$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa File: 4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa (raw, json) Hash identifier: hwQRuCR1qDoBysWTne7CxZbyOmiIw9v1Cl2+0IZ2fo4= Subject key identifier: 78:6A:41:99:B2:11:B7:15:E8:3A:85:11:3C:C8:F8:2B:20:5B:5C:29 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFB3785F3DE9D04F65680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.71.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fb:37:85:f3:de:9d:04:f6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e65236f6-5318-4db5-8a0e-9bca284207a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:63:f2:52:11:b7:86:d3:36:7a:9f:7b:07: df:36:5a:e5:94:bd:b9:f2:16:f2:c6:03:98:c8:44: 61:e2:0b:98:95:e6:c2:49:8a:50:bb:91:4a:1f:d6: 0b:e4:57:76:85:0d:e4:c4:e6:95:4c:31:b4:a8:25: 16:fa:b5:41:dd:7a:89:a5:ba:81:ae:02:49:17:88: db:be:cb:67:8c:3c:8b:cf:d0:5c:16:63:6b:a8:ea: 01:ad:7d:47:c3:f8:db:ba:1f:6b:d0:39:72:a8:73: 9f:f1:c9:16:46:8c:d5:48:d2:61:c8:64:c9:0d:b4: 2a:3b:37:99:fa:b1:c8:c2:5f:3f:f8:db:87:c0:80: cf:40:61:2c:95:3d:54:65:02:0b:8e:70:ec:d5:7a: 5a:1a:b5:f0:1c:af:e2:17:0e:72:9b:9e:ae:49:89: e8:dc:54:e2:25:9b:f8:09:aa:50:45:c8:a1:ca:08: 39:8a:8b:a7:d2:26:ab:75:0f:7d:d1:b1:11:40:2c: 9a:60:7a:1c:09:39:26:5a:ae:a0:bf:ff:20:77:03: d1:f1:ea:28:05:a7:59:60:da:a2:6b:65:e7:0b:a1: 13:77:c2:35:ae:f8:72:a0:24:c6:cd:ea:f3:62:57: 1d:5e:4b:cb:fa:e5:0e:f8:8d:d2:58:14:50:20:cc: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6A:41:99:B2:11:B7:15:E8:3A:85:11:3C:C8:F8:2B:20:5B:5C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4a0b08bf-c8f1-3930-97e9-8d2af5d6756b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:fa:12:f4:46:bb:cb:01:ba:cd:87:2e:5e:22:12:66:2d:35: 9e:ca:26:fc:ff:1d:74:92:5c:88:d5:d0:ed:1a:3d:4a:a7:58: f2:94:5a:36:a1:db:f0:91:fd:5f:bf:bb:a6:e2:69:2b:6d:fa: 89:ba:42:d4:73:30:90:5a:9f:ab:ca:50:36:03:7b:9b:8c:ca: 1d:c8:7d:89:43:fc:79:cf:46:bb:63:35:aa:4a:c6:b8:31:34: 1b:0a:28:55:b3:ae:66:49:44:3a:d0:ce:8e:cd:ba:04:d7:f6: 3f:fe:41:37:f4:65:fa:00:89:d0:2f:68:cc:36:1d:99:8a:d9: b4:8c:49:37:51:12:7f:e3:7e:e1:4c:70:1d:ef:67:f5:ac:64: 5b:14:2a:97:c4:1e:dd:68:c6:34:d0:41:d0:17:8c:8a:b8:b6: 96:49:be:91:dd:54:9d:c9:73:94:b0:f8:6c:d4:48:37:a5:b8: 39:e9:54:fb:38:e7:c6:b0:49:18:96:d0:4f:17:52:af:16:98: db:ba:90:1c:ae:f7:80:f1:98:ac:be:b0:ee:47:d1:de:1b:07: 56:c7:7a:89:03:54:12:c8:96:f4:04:c7:e7:9e:23:76:3c:b2: 14:d5:42:48:57:6c:98:81:4a:1a:fb:84:a9:cf:67:78:d5:8c: ec:c5:b3:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPs3hfPenQT2VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTY1MjM2ZjYtNTMxOC00ZGI1LThhMGUtOWJjYTI4NDIwN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIZj8lIRt4bTNnqfewffNlrllL258hbyxgOY yERh4guYlebCSYpQu5FKH9YL5Fd2hQ3kxOaVTDG0qCUW+rVB3XqJpbqBrgJJF4jb vstnjDyLz9BcFmNrqOoBrX1Hw/jbuh9r0DlyqHOf8ckWRozVSNJhyGTJDbQqOzeZ +rHIwl8/+NuHwIDPQGEslT1UZQILjnDs1XpaGrXwHK/iFw5ym56uSYno3FTiJZv4 CapQRcihygg5ioun0iardQ990bERQCyaYHocCTkmWq6gv/8gdwPR8eooBadZYNqi a2XnC6ETd8I1rvhyoCTGzerzYlcdXkvL+uUO+I3SWBRQIMxz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhqQZmyEbcV6DqFETzI+CsgW1wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGEwYjA4YmYtYzhmMS0z OTMwLTk3ZTktOGQyYWY1ZDY3NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABT6EvRGu8sBus2HLl4iEmYtNZ7KJvz/HXSSXIjV0O0aPUqnWPKUWjah 2/CR/V+/u6biaStt+om6QtRzMJBan6vKUDYDe5uMyh3IfYlD/HnPRrtjNapKxrgx NBsKKFWzrmZJRDrQzo7NugTX9j/+QTf0ZfoAidAvaMw2HZmK2bSMSTdREn/jfuFM cB3vZ/WsZFsUKpfEHt1oxjTQQdAXjIq4tpZJvpHdVJ3Jc5Sw+GzUSDeluDnpVPs4 58awSRiW0E8XUq8WmNu6kByu94DxmKy+sO5H0d4bB1bHeokDVBLIlvQEx+eeI3Y8 shTVQkhXbJiBShr7hKnPZ3jVjOzFs20= -----END CERTIFICATE-----Generated at Sun Nov 2 04:24:23 2025 by rpki-client