$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa File: 25d792c1-b715-3a27-bacc-040c1e66113b.roa (raw, json) Hash identifier: 76PULi/+hSQfAnLnHJZvZ3JebJvFVnv3hbdih1eDFS4= Subject key identifier: 22:69:28:43:A9:85:6E:20:1F:C7:87:21:CF:81:17:AF:94:0A:07:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926F966941234547344940 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6f:96:69:41:23:45:47:34:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9fcc7316-b679-4abb-a26f-9325ce42c398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:17:73:ad:2b:bc:77:9d:db:c0:18:96:9c: ce:fa:eb:76:9d:ed:ff:e3:07:84:17:04:55:73:0b: 4a:e7:49:af:09:7a:70:f1:03:3e:4d:65:87:45:4e: 83:65:68:dc:67:30:2a:79:63:88:77:dc:af:f8:54: 12:34:29:3e:04:35:1a:9a:bb:7f:69:4f:14:24:37: 4b:d8:98:c0:f4:2c:a8:84:8f:12:ff:74:27:bb:db: 37:2a:a3:59:88:e8:8e:a3:6b:1a:16:7f:81:b4:ab: 7c:ec:51:2f:f8:4b:d6:51:64:97:e2:8a:8c:9d:de: 19:68:2d:b2:36:c4:ad:57:d1:13:f6:af:ad:84:cf: f0:d1:da:e2:eb:ea:aa:9e:b6:a2:0b:c9:96:e4:4a: 9c:8c:5d:02:4c:b0:50:39:f8:e1:3d:8a:26:3e:bd: d3:89:dc:cb:7e:e7:d0:73:25:5a:f6:dc:59:1a:e0: 81:29:36:b3:17:ba:37:82:b0:55:9f:72:ab:ed:d5: 19:d8:4f:ea:f7:21:1e:cd:00:4d:96:b3:a9:44:db: 42:75:ab:7e:4d:34:7c:26:02:3c:34:e7:f8:fa:b1: eb:87:7f:f9:09:52:63:47:9c:5d:a6:89:16:13:6c: 50:ae:aa:83:f1:eb:61:ac:07:0a:b3:17:82:3f:e1: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:69:28:43:A9:85:6E:20:1F:C7:87:21:CF:81:17:AF:94:0A:07:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25d792c1-b715-3a27-bacc-040c1e66113b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:18:76:b3:03:f4:61:f5:4d:93:e5:ba:2a:1c:56:b8:c2:6c: 59:a4:b7:cf:be:c8:80:12:86:5e:13:09:04:19:f8:d9:ac:1a: 1d:ca:80:cc:28:f6:b0:43:97:52:34:45:db:cf:9f:fc:4a:d3: 18:9f:63:64:6f:fc:ed:64:4d:ad:02:a2:0f:e4:ef:2c:c7:80: b5:7a:05:4d:de:4e:29:2c:50:e1:3b:08:e9:b0:c8:2a:7b:c7: d2:f6:b2:6b:f5:b6:fe:9a:2e:36:32:56:f4:a6:eb:06:97:2e: 5e:24:1d:40:81:40:b6:fd:30:0d:66:f8:0a:9d:63:88:e5:d9: c2:9a:0a:a8:f1:16:7a:de:b7:cf:6a:7b:de:51:d7:c2:32:fa: 41:22:91:86:4f:96:b6:e2:97:80:06:98:a2:17:de:18:68:19: 82:95:35:f2:3b:3b:cb:db:e4:01:aa:50:5e:e0:c2:45:46:a0: aa:ec:fc:1e:5a:0d:ab:e8:e2:d2:cb:52:9f:2f:05:a4:77:5d: c0:81:7b:83:00:c2:86:27:c3:07:8b:10:10:7b:ce:62:f5:2a: 5e:34:ad:3b:c3:c2:19:28:29:2c:90:88:77:c5:ab:f7:fb:f9: 95:53:a8:40:99:5a:33:dc:00:2d:11:01:dd:76:28:1a:bd:f9: 18:5b:69:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm+WaUEjRUc0SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OWZjYzczMTYtYjY3OS00YWJiLWEyNmYtOTMyNWNlNDJjMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEXc60rvHed28AYlpzO+ut2ne3/4weEFwRV cwtK50mvCXpw8QM+TWWHRU6DZWjcZzAqeWOId9yv+FQSNCk+BDUamrt/aU8UJDdL 2JjA9CyohI8S/3Qnu9s3KqNZiOiOo2saFn+BtKt87FEv+EvWUWSX4oqMnd4ZaC2y NsStV9ET9q+thM/w0dri6+qqnraiC8mW5EqcjF0CTLBQOfjhPYomPr3TidzLfufQ cyVa9txZGuCBKTazF7o3grBVn3Kr7dUZ2E/q9yEezQBNlrOpRNtCdat+TTR8JgI8 NOf4+rHrh3/5CVJjR5xdpokWE2xQrqqD8ethrAcKsxeCP+HMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJpKEOphW4gH8eHIc+BF6+UCgeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjVkNzkyYzEtYjcxNS0z YTI3LWJhY2MtMDQwYzFlNjYxMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0YdrMD9GH1TZPluiocVrjCbFmkt8++yIAShl4TCQQZ+NmsGh3KgMwo 9rBDl1I0RdvPn/xK0xifY2Rv/O1kTa0Cog/k7yzHgLV6BU3eTiksUOE7COmwyCp7 x9L2smv1tv6aLjYyVvSm6waXLl4kHUCBQLb9MA1m+AqdY4jl2cKaCqjxFnret89q e95R18Iy+kEikYZPlrbil4AGmKIX3hhoGYKVNfI7O8vb5AGqUF7gwkVGoKrs/B5a Davo4tLLUp8vBaR3XcCBe4MAwoYnwweLEBB7zmL1Kl40rTvDwhkoKSyQiHfFq/f7 +ZVTqECZWjPcAC0RAd12KBq9+RhbaTQ= -----END CERTIFICATE-----Generated at Sat Nov 1 15:27:30 2025 by rpki-client