$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa File: 42d96165-2b1c-38bd-95f0-8c06ac45d072.roa (raw, json) Hash identifier: AENaLXqZWYFZtdG9qDFGxfzZ0ZUu7975si4lZWJyeAU= Subject key identifier: 0A:8A:7A:1D:91:85:8F:AC:55:5F:50:6D:A0:30:F1:38:B1:24:8C:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926EF1A10626079F319880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6e:f1:a1:06:26:07:9f:31:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ac5badee-c3e1-450e-848f-42a945f4eaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:2a:c5:0e:a0:74:f3:14:0d:62:5a:b5:a1: 34:59:1b:62:ec:ab:91:6a:35:bb:dd:3b:33:8e:8d: db:a8:c7:1b:f8:51:50:c5:98:07:b8:c4:ac:55:2d: 65:e8:d5:78:31:90:8e:40:d2:a6:0b:48:18:0c:d3: 65:3c:3e:9f:cd:5e:cc:c6:e8:07:57:73:1c:b2:d2: ec:e3:df:47:be:cb:45:dd:cd:e0:30:c1:f1:b5:5e: 2f:03:dd:c3:f8:c3:8f:d1:9b:64:7d:c7:b4:48:40: 65:8f:ab:da:0c:06:1d:3b:71:3b:12:e4:d9:a2:ea: cf:8b:a7:e3:79:c1:1a:10:f7:03:04:e7:9c:b1:06: e4:ec:3b:d6:1b:01:b2:f6:0a:b8:dd:66:07:2d:28: 0b:bc:f4:a1:33:cc:c1:8e:f1:6c:17:06:5b:c3:da: 8d:8f:24:38:85:52:a5:00:33:9d:27:05:ed:65:ee: 19:1c:d9:97:9c:95:a2:2d:86:cb:c4:ca:dd:7f:37: fc:aa:09:47:87:1b:cd:42:2b:8a:55:bf:59:5b:d7: 3b:69:1d:88:01:a4:d8:a5:76:0b:3d:82:5c:4c:52: 11:fc:0d:f6:7e:f0:d9:27:a5:54:2b:05:ce:a3:99: 80:1f:95:55:79:3e:52:c9:87:97:57:85:88:02:36: ef:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8A:7A:1D:91:85:8F:AC:55:5F:50:6D:A0:30:F1:38:B1:24:8C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/42d96165-2b1c-38bd-95f0-8c06ac45d072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:31:e5:d6:e7:d9:0b:77:7d:65:18:9e:35:0f:0e:07:6f:2b: 02:cc:87:83:79:ff:69:32:32:c8:70:82:fa:c8:39:58:60:e3: b0:6c:b1:fb:67:60:39:19:db:28:51:9d:0b:65:04:60:22:b0: f4:ed:40:8e:1b:09:65:00:7c:d0:0f:f9:2e:1a:11:6f:6f:85: 52:ef:54:c2:6b:25:5a:dd:87:88:a9:8f:87:06:3b:7a:e7:26: d1:13:18:8c:44:aa:bd:ec:59:93:c6:a4:40:e1:28:8e:1c:b6: 64:47:e6:76:d5:87:20:94:2d:45:91:34:d3:e1:fd:56:96:ae: 26:2b:67:b4:41:32:cd:e3:b3:0e:91:7a:e4:0a:24:e6:ab:0f: 35:d3:73:cc:77:bf:95:47:48:6c:25:5a:78:71:6b:05:9e:53: eb:5a:bc:b1:b2:72:7a:bf:2c:d6:6d:ca:48:70:86:ce:ec:a3: 51:53:50:9d:46:66:08:b8:e5:51:74:7f:c6:f1:e1:df:5a:ff: a7:1d:e6:ff:f8:65:f1:51:8b:97:69:41:50:40:b3:a9:7c:02: f7:0c:fd:e1:a4:f4:5a:2a:c7:03:1a:0c:11:a3:d8:40:09:6d: fb:3c:0e:ed:ad:be:06:1b:1b:fc:4b:dd:c8:e5:9e:63:a7:f0: c4:04:6c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm7xoQYmB58xmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YWM1YmFkZWUtYzNlMS00NTBlLTg0OGYtNDJhOTQ1ZjRlYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukqxQ6gdPMUDWJataE0WRti7KuRajW73Tsz jo3bqMcb+FFQxZgHuMSsVS1l6NV4MZCOQNKmC0gYDNNlPD6fzV7MxugHV3McstLs 499HvstF3c3gMMHxtV4vA93D+MOP0Ztkfce0SEBlj6vaDAYdO3E7EuTZourPi6fj ecEaEPcDBOecsQbk7DvWGwGy9gq43WYHLSgLvPShM8zBjvFsFwZbw9qNjyQ4hVKl ADOdJwXtZe4ZHNmXnJWiLYbLxMrdfzf8qglHhxvNQiuKVb9ZW9c7aR2IAaTYpXYL PYJcTFIR/A32fvDZJ6VUKwXOo5mAH5VVeT5SyYeXV4WIAjbvzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqKeh2RhY+sVV9QbaAw8TixJIwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDJkOTYxNjUtMmIxYy0z OGJkLTk1ZjAtOGMwNmFjNDVkMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkx5dbn2Qt3fWUYnjUPDgdvKwLMh4N5/2kyMshwgvrIOVhg47Bssftn YDkZ2yhRnQtlBGAisPTtQI4bCWUAfNAP+S4aEW9vhVLvVMJrJVrdh4ipj4cGO3rn JtETGIxEqr3sWZPGpEDhKI4ctmRH5nbVhyCULUWRNNPh/VaWriYrZ7RBMs3jsw6R euQKJOarDzXTc8x3v5VHSGwlWnhxawWeU+tavLGycnq/LNZtykhwhs7so1FTUJ1G Zgi45VF0f8bx4d9a/6cd5v/4ZfFRi5dpQVBAs6l8AvcM/eGk9FoqxwMaDBGj2EAJ bfs8Du2tvgYbG/xL3cjlnmOn8MQEbFo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:58 2025 by rpki-client