$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac99d4a-9625-34dc-8d0f-70153c78cec4.roa File: 4ac99d4a-9625-34dc-8d0f-70153c78cec4.roa (raw, json) Hash identifier: tqt6p24alNkY84Namz7DSLIwC8Ceo+vOrJZJJFx37Xw= Subject key identifier: 18:55:76:1A:C8:5D:F2:B9:9B:E1:AC:C9:1E:06:87:4C:61:54:62:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926E265927E27601D12080 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac99d4a-9625-34dc-8d0f-70153c78cec4.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6e:26:59:27:e2:76:01:d1:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=11e021a4-a105-406e-8992-499ee171e9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:8f:42:bf:1f:82:64:09:e2:e9:b2:e8:21: 93:c0:cd:00:65:d5:01:80:25:34:82:d8:3a:eb:ef: c5:aa:00:6a:74:5a:41:23:65:d2:05:57:63:c7:50: c9:df:40:18:8d:b1:ce:78:3b:5f:d0:6a:20:7f:f7: 20:a6:7b:95:35:98:23:81:d5:32:bd:f6:69:0f:9a: b0:3e:ba:ff:85:20:49:b1:7d:98:89:f1:67:75:16: 50:16:0e:d9:33:6f:fe:51:cc:7e:a4:89:c0:ae:5c: cd:64:f6:cc:7f:99:81:58:a5:7a:26:c2:31:c8:c7: 95:6f:8b:49:1e:bc:26:f6:4a:28:be:04:e7:53:18: 82:ea:e0:3e:78:a1:7d:cb:a8:1d:55:21:92:e1:6e: 7a:fd:b9:1c:82:57:9b:fc:d4:35:a0:60:51:ca:1e: b6:1a:a4:2f:d0:04:4b:68:a7:6d:7b:c9:28:9c:20: 44:03:06:3a:75:97:49:4a:84:9f:56:87:40:c2:b7: d1:9a:fe:a9:38:d2:5a:d4:21:16:e9:51:4c:26:a4: 4a:4f:0f:eb:ef:16:0a:9d:b5:22:d8:1e:23:cf:f1: b6:a6:cb:84:ad:56:61:37:26:39:af:9a:6c:d7:99: 5d:89:d4:1b:1f:22:fc:ce:52:85:4a:e9:38:77:4d: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:55:76:1A:C8:5D:F2:B9:9B:E1:AC:C9:1E:06:87:4C:61:54:62:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4ac99d4a-9625-34dc-8d0f-70153c78cec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:9e:ca:9b:fe:d6:6b:07:01:71:0c:3b:a4:0d:90:44:d7:13: 98:03:2e:2a:a4:8c:81:bf:3a:29:84:c3:a5:29:89:13:e2:c3: 10:d4:69:c5:9c:89:be:f3:1a:07:c4:8e:e1:9b:29:0a:2f:6a: 2a:44:54:34:b5:62:69:24:20:3c:db:11:2c:18:ff:99:b8:a2: b8:14:a7:26:b5:a4:16:ff:6a:e5:be:c4:63:e8:4a:f6:9d:e9: 7e:0c:19:1a:77:c7:fa:06:c2:a2:91:d8:3f:39:dc:d0:eb:06: 2b:b5:9b:e3:63:39:43:d5:3d:a6:34:69:87:c2:d2:ab:44:df: 74:d3:28:ed:13:fe:a3:a7:27:03:54:81:76:c5:81:0d:36:8f: 21:2d:8b:b4:00:36:9b:22:c1:62:15:3f:45:87:61:f8:25:f6: cf:55:68:6f:b7:e8:33:45:62:dd:d6:6b:fb:44:c4:73:e0:c6: e6:13:40:40:7f:ff:b5:14:1d:b9:7b:c8:b6:cc:53:01:9d:f0: 5b:93:ad:87:50:b7:3d:36:be:1a:ad:66:40:a4:ca:c2:82:7f: 2f:06:04:72:5c:59:e4:0f:5e:51:6f:81:9c:a1:9d:c8:44:76: a5:61:57:3b:a5:02:78:73:52:86:22:75:6e:54:ca:42:31:05: e0:52:e4:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm4mWSfidgHRIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTFlMDIxYTQtYTEwNS00MDZlLTg5OTItNDk5ZWUxNzFlOWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv2PQr8fgmQJ4umy6CGTwM0AZdUBgCU0gtg6 6+/FqgBqdFpBI2XSBVdjx1DJ30AYjbHOeDtf0Gogf/cgpnuVNZgjgdUyvfZpD5qw Prr/hSBJsX2YifFndRZQFg7ZM2/+Ucx+pInArlzNZPbMf5mBWKV6JsIxyMeVb4tJ Hrwm9koovgTnUxiC6uA+eKF9y6gdVSGS4W56/bkcgleb/NQ1oGBRyh62GqQv0ARL aKdte8konCBEAwY6dZdJSoSfVodAwrfRmv6pONJa1CEW6VFMJqRKTw/r7xYKnbUi 2B4jz/G2psuErVZhNyY5r5ps15ldidQbHyL8zlKFSuk4d02+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhVdhrIXfK5m+GsyR4Gh0xhVGJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGFjOTlkNGEtOTYyNS0z NGRjLThkMGYtNzAxNTNjNzhjZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKieypv+1msHAXEMO6QNkETXE5gDLiqkjIG/OimEw6UpiRPiwxDUacWc ib7zGgfEjuGbKQovaipEVDS1YmkkIDzbESwY/5m4orgUpya1pBb/auW+xGPoSvad 6X4MGRp3x/oGwqKR2D853NDrBiu1m+NjOUPVPaY0aYfC0qtE33TTKO0T/qOnJwNU gXbFgQ02jyEti7QANpsiwWIVP0WHYfgl9s9VaG+36DNFYt3Wa/tExHPgxuYTQEB/ /7UUHbl7yLbMUwGd8FuTrYdQtz02vhqtZkCkysKCfy8GBHJcWeQPXlFvgZyhnchE dqVhVzulAnhzUoYidW5UykIxBeBS5L8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:52 2025 by rpki-client