$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e571bbf-c872-376a-828b-d4e85047ef6c.roa File: 3e571bbf-c872-376a-828b-d4e85047ef6c.roa (raw, json) Hash identifier: NaVVUadhbhbGZY9IAghV+gXa8WKg0T9pRm6+hO6fq3s= Subject key identifier: 19:74:BB:B8:55:57:DA:3B:10:0E:E7:31:ED:12:C4:F7:3C:EF:1A:87 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927D7BB28BC128D60D5080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e571bbf-c872-376a-828b-d4e85047ef6c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:7b:b2:8b:c1:28:d6:0d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=01cbe2be-ba89-4378-a91c-60338b97115c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:d2:47:5c:de:1c:4f:cd:a7:8e:53:39:8e: ec:7e:17:dd:dc:14:55:65:38:fd:9b:0f:d8:15:92: 61:e5:8f:be:4b:4e:41:79:89:c5:15:10:a6:62:8e: 3b:f0:0b:fd:60:47:7e:d8:5c:a6:fc:ca:6e:e0:32: 08:87:df:20:81:8b:6e:65:c5:94:a4:7d:5f:55:3c: 8c:71:a6:21:8f:54:8c:24:9c:6d:2b:36:63:3f:5b: 3c:a6:f6:e6:ad:4f:73:c6:82:c8:65:f9:09:d0:36: 30:3c:ff:b2:bf:f6:bc:46:dd:b3:51:56:44:ae:29: bf:87:31:60:f1:57:38:af:13:bb:9e:59:57:82:da: 12:d6:2b:3a:a4:af:61:a6:67:25:8b:37:a6:e5:d7: f2:2a:60:ec:cc:ee:98:dc:d7:25:8a:45:d5:6e:46: 7a:da:c8:6f:ac:07:39:8f:18:ef:69:d7:4c:bf:84: 48:e0:24:e4:3a:3e:83:32:a8:43:e4:bf:9d:ca:e8: 14:17:53:15:da:33:3b:f2:ab:06:05:78:c4:71:ee: 07:89:4b:7b:20:e4:4b:b0:ef:9f:35:4f:5f:71:16: 83:c1:ed:7f:99:33:f4:55:bd:fc:08:6f:a8:17:e0: b6:46:9e:76:65:9a:ff:63:5f:d9:c6:ff:8a:52:a3: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:74:BB:B8:55:57:DA:3B:10:0E:E7:31:ED:12:C4:F7:3C:EF:1A:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e571bbf-c872-376a-828b-d4e85047ef6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2c:f5:b8:f7:f7:02:3e:c0:f9:b4:36:e3:4a:a2:95:e6:09: fa:65:c0:9d:56:b1:f6:6b:fa:47:ce:02:bb:58:20:93:e7:2b: 0c:cf:67:86:17:09:eb:19:96:7f:44:c1:91:12:61:31:6f:82: 69:6a:0d:fe:7e:49:33:2a:8c:6b:3d:90:51:71:9d:12:0a:ef: 3a:2f:2b:b4:84:62:3d:d2:f3:d3:23:ca:20:f4:8a:9b:80:1e: 11:2b:f7:11:9a:cc:81:a0:09:22:fe:26:4c:b5:be:39:3f:fb: c5:76:7e:25:52:a3:fb:f9:7f:75:65:40:49:d9:00:fe:c0:24: 7a:72:fc:3d:7f:f7:30:db:ed:4b:28:33:26:40:3b:a1:9c:d9: a9:91:0b:84:33:eb:d7:58:ef:3c:d8:cd:88:29:46:e2:9d:64: b6:95:54:ec:3e:46:57:49:29:34:4d:e3:cf:28:0f:d5:99:5f: 59:a5:ec:58:25:d0:83:b8:b1:bd:2d:a9:1d:74:73:cf:b0:21: a3:9d:b0:37:a8:56:56:2a:68:81:01:22:13:ad:a9:0d:82:c5: 9b:7a:d5:3f:82:08:e8:0c:e6:f5:fd:80:2e:0f:9b:d3:15:ad: c0:67:93:64:06:ae:45:76:1f:ea:b4:57:bd:bd:c7:72:e4:59: f4:90:92:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn17sovBKNYNUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MDFjYmUyYmUtYmE4OS00Mzc4LWE5MWMtNjAzMzhiOTcxMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw3SR1zeHE/Np45TOY7sfhfd3BRVZTj9mw/Y FZJh5Y++S05BeYnFFRCmYo478Av9YEd+2Fym/Mpu4DIIh98ggYtuZcWUpH1fVTyM caYhj1SMJJxtKzZjP1s8pvbmrU9zxoLIZfkJ0DYwPP+yv/a8Rt2zUVZErim/hzFg 8Vc4rxO7nllXgtoS1is6pK9hpmclizem5dfyKmDszO6Y3NclikXVbkZ62shvrAc5 jxjvaddMv4RI4CTkOj6DMqhD5L+dyugUF1MV2jM78qsGBXjEce4HiUt7IORLsO+f NU9fcRaDwe1/mTP0Vb38CG+oF+C2Rp52ZZr/Y1/Zxv+KUqMzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl0u7hVV9o7EA7nMe0SxPc87xqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2U1NzFiYmYtYzg3Mi0z NzZhLTgyOGItZDRlODUwNDdlZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcs9bj39wI+wPm0NuNKopXmCfplwJ1WsfZr+kfOArtYIJPnKwzPZ4YX CesZln9EwZESYTFvgmlqDf5+STMqjGs9kFFxnRIK7zovK7SEYj3S89MjyiD0ipuA HhEr9xGazIGgCSL+Jky1vjk/+8V2fiVSo/v5f3VlQEnZAP7AJHpy/D1/9zDb7Uso MyZAO6Gc2amRC4Qz69dY7zzYzYgpRuKdZLaVVOw+RldJKTRN488oD9WZX1ml7Fgl 0IO4sb0tqR10c8+wIaOdsDeoVlYqaIEBIhOtqQ2CxZt61T+CCOgM5vX9gC4Pm9MV rcBnk2QGrkV2H+q0V729x3LkWfSQkvY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:08 2025 by rpki-client