$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa File: 573c24df-3b25-3d49-a306-31216b32fa22.roa (raw, json) Hash identifier: DtNDT/10fLQhqtWLmuze84nB1o2u5BBeQnHbmtrR00Q= Subject key identifier: 79:AF:FE:2A:AF:A1:FA:2C:92:13:64:8B:CE:C2:9B:F7:B3:2F:CD:A7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BB787CD01AE6C16C37B0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:bb:78:7c:d0:1a:e6:c1:6c:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=81c2faea-a13b-4eda-8401-6b8412c09c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:dd:1e:d7:90:4a:be:14:ce:c5:0e:5c:30: e6:52:51:d4:84:97:49:f9:b8:19:06:5f:61:ac:64: 1d:1b:31:7e:c7:1e:e3:d4:af:48:b2:3a:a0:b1:2e: c6:62:06:58:d1:b8:c4:65:02:1e:ef:f7:ca:bd:f6: 62:b6:51:6d:9e:84:a7:04:85:79:38:45:76:37:c3: 3c:45:05:9e:ef:e3:49:fe:3f:11:9e:ff:ee:01:28: 4f:be:68:75:0b:75:e8:ad:c9:81:17:c6:0d:c6:1e: 1c:cb:ad:4b:0d:39:8a:9c:68:a6:4a:de:93:c6:81: f9:35:74:24:6c:cc:c8:37:e8:23:7c:00:17:fb:56: 0b:57:97:0d:87:4a:c5:f9:27:a8:44:31:be:fe:81: 7e:c9:58:a9:45:cf:66:5b:8e:eb:7d:9b:9a:2c:87: c3:d7:63:9f:43:af:4c:fa:b2:04:7c:31:ff:16:a5: 13:2d:f8:54:26:c9:6d:d3:15:eb:47:15:57:a1:d9: 4c:3a:96:9e:93:5f:8d:d6:16:5f:2c:20:5f:cc:fa: 66:9a:b6:c1:d2:6c:8b:53:34:d4:48:7b:ec:f3:83: 28:ff:9c:2c:14:d0:b7:84:f5:f6:25:15:f4:f7:3b: 13:cd:c3:df:0e:f7:5c:8e:9e:f2:f8:c9:b2:8c:01: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:FE:2A:AF:A1:FA:2C:92:13:64:8B:CE:C2:9B:F7:B3:2F:CD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/573c24df-3b25-3d49-a306-31216b32fa22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:04:fc:80:11:01:a3:f2:97:71:a4:c1:17:10:38:72:33:c3: 7e:80:fc:fb:23:90:e7:1d:00:29:e1:a0:49:fe:c3:c5:0d:29: 63:5f:e9:9e:e4:8e:07:41:72:f5:98:ee:c2:67:88:f7:db:2f: d6:7a:03:cb:b0:5a:a2:b8:62:54:a9:af:b8:ac:cb:82:5a:bb: 0b:bf:1d:d0:f1:2f:a1:4c:9f:36:1a:15:a4:99:3d:18:5e:af: 39:6b:fb:92:d8:7f:e8:2c:41:28:7a:d3:cc:a5:e7:08:3a:bc: 20:24:5b:2b:2f:63:11:8e:64:5f:f5:af:d1:b9:2b:b5:36:32: f8:2d:d5:58:b2:40:85:f9:bc:15:30:d6:03:5a:7d:ed:30:a6: cc:4c:58:4d:75:30:5a:70:88:06:af:4e:d7:06:e4:f0:ed:1b: 6a:93:f9:05:58:03:60:04:b9:1d:5f:73:6e:4f:26:99:05:86: 3e:3e:10:c4:d8:d6:4e:c0:50:b2:c2:81:64:20:5a:ca:ea:79: c8:2e:83:cb:c0:84:0f:0d:be:4e:9c:d4:67:a3:9d:8f:a1:b7: da:6b:32:3b:da:9a:87:26:cc:f7:76:46:3e:eb:e1:43:ef:20: 8f:64:56:4c:64:2f:5a:27:e7:00:52:0a:dd:c0:fb:d5:a9:1a: 7e:61:9d:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7t4fNAa5sFsN7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODFjMmZhZWEtYTEzYi00ZWRhLTg0MDEtNmI4NDEyYzA5YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYHdHteQSr4UzsUOXDDmUlHUhJdJ+bgZBl9h rGQdGzF+xx7j1K9IsjqgsS7GYgZY0bjEZQIe7/fKvfZitlFtnoSnBIV5OEV2N8M8 RQWe7+NJ/j8Rnv/uAShPvmh1C3XorcmBF8YNxh4cy61LDTmKnGimSt6TxoH5NXQk bMzIN+gjfAAX+1YLV5cNh0rF+SeoRDG+/oF+yVipRc9mW47rfZuaLIfD12OfQ69M +rIEfDH/FqUTLfhUJslt0xXrRxVXodlMOpaek1+N1hZfLCBfzPpmmrbB0myLUzTU SHvs84Mo/5wsFNC3hPX2JRX09zsTzcPfDvdcjp7y+MmyjAFruwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmv/iqvofoskhNki87Cm/ezL82nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTczYzI0ZGYtM2IyNS0z ZDQ5LWEzMDYtMzEyMTZiMzJmYTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEevMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYE/IARAaPyl3GkwRcQOHIzw36A/PsjkOcdACnhoEn+w8UNKWNf6Z7k jgdBcvWY7sJniPfbL9Z6A8uwWqK4YlSpr7isy4Jauwu/HdDxL6FMnzYaFaSZPRhe rzlr+5LYf+gsQSh608yl5wg6vCAkWysvYxGOZF/1r9G5K7U2Mvgt1ViyQIX5vBUw 1gNafe0wpsxMWE11MFpwiAavTtcG5PDtG2qT+QVYA2AEuR1fc25PJpkFhj4+EMTY 1k7AULLCgWQgWsrqecgug8vAhA8Nvk6c1GejnY+ht9prMjvamocmzPd2Rj7r4UPv II9kVkxkL1on5wBSCt3A+9WpGn5hnd4= -----END CERTIFICATE-----Generated at Sat Nov 1 15:22:03 2025 by rpki-client