$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa File: 2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa (raw, json) Hash identifier: dWoiJYyunKt3stYsDQ22c5mR5VcR7zy5s+zFu10x4zk= Subject key identifier: D4:B7:49:36:21:C0:FE:BE:DC:92:B0:9E:8D:D6:16:5A:00:D2:78:83 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927098785F2A10A7DB2E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:98:78:5f:2a:10:a7:db:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=73c84b0d-c8de-4e91-a25d-5a2e9b8fbd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:37:1e:39:f1:2f:dd:d8:8c:f9:b9:e6:e2:79: f4:c6:b7:ee:4a:d7:d9:40:61:6b:ea:ae:74:f7:fa: b1:c6:11:73:6d:57:d7:7f:b4:f1:92:1d:86:ae:86: 80:0d:40:7f:0e:68:cd:54:74:98:cf:0a:2f:87:e3: d2:7c:ca:f7:c8:20:df:a7:f8:98:42:26:1b:69:35: e5:2e:bf:32:9e:59:02:b8:27:a5:73:d4:00:6e:73: 8a:43:be:a3:13:2a:b6:c4:ae:e2:57:2f:52:8e:9a: a3:4e:11:51:59:b8:f3:e9:20:8e:e1:e5:87:b3:62: 8f:58:ba:d2:69:58:61:43:87:81:be:02:77:99:03: 6f:b5:14:42:65:fb:61:b5:cb:2c:19:f7:15:15:53: 4a:93:b0:26:0e:b3:39:46:70:69:ed:4e:50:a3:0c: 2f:b1:77:01:0a:5e:6c:ff:1c:39:c4:7b:37:77:81: 15:43:3b:ae:de:92:91:46:a2:b3:99:d0:4c:af:ca: ea:f7:2f:2b:a2:ae:b0:fb:db:50:26:be:82:1f:a1: 7d:2a:9b:25:06:f2:4d:d5:50:84:47:24:3c:51:fb: 56:78:99:03:eb:eb:a6:07:29:fb:35:41:f8:6d:f7: 98:04:d3:14:ab:a1:ec:c2:d0:34:a5:4d:08:49:18: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:49:36:21:C0:FE:BE:DC:92:B0:9E:8D:D6:16:5A:00:D2:78:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2e58a6dd-f3ef-3bb5-98b1-0666eedb05a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:14:5f:51:76:a7:5c:73:25:00:5d:89:0f:c1:65:b1:d6:a3: 03:03:84:40:92:d1:4f:60:a2:07:0c:f4:af:4e:3b:d1:31:e5: 6b:11:e9:dc:7b:3f:00:a0:05:e7:5c:cd:15:0b:af:cf:ad:64: 0d:ab:3c:f1:cf:8e:97:4f:14:7f:db:88:4f:26:44:37:da:07: b9:db:08:5c:88:e2:86:06:c5:0e:40:f1:06:57:91:92:d4:01: 97:ce:7b:e9:59:f1:a3:40:9a:89:15:af:c7:b5:b0:5e:88:be: 1e:6b:86:f1:38:cc:a4:f1:c2:a0:5c:63:10:7e:a4:95:b0:74: 88:65:d5:3e:82:86:ec:e4:ca:2f:74:9f:17:ee:fe:80:7f:e4: d2:0a:5d:f0:43:fc:ba:4e:f4:b8:a5:8b:65:06:67:51:c7:4f: f3:63:f2:09:04:1d:dd:bb:90:a8:61:2a:5c:c4:08:a2:54:16: dd:93:35:ea:8b:ba:87:d4:87:a0:6d:9d:6c:1f:0a:d4:fd:63: c6:54:04:06:7f:50:a5:81:95:9a:a9:5f:86:65:d0:d3:4e:e9: 38:bb:42:cb:d0:4f:9e:8e:20:94:59:b6:18:5a:26:8f:5a:6e: 2a:30:2c:c8:a7:db:d7:2a:1c:21:b0:0e:48:62:fc:90:9b:d1: 7b:2d:ac:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknCYeF8qEKfbLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NzNjODRiMGQtYzhkZS00ZTkxLWEyNWQtNWEyZTliOGZiZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DceOfEv3diM+bnm4nn0xrfuStfZQGFr6q50 9/qxxhFzbVfXf7Txkh2GroaADUB/DmjNVHSYzwovh+PSfMr3yCDfp/iYQiYbaTXl Lr8ynlkCuCelc9QAbnOKQ76jEyq2xK7iVy9SjpqjThFRWbjz6SCO4eWHs2KPWLrS aVhhQ4eBvgJ3mQNvtRRCZfthtcssGfcVFVNKk7AmDrM5RnBp7U5QowwvsXcBCl5s /xw5xHs3d4EVQzuu3pKRRqKzmdBMr8rq9y8roq6w+9tQJr6CH6F9KpslBvJN1VCE RyQ8UftWeJkD6+umByn7NUH4bfeYBNMUq6HswtA0pU0ISRi+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS3STYhwP6+3JKwno3WFloA0niDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmU1OGE2ZGQtZjNlZi0z YmI1LTk4YjEtMDY2NmVlZGIwNWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEUX1F2p1xzJQBdiQ/BZbHWowMDhECS0U9gogcM9K9OO9Ex5WsR6dx7 PwCgBedczRULr8+tZA2rPPHPjpdPFH/biE8mRDfaB7nbCFyI4oYGxQ5A8QZXkZLU AZfOe+lZ8aNAmokVr8e1sF6Ivh5rhvE4zKTxwqBcYxB+pJWwdIhl1T6Chuzkyi90 nxfu/oB/5NIKXfBD/LpO9Lili2UGZ1HHT/Nj8gkEHd27kKhhKlzECKJUFt2TNeqL uofUh6BtnWwfCtT9Y8ZUBAZ/UKWBlZqpX4Zl0NNO6Ti7QsvQT56OIJRZthhaJo9a biowLMin29cqHCGwDkhi/JCb0XstrM4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:19 2025 by rpki-client