$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6efe6033-47f2-38a8-ac66-8748ec1f9c01.roa File: 6efe6033-47f2-38a8-ac66-8748ec1f9c01.roa (raw, json) Hash identifier: a4+S10Ibg9qpHeawlK5qveyJcHicR+sl4CZQ/hICL8g= Subject key identifier: 51:27:F6:99:0A:B2:22:AC:60:97:03:85:87:C8:E6:3D:CF:CD:84:B8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B63AE4717FE9504473D4D2F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6efe6033-47f2-38a8-ac66-8748ec1f9c01.roa Signing time: Thu 02 Oct 2025 15:23:52 +0000 ROA not before: Thu 02 Oct 2025 15:23:52 +0000 ROA not after: Wed 31 Dec 2025 16:23:52 +0000 asID: 14789 IP address blocks: 172.71.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:ae:47:17:fe:95:04:47:3d:4d:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 2 15:23:52 2025 GMT Not After : Dec 31 16:23:52 2025 GMT Subject: CN=aba38c37-8b08-437b-b055-d8b0114a140c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:52:0a:75:75:06:b5:b6:21:66:b2:1b:31: 6c:26:fe:44:88:ec:83:e2:52:9b:c5:b7:c9:3d:eb: a6:f2:a6:64:17:c3:32:cd:d3:64:6e:54:02:b5:a0: 82:25:a8:71:ea:94:fc:57:73:1c:de:1b:5f:17:cb: a0:73:2f:94:92:6d:36:c3:3b:72:63:f5:a9:88:79: 4f:23:ec:fe:f3:33:8d:47:7c:37:84:de:34:82:d9: fa:fb:76:08:20:21:9c:78:84:4c:a0:0c:37:5f:d0: 35:78:09:5c:5b:8c:82:fc:1c:ee:5e:c7:e5:70:61: 69:d1:97:cf:0d:6a:57:44:e7:23:3b:fe:b4:18:e3: 1c:1f:dd:39:f1:3c:90:65:f9:d2:79:bf:60:44:e1: be:c4:77:29:20:90:dd:a4:2d:c4:d5:dd:e3:94:86: 5c:ef:d5:71:6e:cc:00:df:b3:c2:78:f9:b2:50:f2: c7:43:a9:fb:31:f9:29:a3:78:8f:9f:c5:d8:3b:b5: 46:02:48:d0:e7:83:14:29:26:d7:4d:40:9e:ee:1e: d4:83:7c:d4:e2:4f:f5:89:61:0b:72:2c:0c:e7:fd: 60:ff:0c:0c:57:93:21:3a:a2:c7:21:8f:54:8d:d7: 0e:c7:44:c6:92:61:a3:52:a1:6d:6d:0f:89:7f:0a: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:F6:99:0A:B2:22:AC:60:97:03:85:87:C8:E6:3D:CF:CD:84:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6efe6033-47f2-38a8-ac66-8748ec1f9c01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:e2:e1:d1:d5:76:d4:1e:cf:09:5a:b1:1a:67:69:8a:9d:c7: 32:84:9e:d2:22:a5:7e:e5:3a:3a:38:10:99:b2:27:ee:e3:0e: bf:b0:cf:a0:ab:80:8d:f8:d1:36:2a:9f:49:73:38:39:49:25: 83:dd:b3:a9:40:54:13:6d:2f:aa:f7:90:b8:8a:46:37:0c:3f: 09:bf:9a:14:50:68:7a:c8:ac:97:f0:ad:dc:49:81:1a:b7:e1: 2b:54:6e:15:3e:fe:7e:fa:c7:d4:bd:8d:28:50:31:59:a1:b4: a1:26:ad:a1:ed:a9:5d:df:63:48:a1:9c:e1:fb:1d:26:8a:8e: 40:71:b1:4f:72:da:13:80:95:21:a0:bb:19:7c:b2:6b:24:97: 20:d9:54:41:bf:5f:52:6f:9a:fc:9d:6a:d7:fe:94:77:f5:d8: 7c:7d:f1:7a:dc:c1:0b:06:5f:e0:22:7d:41:12:16:33:58:7e: 67:02:54:f1:83:ae:01:09:86:5f:cf:6e:a2:12:64:27:1e:5a: c1:d5:fc:7d:b6:11:95:be:c1:96:6d:04:d3:e9:1a:b1:7a:a5: 4f:8b:f6:3a:24:df:84:3b:83:74:9a:62:bc:3e:23:3f:b9:f5: 7e:34:af:76:bd:eb:af:a4:cd:e6:d8:76:6b:d5:f6:82:f1:b5: 9e:17:68:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjrkcX/pUERz1NL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAwMjE1MjM1MloXDTI1MTIzMTE2MjM1MlowLzEtMCsGA1UEAxMk YWJhMzhjMzctOGIwOC00MzdiLWIwNTUtZDhiMDExNGExNDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTNSCnV1BrW2IWayGzFsJv5EiOyD4lKbxbfJ Peum8qZkF8MyzdNkblQCtaCCJahx6pT8V3Mc3htfF8ugcy+Ukm02wztyY/WpiHlP I+z+8zONR3w3hN40gtn6+3YIICGceIRMoAw3X9A1eAlcW4yC/BzuXsflcGFp0ZfP DWpXROcjO/60GOMcH9058TyQZfnSeb9gROG+xHcpIJDdpC3E1d3jlIZc79VxbswA 37PCePmyUPLHQ6n7Mfkpo3iPn8XYO7VGAkjQ54MUKSbXTUCe7h7Ug3zU4k/1iWEL ciwM5/1g/wwMV5MhOqLHIY9UjdcOx0TGkmGjUqFtbQ+JfwqllwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEn9pkKsiKsYJcDhYfI5j3PzYS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmVmZTYwMzMtNDdmMi0z OGE4LWFjNjYtODc0OGVjMWY5YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7i4dHVdtQezwlasRpnaYqdxzKEntIipX7lOjo4EJmyJ+7jDr+wz6Cr gI340TYqn0lzODlJJYPds6lAVBNtL6r3kLiKRjcMPwm/mhRQaHrIrJfwrdxJgRq3 4StUbhU+/n76x9S9jShQMVmhtKEmraHtqV3fY0ihnOH7HSaKjkBxsU9y2hOAlSGg uxl8smsklyDZVEG/X1Jvmvydatf+lHf12Hx98XrcwQsGX+AifUESFjNYfmcCVPGD rgEJhl/PbqISZCceWsHV/H22EZW+wZZtBNPpGrF6pU+L9jok34Q7g3SaYrw+Iz+5 9X40r3a966+kzebYdmvV9oLxtZ4XaJM= -----END CERTIFICATE-----Generated at Wed Oct 29 21:59:22 2025 by rpki-client