$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa File: 8222374e-de48-3942-9fc5-b6afdb016b1d.roa (raw, json) Hash identifier: Ro5/CnvKPfJ5DBine1t56wrF4WRb5ijom32WT6Wxhy0= Subject key identifier: 3F:39:AE:53:15:A5:69:00:12:D1:2E:D4:29:7A:92:45:A3:FB:22:5A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C78DB6AA84CBE54BD398 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c7:8d:b6:aa:84:cb:e5:4b:d3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f5340d85-d953-4fbe-a9be-5bf8a44e4fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:b3:30:8c:cf:e3:c4:33:c5:c0:20:50:c3: 38:0c:7b:b9:9a:87:d5:1d:c6:54:6c:ce:b9:17:a6: 96:5c:8a:ff:19:e0:e6:6d:e3:39:c2:b7:e0:48:29: ab:d0:97:24:ae:68:74:d0:48:d7:c8:2e:1a:17:f5: 2b:e2:29:f3:75:4a:ba:ec:28:0f:35:9b:58:c5:4d: 43:bb:84:ff:6e:e7:ef:9c:84:c2:4a:ab:a1:ed:1f: fe:07:0a:34:c5:8b:e6:97:7c:ad:1b:9c:cf:a5:11: 09:62:a2:28:22:d8:a0:3a:7f:57:ec:d4:54:36:6f: 3f:89:bd:24:15:ba:96:a5:e5:94:08:34:26:d4:0f: 24:6f:5f:23:04:76:b9:1f:a4:9e:f9:35:a1:6a:43: d4:33:4e:db:81:c0:df:51:62:e1:3f:6e:50:c1:82: e6:47:ff:e1:81:2d:b9:87:c7:1c:fb:ac:ef:34:d6: 5f:9c:12:30:7e:66:d6:c2:79:4c:78:15:99:27:08: 81:00:5c:50:d7:07:62:0d:c1:e4:23:4f:f1:d1:ec: 78:6a:43:46:87:3b:7a:41:fa:fe:bf:4b:b0:3e:83: a1:73:a5:31:aa:35:ed:41:59:85:cd:21:94:a1:9a: 0b:6e:d3:54:02:da:6d:9b:fb:57:34:d4:9f:19:a0: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:AE:53:15:A5:69:00:12:D1:2E:D4:29:7A:92:45:A3:FB:22:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8222374e-de48-3942-9fc5-b6afdb016b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:02:f0:42:2a:c9:d4:0b:cc:ea:d4:e0:f9:5e:1f:62:e7:23: 37:31:b0:62:69:3e:31:16:42:e0:ce:01:e5:89:68:b0:79:71: 3c:41:bc:08:ac:10:46:b3:42:6e:a1:ad:ec:5d:ad:db:3b:4a: 9c:1f:c1:b7:43:75:dd:b5:47:02:d1:ae:14:72:40:08:35:75: e2:4b:4a:66:a2:2c:6f:0c:ac:aa:26:8a:61:67:7e:e0:05:f2: 7d:80:7d:f0:56:ae:66:d1:b8:0f:67:35:cd:f2:d8:0f:96:c3: 72:10:52:42:5f:08:a9:66:5a:03:a5:b2:99:b6:70:00:89:b7: 02:cf:60:f7:48:69:79:d9:8c:74:b5:29:0e:64:25:53:1c:44: b7:6b:e0:4f:62:a5:99:98:fa:84:d6:8a:af:a8:0f:c4:d3:e3: 03:53:cc:48:d5:cf:15:63:73:eb:9f:d7:98:45:43:5b:2b:dc: c3:64:3d:73:3e:8d:f5:3f:da:43:be:88:ed:65:08:77:a1:36: 19:9a:dd:b1:cf:4d:43:8c:dc:54:57:b1:fe:29:90:59:97:d3: 49:fc:ad:10:f9:6e:c7:55:07:4a:7b:cf:32:bd:58:e6:57:c2: 96:fa:eb:23:74:88:c1:d2:f6:fc:b7:5b:98:f8:54:e0:0d:e4: b9:22:27:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8eNtqqEy+VL05gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjUzNDBkODUtZDk1My00ZmJlLWE5YmUtNWJmOGE0NGU0ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjazMIzP48QzxcAgUMM4DHu5mofVHcZUbM65 F6aWXIr/GeDmbeM5wrfgSCmr0Jckrmh00EjXyC4aF/Ur4inzdUq67CgPNZtYxU1D u4T/bufvnITCSquh7R/+Bwo0xYvml3ytG5zPpREJYqIoItigOn9X7NRUNm8/ib0k FbqWpeWUCDQm1A8kb18jBHa5H6Se+TWhakPUM07bgcDfUWLhP25QwYLmR//hgS25 h8cc+6zvNNZfnBIwfmbWwnlMeBWZJwiBAFxQ1wdiDcHkI0/x0ex4akNGhzt6Qfr+ v0uwPoOhc6UxqjXtQVmFzSGUoZoLbtNUAtptm/tXNNSfGaDcFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD85rlMVpWkAEtEu1Cl6kkWj+yJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODIyMjM3NGUtZGU0OC0z OTQyLTlmYzUtYjZhZmRiMDE2YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIC8EIqydQLzOrU4PleH2LnIzcxsGJpPjEWQuDOAeWJaLB5cTxBvAis EEazQm6hrexdrds7SpwfwbdDdd21RwLRrhRyQAg1deJLSmaiLG8MrKomimFnfuAF 8n2AffBWrmbRuA9nNc3y2A+Ww3IQUkJfCKlmWgOlspm2cACJtwLPYPdIaXnZjHS1 KQ5kJVMcRLdr4E9ipZmY+oTWiq+oD8TT4wNTzEjVzxVjc+uf15hFQ1sr3MNkPXM+ jfU/2kO+iO1lCHehNhma3bHPTUOM3FRXsf4pkFmX00n8rRD5bsdVB0p7zzK9WOZX wpb66yN0iMHS9vy3W5j4VOAN5LkiJ9Q= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:54 2025 by rpki-client