$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa File: 60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa (raw, json) Hash identifier: epoXm+D9Zb7tDkyGBbyMwJHIhtd1xB6TFQEOfz3mK4Q= Subject key identifier: F0:04:58:99:E6:48:16:A4:30:B0:0F:80:BD:10:E7:76:0C:2C:2E:57 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C5B1C0DEFA9589FF6260 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:b1:c0:de:fa:95:89:ff:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=1ec5e947-9678-4e8f-a176-5e733e80caab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:b2:4b:28:89:b0:e9:34:8b:82:d6:6b:60: 0f:cf:95:e0:32:50:25:19:6d:4e:46:5b:05:8d:5c: 3c:f2:79:6d:64:2d:02:d6:51:14:dd:1f:23:e8:79: e5:e8:7e:2f:6d:ce:0b:33:17:78:ad:1b:17:f6:6f: 67:fa:ba:f9:d2:1c:90:d2:7f:e4:28:55:e1:a7:5c: 13:51:97:d2:53:90:08:7f:69:9e:14:0c:5c:37:ec: 8e:b9:f5:da:87:26:b2:04:02:6f:7c:ae:ea:66:56: ce:ea:01:34:38:47:ed:41:8b:b5:82:ea:65:04:55: 87:b2:13:af:ef:08:17:0d:61:ff:ae:d2:a9:11:ab: 7a:c7:b9:7c:56:e0:9a:0e:9a:f7:06:ce:f8:06:b3: 02:e6:57:e7:f8:15:71:0a:a8:da:ba:17:de:7c:b8: dd:1c:d2:b1:f8:29:89:89:2c:49:fa:01:af:7f:ba: 14:6b:a7:46:21:8c:e3:ee:8f:94:5c:48:17:f7:3e: 11:ad:ca:cf:d1:94:62:25:f1:07:d0:09:22:f6:48: 97:a2:17:47:2e:47:ea:56:47:df:f2:b0:95:b9:9c: 64:6a:83:e9:3b:5a:a9:65:89:97:fd:c1:24:74:ab: c7:18:48:93:52:df:86:be:05:df:94:e1:bf:3e:d0: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:04:58:99:E6:48:16:A4:30:B0:0F:80:BD:10:E7:76:0C:2C:2E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/60ab30ac-c722-3c99-97cd-1e66a23bcef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2e:24:d0:e3:fa:5b:2a:84:c7:e6:d4:17:45:35:11:8d:7a: db:af:59:3a:fd:24:0e:c9:94:d6:e9:40:83:06:91:a2:de:30: d8:f8:8c:ab:d3:e3:c5:af:37:07:f1:f6:56:b9:74:13:40:13: 90:dd:1b:d5:ab:a3:0c:75:b6:85:3e:9f:54:9c:6d:e9:80:93: 6d:95:1d:48:bf:f2:b9:06:d2:70:59:b6:51:44:94:bf:5c:2f: 31:0a:f5:81:49:46:11:8b:41:6b:34:f5:86:51:6c:80:c7:7c: 57:55:d5:e1:cc:73:8e:da:1a:42:01:12:28:6a:c9:65:bb:79: 54:ab:ea:5a:07:8e:b9:5e:e8:ab:33:5d:de:56:fd:02:f2:27: 81:46:31:ba:50:a1:bd:fa:a3:71:04:bc:84:fc:7d:24:c1:50: 69:c6:50:21:d6:79:cb:70:d5:07:aa:61:9b:1d:d3:6e:a4:8d: b9:82:9a:f2:e8:c6:74:bb:f3:71:e4:01:56:e5:03:c7:1c:76: cf:48:8d:5c:3b:da:c9:b4:04:6a:53:b0:e9:41:ea:ac:63:69: 31:e6:9b:16:19:58:af:d5:5c:bc:19:f7:5a:3a:1f:c0:f0:7c: 50:f1:5d:71:f7:a8:c0:07:1b:16:2f:9e:3a:a4:33:e0:94:fb: 45:d6:c6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8WxwN76lYn/YmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MWVjNWU5NDctOTY3OC00ZThmLWExNzYtNWU3MzNlODBjYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmKySyiJsOk0i4LWa2APz5XgMlAlGW1ORlsF jVw88nltZC0C1lEU3R8j6Hnl6H4vbc4LMxd4rRsX9m9n+rr50hyQ0n/kKFXhp1wT UZfSU5AIf2meFAxcN+yOufXahyayBAJvfK7qZlbO6gE0OEftQYu1guplBFWHshOv 7wgXDWH/rtKpEat6x7l8VuCaDpr3Bs74BrMC5lfn+BVxCqjauhfefLjdHNKx+CmJ iSxJ+gGvf7oUa6dGIYzj7o+UXEgX9z4RrcrP0ZRiJfEH0Aki9kiXohdHLkfqVkff 8rCVuZxkaoPpO1qpZYmX/cEkdKvHGEiTUt+GvgXflOG/PtDOzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAEWJnmSBakMLAPgL0Q53YMLC5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjBhYjMwYWMtYzcyMi0z Yzk5LTk3Y2QtMWU2NmEyM2JjZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEduMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMuJNDj+lsqhMfm1BdFNRGNetuvWTr9JA7JlNbpQIMGkaLeMNj4jKvT 48WvNwfx9la5dBNAE5DdG9Wrowx1toU+n1ScbemAk22VHUi/8rkG0nBZtlFElL9c LzEK9YFJRhGLQWs09YZRbIDHfFdV1eHMc47aGkIBEihqyWW7eVSr6loHjrle6Ksz Xd5W/QLyJ4FGMbpQob36o3EEvIT8fSTBUGnGUCHWectw1QeqYZsd026kjbmCmvLo xnS783HkAVblA8ccds9IjVw72sm0BGpTsOlB6qxjaTHmmxYZWK/VXLwZ91o6H8Dw fFDxXXH3qMAHGxYvnjqkM+CU+0XWxjQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:38 2025 by rpki-client