$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa File: 38eb6d78-9c7d-3fdb-8374-7606a8115975.roa (raw, json) Hash identifier: V2iQMn6ftpVdcYrJXF8j3BBveQJZ29GpS6qhx+pAaSs= Subject key identifier: DF:95:A7:B1:81:4B:8A:3A:E5:0B:A0:98:C4:68:0D:9F:D8:D2:8D:31 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926FBCE57C1506B0180B00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6f:bc:e5:7c:15:06:b0:18:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=e8845564-5745-4ddf-a132-4704f58829fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:70:19:8f:11:90:d8:9e:3d:c6:da:7d:7d: 47:d9:1b:30:ed:4e:d8:00:58:01:08:59:91:62:0c: 85:ce:2e:31:76:db:3f:df:28:b9:8c:be:8c:8b:ca: 4e:69:04:fd:14:98:72:45:51:6a:11:92:ce:11:3f: 47:5b:c5:5e:e2:fe:f3:47:d7:cd:a2:cb:17:81:4b: 8f:3d:68:99:10:4a:18:bb:70:df:fd:ef:65:bf:b9: 94:ec:92:c2:0d:88:6c:cf:de:13:4a:f0:1e:4e:2f: 0c:32:34:60:da:ee:a4:37:b7:0b:50:7b:98:67:a4: f3:91:59:0e:1d:1a:90:74:71:06:31:52:32:a9:2a: f3:1d:e3:1f:5d:de:5e:66:35:4c:52:44:09:d1:76: 53:67:39:38:87:8e:58:75:8d:48:b1:05:80:ff:21: cc:bf:e7:43:34:f0:37:1d:af:93:d5:ef:0c:b6:08: 5c:e5:1e:e7:5a:8d:f2:e8:59:6f:c6:e4:99:a4:0c: d1:6e:12:5a:ef:60:64:43:83:45:07:87:c0:82:ec: a2:24:e3:27:98:a9:0c:4b:30:90:37:48:90:af:67: 37:e9:cc:0d:17:c9:44:c2:46:1c:8a:02:99:84:95: c0:75:c6:f6:e1:e4:5f:81:10:e6:d7:a1:49:b5:19: 0b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:95:A7:B1:81:4B:8A:3A:E5:0B:A0:98:C4:68:0D:9F:D8:D2:8D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38eb6d78-9c7d-3fdb-8374-7606a8115975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:3f:26:c4:f9:24:37:58:e7:60:79:8c:75:84:bc:59:53:e5: e8:bc:34:e6:37:bf:2a:0b:30:50:f7:77:70:0f:12:7c:9c:9e: 7f:cd:db:37:4e:77:ad:73:ca:40:3b:f0:ab:de:d7:fb:ee:93: ce:40:bd:6a:79:91:0d:93:72:b5:2f:c7:c9:bd:99:bd:cf:35: d6:d7:72:59:69:5b:67:2c:19:b4:2c:11:ed:4b:63:00:3e:1a: 73:48:05:b2:b4:a9:a5:36:c4:12:01:d5:b0:ad:53:41:89:eb: b2:8b:fa:80:5d:79:ba:13:4e:19:61:94:d2:e8:44:94:0e:d7: 9b:b5:03:68:74:4d:7a:e5:e3:ec:d6:55:16:13:11:17:0f:ce: ba:f9:ac:97:14:e0:b2:3e:90:2b:d9:e2:14:42:ee:d8:97:63: 9b:3d:42:da:fe:41:6e:af:a8:19:f0:23:08:c0:d5:14:95:5c: 15:45:27:23:0f:81:dc:12:42:58:c9:57:84:24:08:9e:91:d2: 2e:2c:54:73:01:31:06:d3:64:54:cd:7f:33:eb:37:39:59:8b: 29:8e:c1:cb:0e:6d:bf:df:a8:c6:1a:e7:23:87:7a:e8:2d:44: fe:81:88:53:3b:f9:b8:62:84:56:5f:e2:61:b5:fc:75:75:b5: ec:49:68:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm+85XwVBrAYCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZTg4NDU1NjQtNTc0NS00ZGRmLWExMzItNDcwNGY1ODgyOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B1wGY8RkNiePcbafX1H2Rsw7U7YAFgBCFmR YgyFzi4xdts/3yi5jL6Mi8pOaQT9FJhyRVFqEZLOET9HW8Ve4v7zR9fNossXgUuP PWiZEEoYu3Df/e9lv7mU7JLCDYhsz94TSvAeTi8MMjRg2u6kN7cLUHuYZ6TzkVkO HRqQdHEGMVIyqSrzHeMfXd5eZjVMUkQJ0XZTZzk4h45YdY1IsQWA/yHMv+dDNPA3 Ha+T1e8Mtghc5R7nWo3y6FlvxuSZpAzRbhJa72BkQ4NFB4fAguyiJOMnmKkMSzCQ N0iQr2c36cwNF8lEwkYcigKZhJXAdcb24eRfgRDm16FJtRkLpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+Vp7GBS4o65QugmMRoDZ/Y0o0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhlYjZkNzgtOWM3ZC0z ZmRiLTgzNzQtNzYwNmE4MTE1OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4/JsT5JDdY52B5jHWEvFlT5ei8NOY3vyoLMFD3d3APEnycnn/N2zdO d61zykA78Kve1/vuk85AvWp5kQ2TcrUvx8m9mb3PNdbXcllpW2csGbQsEe1LYwA+ GnNIBbK0qaU2xBIB1bCtU0GJ67KL+oBdeboTThlhlNLoRJQO15u1A2h0TXrl4+zW VRYTERcPzrr5rJcU4LI+kCvZ4hRC7tiXY5s9Qtr+QW6vqBnwIwjA1RSVXBVFJyMP gdwSQljJV4QkCJ6R0i4sVHMBMQbTZFTNfzPrNzlZiymOwcsObb/fqMYa5yOHeugt RP6BiFM7+bhihFZf4mG1/HV1texJaEo= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:04 2025 by rpki-client