTY1MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv5O7tyGZrGMgHUDcn+MauMKT4GyOEAVqb7q NYSqOiB2Qi9eOyDpmDATf3zBWtZP/Zt64GJ6ieroqgmi7TCuZAk6+XDwNtLuS+IK YKGGy0cGyHc7+coIENZAfiHybtvfWdWb1pIh8s/tgkGu64Uj5/XjRoaHwErQc+x2 Ips671pwdie7MY25lvIb8APzdZAOJ1WyF4q+A/4/E2L/3yV4ZtXgxUzRHYv4ecQQ lCv4n9vFcOjQe1tg5kXFpmmxRfo5T9/+/NVg+qyxl8vutcIKkvoZLhi++G7Tswky Z/TOdcevv/tGpTY2QHkQNumwm+eVC8u94Z0BmP4oO1/W6VcjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUZDXu3hUQjQVjXvC8ORl61nbgTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMWIyM2VmZjUtNTQ0My0z ZGEyLThhNjEtNDYzZDMzYTU2Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDImC7GE94yI9wrGQ60I6GTzHCr9ayJ1EczpZAnK1IMO+FtG/uHFAyN Qz38szfuhUY03aT1BWwu/ILOOzlfdEYNLZ899LOY7t7sRPe3jz9lUTRtMst1hieP ceW3RrIxQZozqWG5XQvGBgWgHRy8IN8E81Tut7Jy5wJopUMBYvvHYrREXZ/b2MDF ui/fMGIDaT7yzOfFNY/Py6Pj0wBgjxt0jf8/Qqtg99PjLegxoFQxJyA95QyN2A1B ZrvtbqQzcci+4QbGaeUGhZOLY1oBZaQOFMGlrtn025TbEUuuWuDde9q7EFA5+gdu hIDRrMsVPdXSVvzZbcIjtiFIytWfh9c= -----END CERTIFICATE-----Generated at Sat Nov 1 15:23:42 2025 by rpki-client