$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/520a7e7c-8e68-3cf0-a476-ec11e280bc72.roa File: 520a7e7c-8e68-3cf0-a476-ec11e280bc72.roa (raw, json) Hash identifier: P0oVxHuc7C0SBDgzSOAZ43m0VpG7ZbxbbL6Ie5KTqFs= Subject key identifier: 99:BE:A7:D1:6B:AF:66:CA:B2:45:36:67:53:4E:83:31:7D:D6:D2:DE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFB02E6DB85F0D03244E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/520a7e7c-8e68-3cf0-a476-ec11e280bc72.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.71.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fb:02:e6:db:85:f0:d0:32:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=e5d9aca0-b0c7-4cd5-902b-ec060ee5e941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:a9:ae:af:9a:4f:9a:5f:10:81:45:db:bf: 1e:df:de:cd:59:f7:e6:3a:f3:b5:ff:8d:b6:f4:92: 40:2d:25:05:03:b1:dd:99:d1:51:21:94:a7:f4:a7: 26:c7:bc:03:fa:58:f9:8a:aa:42:5d:b9:bb:45:95: 58:e2:b0:d2:74:f1:9f:60:be:14:f2:c8:e1:8f:96: 76:a8:59:7d:19:ce:26:1b:d2:24:a1:6d:e9:c8:76: 18:e3:0a:3e:e2:54:56:64:79:56:ae:e6:5e:1d:29: fe:81:eb:b0:c9:e6:2c:fd:7b:9f:7b:22:fa:d7:4b: b1:51:2f:02:d7:e1:0c:38:cc:8c:bf:25:87:5d:41: f4:bf:53:e8:6c:1f:91:b8:95:cd:bd:a1:c9:97:82: c0:5d:e6:95:a9:44:96:06:38:a1:57:ab:66:c3:d6: eb:db:35:c9:85:3b:df:0b:6d:21:96:31:99:6f:56: 8c:8b:48:d6:29:9a:46:c6:4f:d9:e3:e9:ac:36:21: 01:12:01:3a:bd:3a:74:bc:2a:80:08:fc:2e:a1:c7: 43:77:ea:0f:c8:c3:13:07:46:ab:5c:de:62:42:3c: 25:93:b6:5e:e6:ff:0d:78:86:09:2f:9f:d4:32:bd: 57:c9:01:3b:31:c0:2c:f7:33:28:d4:29:14:fa:7a: cd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:A7:D1:6B:AF:66:CA:B2:45:36:67:53:4E:83:31:7D:D6:D2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/520a7e7c-8e68-3cf0-a476-ec11e280bc72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7b:20:5d:46:c8:4e:1d:f8:35:24:f0:98:1f:c4:6c:6b:3e: 2f:15:ef:0c:57:05:9e:ad:11:ba:f5:6f:16:e7:a3:1d:4e:db: cd:e3:1c:f3:cb:ba:eb:3d:35:ac:e9:17:b3:da:9e:11:8e:40: 13:31:98:fe:b3:6d:37:f7:8c:5a:d0:a8:c9:79:88:83:ad:1d: f5:35:b1:ef:5a:b8:28:83:42:53:e3:74:18:ba:4f:ae:c3:15: 37:61:ad:90:a4:69:43:f0:e3:93:30:af:7b:c4:9e:d0:d4:7a: b7:0b:a2:3a:22:bc:c6:8a:7e:ea:50:22:1a:fa:29:ba:98:86: 7c:2f:94:24:b9:cb:bf:1f:3a:53:18:25:63:eb:e5:0b:e5:8f: 12:5f:93:97:43:20:bc:70:2d:fd:2e:d2:d6:4c:29:18:d9:a5: c1:8a:d4:76:b1:06:e8:dd:30:72:d0:e1:a3:1f:80:b6:42:8d: c5:75:29:f4:4f:41:5a:c6:a7:47:d5:2b:d7:d1:c6:08:52:c4: 77:7b:7d:85:1d:84:b8:38:2e:c4:e6:a1:e9:01:38:a5:c0:25: 3e:68:9e:c7:b2:2b:84:7b:03:c6:21:bd:ba:72:b7:d2:69:64: be:08:71:e8:f0:fa:6c:fe:79:ce:e1:e3:8e:cf:95:e4:96:83: e4:0c:a9:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPsC5tuF8NAyROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZTVkOWFjYTAtYjBjNy00Y2Q1LTkwMmItZWMwNjBlZTVlOTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdSprq+aT5pfEIFF278e397NWffmOvO1/422 9JJALSUFA7HdmdFRIZSn9Kcmx7wD+lj5iqpCXbm7RZVY4rDSdPGfYL4U8sjhj5Z2 qFl9Gc4mG9IkoW3pyHYY4wo+4lRWZHlWruZeHSn+geuwyeYs/XufeyL610uxUS8C 1+EMOMyMvyWHXUH0v1PobB+RuJXNvaHJl4LAXeaVqUSWBjihV6tmw9br2zXJhTvf C20hljGZb1aMi0jWKZpGxk/Z4+msNiEBEgE6vTp0vCqACPwuocdDd+oPyMMTB0ar XN5iQjwlk7Ze5v8NeIYJL5/UMr1XyQE7McAs9zMo1CkU+nrNwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJm+p9Frr2bKskU2Z1NOgzF91tLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTIwYTdlN2MtOGU2OC0z Y2YwLWE0NzYtZWMxMWUyODBiYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH17IF1GyE4d+DUk8JgfxGxrPi8V7wxXBZ6tEbr1bxbnox1O283jHPPL uus9NazpF7PanhGOQBMxmP6zbTf3jFrQqMl5iIOtHfU1se9auCiDQlPjdBi6T67D FTdhrZCkaUPw45Mwr3vEntDUercLojoivMaKfupQIhr6KbqYhnwvlCS5y78fOlMY JWPr5QvljxJfk5dDILxwLf0u0tZMKRjZpcGK1HaxBujdMHLQ4aMfgLZCjcV1KfRP QVrGp0fVK9fRxghSxHd7fYUdhLg4LsTmoekBOKXAJT5onseyK4R7A8Yhvbpyt9Jp ZL4Icejw+mz+ec7h447PleSWg+QMqWs= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:24 2025 by rpki-client