$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa File: 7644c097-e65a-3ebc-be83-baa3ced8f80b.roa (raw, json) Hash identifier: wMRxRyj6Aos666VUU8Y/mFra0P/JGgBdszp+4xIrhXs= Subject key identifier: E0:5A:E6:3C:F5:13:75:B4:5A:0C:31:BE:6A:B3:37:27:40:73:1A:2A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927CEFD2BCE96BAB837880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7c:ef:d2:bc:e9:6b:ab:83:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=633fe8f6-733e-4941-89e9-c4ba1b9d560c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9a:81:df:d7:dc:af:ce:20:19:98:9c:53:96: 72:65:8d:b9:c1:ec:9a:3b:79:b7:74:3c:66:15:36: f8:1d:b3:4b:7a:6d:c0:22:d6:46:e6:fa:08:49:32: be:f7:22:4e:fd:0d:28:aa:54:a7:e9:f9:84:54:31: aa:8b:21:74:aa:b2:3f:5c:f7:97:da:a0:a4:e6:26: 9d:28:41:9c:50:98:fe:e6:9d:1d:d0:a5:fb:37:34: 1a:e7:5e:04:25:e9:e7:a2:d7:f3:d9:02:ce:5e:8a: 83:de:13:8b:b2:a4:2c:b8:62:32:ca:5d:ae:9a:c3: 19:9a:c6:1c:21:dc:d5:88:94:51:41:9c:5d:27:3a: e4:b0:95:6b:5a:da:cc:0d:8e:01:3e:49:9d:c1:26: e4:6b:1d:65:30:9f:e6:78:6f:82:ff:b9:41:18:4c: 58:e5:b1:4e:2a:d6:e3:bf:cb:07:38:6d:e6:e4:9b: 27:32:17:f2:01:d0:c5:b9:83:ee:35:df:0c:6d:fe: 69:fb:85:62:b0:be:73:d9:02:e5:04:af:47:fe:41: 01:96:9e:62:08:cd:9a:7e:df:82:89:34:a8:c9:d8: 86:94:69:0c:3f:7c:7b:13:8f:8c:ff:0b:3f:90:1c: 66:26:5c:c1:9b:86:7f:f4:5e:5b:1d:1d:65:a8:c6: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5A:E6:3C:F5:13:75:B4:5A:0C:31:BE:6A:B3:37:27:40:73:1A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7644c097-e65a-3ebc-be83-baa3ced8f80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a7:b8:69:3c:13:67:b8:d4:32:09:45:9a:ac:29:16:09:98: 4a:ca:1f:07:21:2c:5a:f5:75:e8:1f:a3:54:78:3f:64:3d:4b: 2f:2c:b7:7f:52:91:4b:d2:b1:47:69:f4:68:6d:ab:4f:e2:c5: 62:5f:f9:fa:d7:67:ba:18:36:22:2a:63:1d:88:72:37:ae:61: 89:dc:98:79:ae:e4:91:61:9b:df:4a:f9:ec:2b:dc:94:46:b0: 7a:34:a8:96:d8:50:ec:cf:0f:71:cf:30:fa:e7:8e:5e:99:19: 67:19:77:18:a2:9d:82:5f:66:9d:94:4d:f2:d3:ea:c9:c6:1b: b9:4c:90:b7:44:04:dd:12:ed:0e:88:ac:aa:f0:2c:a8:01:ee: aa:19:6a:17:3d:a4:42:af:06:00:d8:64:12:4b:fc:75:6a:ef: 6b:2a:0e:ca:c8:db:b0:5f:39:a8:23:f0:89:b4:ea:1a:ca:7c: 51:0f:a3:6e:e0:c3:09:12:c9:14:d1:05:64:34:80:80:4f:54: bd:27:6e:90:9e:84:4c:08:a9:d9:d7:44:d8:e3:44:3b:70:41: a6:d4:dd:b0:98:db:8c:89:d5:36:0c:b5:24:49:fa:47:a3:5a: 1c:43:5b:41:48:72:a5:b4:5d:8c:d8:2d:c4:6b:dc:20:f8:37: b4:c0:62:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknzv0rzpa6uDeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjMzZmU4ZjYtNzMzZS00OTQxLTg5ZTktYzRiYTFiOWQ1NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5qB39fcr84gGZicU5ZyZY25weyaO3m3dDxm FTb4HbNLem3AItZG5voISTK+9yJO/Q0oqlSn6fmEVDGqiyF0qrI/XPeX2qCk5iad KEGcUJj+5p0d0KX7NzQa514EJennotfz2QLOXoqD3hOLsqQsuGIyyl2umsMZmsYc IdzViJRRQZxdJzrksJVrWtrMDY4BPkmdwSbkax1lMJ/meG+C/7lBGExY5bFOKtbj v8sHOG3m5JsnMhfyAdDFuYPuNd8Mbf5p+4VisL5z2QLlBK9H/kEBlp5iCM2aft+C iTSoydiGlGkMP3x7E4+M/ws/kBxmJlzBm4Z/9F5bHR1lqMbSRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBa5jz1E3W0WgwxvmqzNydAcxoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzY0NGMwOTctZTY1YS0z ZWJjLWJlODMtYmFhM2NlZDhmODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSnuGk8E2e41DIJRZqsKRYJmErKHwchLFr1degfo1R4P2Q9Sy8st39S kUvSsUdp9Ghtq0/ixWJf+frXZ7oYNiIqYx2IcjeuYYncmHmu5JFhm99K+ewr3JRG sHo0qJbYUOzPD3HPMPrnjl6ZGWcZdxiinYJfZp2UTfLT6snGG7lMkLdEBN0S7Q6I rKrwLKgB7qoZahc9pEKvBgDYZBJL/HVq72sqDsrI27BfOagj8Im06hrKfFEPo27g wwkSyRTRBWQ0gIBPVL0nbpCehEwIqdnXRNjjRDtwQabU3bCY24yJ1TYMtSRJ+kej WhxDW0FIcqW0XYzYLcRr3CD4N7TAYoo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:42 2025 by rpki-client