$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa File: 36a28eda-404c-3721-ad64-936664d3cc28.roa (raw, json) Hash identifier: pKiXh4gXXuhxkKHDoUmyb4vzR9L+/0nYVzrU53mKAmw= Subject key identifier: 67:39:E2:C4:C7:22:6D:EC:7B:38:2A:5A:33:65:1E:22:1D:9D:0C:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927BE4002DB4B30061FE20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7b:e4:00:2d:b4:b3:00:61:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=5cc8c90f-9b30-4f4c-9d0f-44a1e656afee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:cc:37:fe:aa:d7:26:26:62:c3:69:59:35: 99:3c:57:f0:ed:bf:7f:6d:ea:30:cd:6e:b0:70:e5: 97:9c:22:72:bd:21:ba:ae:76:b3:9e:2d:5b:d7:11: 2f:a5:56:42:fc:c8:f9:90:f7:c1:f9:6f:2b:61:cd: 77:76:51:53:c2:60:c1:fc:0a:5b:7d:0f:b7:e3:31: ca:cb:30:99:2d:c4:7a:6b:0d:63:bf:c9:5b:ce:eb: ae:61:cf:70:0a:dc:17:d6:3a:9d:48:14:1e:b9:45: 62:69:69:c9:ef:be:22:ce:08:d8:f9:54:93:2e:93: b5:32:cf:a3:20:66:f7:66:73:80:3f:7c:c1:e3:7a: 05:e1:d1:cc:5e:6c:70:6e:55:90:8a:5b:9d:86:5d: 56:7a:35:de:f7:6e:d9:96:3b:ae:63:b3:63:9a:78: 1f:fd:4c:60:ad:9a:e4:bd:b5:54:a3:86:11:bf:b7: e3:81:76:dd:6a:ff:f9:2d:af:69:ee:4a:f7:c6:63: cb:a5:91:2e:20:b5:fd:53:c4:c4:91:8f:ae:df:6d: 5b:1d:2c:bd:4b:8d:c1:de:a6:fe:a0:3a:f1:12:f6: 89:25:04:c8:21:21:7a:07:2c:9d:65:67:7b:94:10: a4:a8:de:c0:bf:c5:44:ac:81:56:f8:b9:a0:a9:51: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:39:E2:C4:C7:22:6D:EC:7B:38:2A:5A:33:65:1E:22:1D:9D:0C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/36a28eda-404c-3721-ad64-936664d3cc28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:f1:f7:f6:5f:10:6c:64:39:2e:8f:fb:5f:16:e5:6f:9f:67: 43:54:b6:1b:90:4c:47:b0:53:74:65:b9:08:fc:a5:7f:c4:30: 1f:b3:0e:00:54:cd:20:fa:93:fb:cd:37:68:a3:03:65:54:79: b5:06:1c:05:04:6e:42:15:26:b2:0c:db:68:42:2c:b0:60:7f: 48:7e:ac:8c:06:3d:d2:d8:b9:5b:c0:8e:f3:e4:11:c5:1e:05: fb:90:d2:4a:2d:75:8e:27:a2:98:5e:10:33:fe:bf:62:f5:b3: 80:34:ad:48:55:26:6f:07:6f:1c:10:7e:77:67:8a:49:39:4a: 3f:d6:ee:de:ab:8c:d3:81:f2:10:29:82:90:02:6e:fe:24:25: 9d:d8:e1:bc:15:39:dd:27:c2:c8:e1:d7:57:2d:20:03:8c:87: 04:50:70:58:6f:f7:b0:9d:8b:e8:25:10:8d:89:08:66:54:36: 58:32:c9:6f:b9:3d:28:b2:c6:f5:9a:f8:84:69:d4:cc:69:36: 41:7f:f0:b2:26:77:70:8e:64:c0:39:0b:7d:83:fd:51:6a:95: c3:ee:d9:1f:4a:98:93:db:b2:f9:ef:ab:d9:71:f2:38:9e:59: 7e:4c:44:7f:94:ec:48:1b:18:9a:86:62:49:27:12:dc:b8:3e: 85:73:b1:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknvkAC20swBh/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NWNjOGM5MGYtOWIzMC00ZjRjLTlkMGYtNDRhMWU2NTZhZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNfMN/6q1yYmYsNpWTWZPFfw7b9/beowzW6w cOWXnCJyvSG6rnazni1b1xEvpVZC/Mj5kPfB+W8rYc13dlFTwmDB/ApbfQ+34zHK yzCZLcR6aw1jv8lbzuuuYc9wCtwX1jqdSBQeuUViaWnJ774izgjY+VSTLpO1Ms+j IGb3ZnOAP3zB43oF4dHMXmxwblWQiludhl1WejXe927ZljuuY7Njmngf/UxgrZrk vbVUo4YRv7fjgXbdav/5La9p7kr3xmPLpZEuILX9U8TEkY+u321bHSy9S43B3qb+ oDrxEvaJJQTIISF6ByydZWd7lBCkqN7Av8VErIFW+LmgqVEFjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGc54sTHIm3sezgqWjNlHiIdnQyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzZhMjhlZGEtNDA0Yy0z NzIxLWFkNjQtOTM2NjY0ZDNjYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTx9/ZfEGxkOS6P+18W5W+fZ0NUthuQTEewU3RluQj8pX/EMB+zDgBU zSD6k/vNN2ijA2VUebUGHAUEbkIVJrIM22hCLLBgf0h+rIwGPdLYuVvAjvPkEcUe BfuQ0kotdY4nopheEDP+v2L1s4A0rUhVJm8HbxwQfndnikk5Sj/W7t6rjNOB8hAp gpACbv4kJZ3Y4bwVOd0nwsjh11ctIAOMhwRQcFhv97Cdi+glEI2JCGZUNlgyyW+5 PSiyxvWa+IRp1MxpNkF/8LImd3COZMA5C32D/VFqlcPu2R9KmJPbsvnvq9lx8jie WX5MRH+U7EgbGJqGYkknEty4PoVzsak= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:51 2025 by rpki-client