$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa File: 6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa (raw, json) Hash identifier: nGw61YfgW7MTm/69X8s2z5r95oCrFgn+uuNlRsEimro= Subject key identifier: C0:44:8E:EE:17:1A:A2:33:D0:52:6E:57:C0:A7:11:0C:9C:ED:0C:36 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927B0DE140066A178DF540 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7b:0d:e1:40:06:6a:17:8d:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d517de2f-f05e-423f-999a-2305760d7000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:24:f2:4c:34:02:83:37:2d:e1:7b:a8:19: 85:e3:2b:c1:64:ab:38:f3:8f:7f:c0:6a:fe:ec:30: ed:79:13:5f:e4:dc:e4:aa:cb:9b:65:28:1f:51:43: aa:5d:99:b9:27:5f:8f:3f:31:f3:91:7e:ea:2a:c1: 1f:0a:e8:a3:ab:64:88:c6:af:13:44:2c:80:bc:c8: a8:99:7a:d6:68:c1:7d:9e:30:f3:3e:70:05:4a:53: af:75:83:d2:f0:67:21:68:0c:57:d5:57:85:8e:ea: 58:05:39:d4:a0:0b:bb:87:dd:6e:d1:90:34:9e:ba: e5:d0:81:61:96:d7:8f:72:f9:7d:e5:2b:b1:75:ae: 84:b5:f3:de:a6:0b:da:04:64:e9:cf:ff:db:f8:09: 7b:e9:dc:f7:3c:2f:27:54:20:68:40:ed:d0:76:b3: 2a:ff:3f:3d:1d:84:b3:7a:2e:25:01:73:b5:ed:5d: 84:f3:c4:9d:13:76:38:dd:d1:e0:84:24:b5:1d:e1: 5d:58:e3:77:3d:41:d2:58:59:67:05:11:15:01:c8: e2:03:2f:a3:93:27:fa:f6:c2:51:90:e6:1f:1a:0f: ac:d8:7f:9d:b6:b4:14:af:f3:c1:2d:82:ae:85:ae: 11:8c:5e:ad:41:5a:28:a3:65:72:cb:f3:4d:d4:6d: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:8E:EE:17:1A:A2:33:D0:52:6E:57:C0:A7:11:0C:9C:ED:0C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6997df4b-71d9-3f8d-a2ad-4511f636c7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:57:4e:df:2c:f9:36:2d:36:01:73:a6:c6:3a:f9:11:cf:00: ea:32:f8:14:7d:59:da:79:9d:48:7b:7c:74:01:ba:11:f7:29: 07:fb:97:81:d8:63:1e:2d:69:47:10:59:89:c6:0c:4a:ee:43: a8:45:27:3f:c5:a8:86:4a:9c:40:f9:f4:ea:41:80:b4:15:95: cf:53:1f:fe:31:10:01:ab:b4:92:c9:94:ca:55:37:aa:19:b3: dc:45:47:9d:cd:4c:e7:7f:1b:60:57:72:5e:01:16:2c:77:a6: 7d:6e:e6:c1:63:b1:e0:79:94:e9:7d:d3:b9:ef:bc:a7:06:6f: c4:a5:77:bf:21:a5:73:71:49:f1:a4:89:0c:d8:53:ee:e2:8e: 2c:30:c9:0e:3a:1e:ca:5d:40:2b:8c:9f:22:a9:9e:6f:85:0a: 8c:d8:3b:49:df:8b:97:35:90:c8:51:27:89:8a:54:04:3b:8c: d4:03:80:e1:83:86:c9:64:dd:c8:73:1f:f4:d1:c9:16:e0:75: 24:72:01:7b:3f:d3:a8:92:eb:aa:5d:5b:e0:26:ef:ac:45:f4: ab:46:3b:d4:8e:ad:2c:66:6b:97:81:f4:4d:ba:3e:5e:44:5c: f7:e0:ed:65:6c:fc:8b:f8:6b:d2:57:40:9c:13:ad:a0:55:53: 7e:f3:1d:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknsN4UAGaheN9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDUxN2RlMmYtZjA1ZS00MjNmLTk5OWEtMjMwNTc2MGQ3MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYkk8kw0AoM3LeF7qBmF4yvBZKs4849/wGr+ 7DDteRNf5NzkqsubZSgfUUOqXZm5J1+PPzHzkX7qKsEfCuijq2SIxq8TRCyAvMio mXrWaMF9njDzPnAFSlOvdYPS8GchaAxX1VeFjupYBTnUoAu7h91u0ZA0nrrl0IFh ltePcvl95Suxda6EtfPepgvaBGTpz//b+Al76dz3PC8nVCBoQO3QdrMq/z89HYSz ei4lAXO17V2E88SdE3Y43dHghCS1HeFdWON3PUHSWFlnBREVAcjiAy+jkyf69sJR kOYfGg+s2H+dtrQUr/PBLYKuha4RjF6tQVooo2Vyy/NN1G2wWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBEju4XGqIz0FJuV8CnEQyc7Qw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjk5N2RmNGItNzFkOS0z ZjhkLWEyYWQtNDUxMWY2MzZjN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpXTt8s+TYtNgFzpsY6+RHPAOoy+BR9Wdp5nUh7fHQBuhH3KQf7l4HY Yx4taUcQWYnGDEruQ6hFJz/FqIZKnED59OpBgLQVlc9TH/4xEAGrtJLJlMpVN6oZ s9xFR53NTOd/G2BXcl4BFix3pn1u5sFjseB5lOl907nvvKcGb8Sld78hpXNxSfGk iQzYU+7ijiwwyQ46HspdQCuMnyKpnm+FCozYO0nfi5c1kMhRJ4mKVAQ7jNQDgOGD hslk3chzH/TRyRbgdSRyAXs/06iS66pdW+Am76xF9KtGO9SOrSxma5eB9E26Pl5E XPfg7WVs/Iv4a9JXQJwTraBVU37zHWw= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:46 2025 by rpki-client