$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa File: 281263a3-971c-3965-88f1-27c35caa37de.roa (raw, json) Hash identifier: 0mIAy1G7plhC/Zsa/IJgVMezrFCkbblyK5RJlfm6T08= Subject key identifier: A8:F6:97:FB:B5:4B:74:34:E4:8C:6F:11:14:5B:C1:A3:32:E2:D0:D8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927051760A9C1DD9F4A280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:51:76:0a:9c:1d:d9:f4:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ddf211a1-c7d0-438c-9b17-6ec574e3c492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:68:0c:4e:ca:6f:77:d6:3d:7a:fb:91:4c: 74:26:e6:74:c2:be:7d:ac:cd:9b:b4:23:51:05:03: 80:fd:09:99:1a:db:06:c1:98:d4:22:fc:88:dd:b9: 53:1b:76:5e:ae:31:e1:40:a0:6e:43:9b:22:33:ec: a5:88:ba:cc:14:f6:a6:df:df:2f:b7:59:7a:6f:48: ff:d6:4f:e9:30:bd:1f:f4:f6:1c:33:51:fc:24:6a: f6:c3:89:dc:f8:0f:eb:ad:89:e2:00:f7:56:6d:95: cd:3c:5c:3e:b5:1a:e6:b9:dc:77:5b:88:17:5e:c0: 14:47:e0:af:be:a3:f7:8c:84:c7:c5:12:18:43:e0: c1:1c:59:ac:30:bc:62:ba:5c:f7:cf:c3:78:ab:14: 5a:ee:0a:61:d3:09:9a:22:da:2d:20:a3:11:62:1f: 07:35:a7:50:ba:9d:4a:a2:9b:12:48:e8:b8:d5:3a: 92:68:19:8b:21:72:a6:14:a8:f4:76:8f:a6:10:37: 3e:ba:61:78:1e:43:4c:97:d2:44:9b:f0:10:32:9e: 32:19:4a:9a:f3:cb:7a:e4:c4:10:64:5e:6f:e6:81: e5:ca:39:c3:3b:f1:f8:2b:90:b2:20:11:92:4e:6d: 03:7f:8a:d3:e4:90:67:1a:40:ed:ec:d2:c9:2f:bc: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:97:FB:B5:4B:74:34:E4:8C:6F:11:14:5B:C1:A3:32:E2:D0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/281263a3-971c-3965-88f1-27c35caa37de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:86:07:b4:cd:3e:c2:fd:56:fc:86:7f:6e:29:5d:ba:b8:05: 77:09:b2:71:32:23:75:62:9c:35:d9:24:09:5a:1e:69:19:2d: 9e:fc:0f:3d:ed:42:cd:74:86:e8:3a:7d:6d:6a:84:36:0e:30: 3c:9a:e6:b1:31:69:94:c0:e9:25:f0:57:44:f3:fa:27:72:e9: 2f:9f:39:de:4d:72:c2:8e:4a:df:d4:18:c0:c4:8f:ec:5d:03: aa:41:89:1b:71:27:b4:2a:42:84:84:52:d0:1d:39:46:03:95: 5c:60:b9:93:a2:89:55:ff:a7:2d:1d:30:3d:26:08:48:af:31: d4:c5:93:12:f2:5f:73:e7:71:d4:68:b1:21:78:39:7a:33:f8: 0d:3f:06:27:0a:2d:15:d9:a7:ba:f4:36:1b:ba:65:9e:c4:6b: 9c:03:86:4e:bb:dd:1b:87:29:8f:81:f6:f6:37:9a:18:46:f2: ac:94:32:3f:df:5b:31:26:0f:47:b2:a2:f7:f7:39:44:dd:ce: 18:9f:2a:4b:1d:88:38:97:87:78:3e:60:9d:ea:32:89:43:76: f9:0a:4c:04:b2:0b:46:b8:ed:70:af:7d:ce:30:bc:cb:1c:01: 8d:26:bd:07:7b:2c:84:15:f1:38:b5:a7:66:f6:bc:34:1a:85: fc:04:e1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknBRdgqcHdn0ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGRmMjExYTEtYzdkMC00MzhjLTliMTctNmVjNTc0ZTNjNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKpoDE7Kb3fWPXr7kUx0JuZ0wr59rM2btCNR BQOA/QmZGtsGwZjUIvyI3blTG3ZerjHhQKBuQ5siM+yliLrMFPam398vt1l6b0j/ 1k/pML0f9PYcM1H8JGr2w4nc+A/rrYniAPdWbZXNPFw+tRrmudx3W4gXXsAUR+Cv vqP3jITHxRIYQ+DBHFmsMLxiulz3z8N4qxRa7gph0wmaItotIKMRYh8HNadQup1K opsSSOi41TqSaBmLIXKmFKj0do+mEDc+umF4HkNMl9JEm/AQMp4yGUqa88t65MQQ ZF5v5oHlyjnDO/H4K5CyIBGSTm0Df4rT5JBnGkDt7NLJL7zWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj2l/u1S3Q05IxvERRbwaMy4tDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjgxMjYzYTMtOTcxYy0z OTY1LTg4ZjEtMjdjMzVjYWEzN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqGB7TNPsL9VvyGf24pXbq4BXcJsnEyI3VinDXZJAlaHmkZLZ78Dz3t Qs10hug6fW1qhDYOMDya5rExaZTA6SXwV0Tz+idy6S+fOd5NcsKOSt/UGMDEj+xd A6pBiRtxJ7QqQoSEUtAdOUYDlVxguZOiiVX/py0dMD0mCEivMdTFkxLyX3PncdRo sSF4OXoz+A0/BicKLRXZp7r0Nhu6ZZ7Ea5wDhk673RuHKY+B9vY3mhhG8qyUMj/f WzEmD0eyovf3OUTdzhifKksdiDiXh3g+YJ3qMolDdvkKTASyC0a47XCvfc4wvMsc AY0mvQd7LIQV8Ti1p2b2vDQahfwE4SQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:40 2025 by rpki-client