$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa File: 774c1334-f920-38d3-890d-0c6c643e1f62.roa (raw, json) Hash identifier: 230qwzZJ8BvZPZIIbNcW0V3EWPA9nJp5MAJmx5pKcHE= Subject key identifier: 03:1B:0B:C9:32:5F:01:5B:D2:4D:E1:A8:1E:44:7C:23:B8:85:E9:A4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C59CA04ED85F794FD680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c5:9c:a0:4e:d8:5f:79:4f:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=0f5d7760-b369-4cbc-865c-aa4612ee4c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:2f:25:56:75:63:d8:7c:82:76:af:2e:9e: d5:8b:38:f5:10:8d:95:3f:25:9c:7f:95:c5:32:20: 35:0b:f9:26:d9:36:93:9c:d4:65:d3:a7:a3:d1:12: 10:93:a8:d2:a0:b5:d2:de:3b:c1:a2:05:5f:6a:f5: ae:97:46:d4:72:42:d0:4a:3a:65:31:82:fb:83:8c: 6e:b3:5f:eb:32:ef:e1:12:ff:3b:a8:88:a5:1e:d6: f9:33:ea:39:b6:c2:cf:e2:29:80:65:d8:4a:a5:fb: e7:3a:c6:b2:e3:00:d2:db:4e:54:3e:b9:15:75:8f: f1:38:63:b4:f1:6f:ca:c6:b4:31:b4:15:31:24:b1: f0:11:50:91:61:84:aa:3b:0e:5d:1b:d1:50:18:25: 2b:0f:fb:0f:7f:02:1a:47:a9:3d:82:36:fe:e3:76: fb:e9:85:3b:6b:f3:24:81:60:05:f3:31:a6:e7:29: 3a:6b:be:1e:0a:92:90:b6:ef:aa:b6:b6:e5:fa:5e: 1a:50:79:44:e0:25:ec:97:6e:46:b6:18:56:f2:94: ea:d7:8a:2d:41:f2:94:1c:2e:b8:d5:f3:05:e2:54: 45:25:bc:ec:9b:2b:10:38:05:16:71:5a:2b:72:da: 4b:54:f8:0b:95:78:47:a7:9b:76:19:7f:33:d7:19: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1B:0B:C9:32:5F:01:5B:D2:4D:E1:A8:1E:44:7C:23:B8:85:E9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/774c1334-f920-38d3-890d-0c6c643e1f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:72:17:26:5d:7c:15:ae:0e:cc:2d:2b:53:b4:22:03:af:ea: 23:0f:a5:11:e0:c3:44:ac:e3:b2:93:aa:4a:8e:79:2b:5d:3c: 57:f4:cb:f2:ec:95:1a:a1:34:92:50:70:2d:d8:02:24:4e:4f: e9:68:bf:52:2b:23:30:83:62:6e:d4:11:d4:2f:df:88:ac:75: 6b:71:5e:53:0d:76:42:86:90:93:8c:87:45:93:72:31:44:d9: 76:0f:de:d7:0f:63:a2:16:c4:8f:a2:b4:c7:b3:a0:50:63:a0: 54:46:f4:0e:fd:55:ea:68:6c:51:21:95:b0:c6:87:75:93:d9: f9:3f:24:d1:79:df:b6:3f:f9:c5:70:fb:dd:a7:be:b4:6a:8d: b6:6a:fa:ad:c0:15:4c:af:67:d5:ef:11:ed:d4:71:ba:5e:35: a6:48:e4:9b:bc:a1:76:e8:96:0b:bd:03:40:bf:44:09:89:bd: 82:03:b0:08:37:bb:b0:0f:07:24:70:8d:f7:45:92:29:fd:b8: 19:62:19:03:31:d2:7b:80:3b:f4:d3:fc:ad:6a:dc:72:c6:61: 74:a7:e8:12:47:d1:f5:98:bd:33:60:86:86:cb:bd:3a:c4:7d: 60:8c:08:01:a2:63:dd:a3:ef:d4:26:28:0b:b2:86:4e:9c:8b: 6c:28:55:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8WcoE7YX3lP1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MGY1ZDc3NjAtYjM2OS00Y2JjLTg2NWMtYWE0NjEyZWU0YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNQvJVZ1Y9h8gnavLp7Vizj1EI2VPyWcf5XF MiA1C/km2TaTnNRl06ej0RIQk6jSoLXS3jvBogVfavWul0bUckLQSjplMYL7g4xu s1/rMu/hEv87qIilHtb5M+o5tsLP4imAZdhKpfvnOsay4wDS205UPrkVdY/xOGO0 8W/KxrQxtBUxJLHwEVCRYYSqOw5dG9FQGCUrD/sPfwIaR6k9gjb+43b76YU7a/Mk gWAF8zGm5yk6a74eCpKQtu+qtrbl+l4aUHlE4CXsl25GthhW8pTq14otQfKUHC64 1fMF4lRFJbzsmysQOAUWcVorctpLVPgLlXhHp5t2GX8z1xmmuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMbC8kyXwFb0k3hqB5EfCO4hemkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzc0YzEzMzQtZjkyMC0z OGQzLTg5MGQtMGM2YzY0M2UxZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRyFyZdfBWuDswtK1O0IgOv6iMPpRHgw0Ss47KTqkqOeStdPFf0y/Ls lRqhNJJQcC3YAiROT+lov1IrIzCDYm7UEdQv34isdWtxXlMNdkKGkJOMh0WTcjFE 2XYP3tcPY6IWxI+itMezoFBjoFRG9A79VepobFEhlbDGh3WT2fk/JNF537Y/+cVw +92nvrRqjbZq+q3AFUyvZ9XvEe3UcbpeNaZI5Ju8oXbolgu9A0C/RAmJvYIDsAg3 u7APByRwjfdFkin9uBliGQMx0nuAO/TT/K1q3HLGYXSn6BJH0fWYvTNghobLvTrE fWCMCAGiY92j79QmKAuyhk6ci2woVT4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:32 2025 by rpki-client