$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84c98623-f793-3260-a458-dd93c7c33218.roa File: 84c98623-f793-3260-a458-dd93c7c33218.roa (raw, json) Hash identifier: i9W9ivDH7M/eCIzWvWGZgLP2P5klMMINi5+cgdmQOWI= Subject key identifier: BC:CA:56:CF:5B:C0:84:D3:B4:7B:3A:B9:7E:79:DA:B2:25:81:AE:7C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927D482EB21F8BE5A6EB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84c98623-f793-3260-a458-dd93c7c33218.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:48:2e:b2:1f:8b:e5:a6:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=94087534-8a7c-4866-a302-9b727baea83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:5f:b8:33:72:a3:c6:a9:bf:3a:ec:c3:8e: e6:8b:08:5c:f4:10:df:ea:57:5c:13:66:02:65:d2: e7:e6:5d:9c:c7:19:bd:24:4a:86:b4:c0:4c:af:b9: ad:64:05:0f:bb:eb:fe:a7:ba:95:98:05:ca:48:57: d5:89:83:ad:6c:e9:c3:0c:a2:f1:e8:eb:ee:55:78: db:b5:2c:2d:31:5a:f2:86:ec:c1:0d:ec:9c:bf:3b: 33:bc:0a:30:2a:5a:e0:26:f4:0b:0f:77:74:af:8e: 14:cc:7e:82:6c:b7:02:f7:cd:a5:68:32:33:f0:7a: 4e:15:34:9a:4b:0f:f3:20:7a:38:c4:86:bf:f1:a5: 26:24:f8:f8:1a:90:98:12:c5:4e:37:58:c0:8f:b7: 61:e8:f2:c6:ac:c2:3a:cf:57:86:62:ec:ff:cd:bc: fa:ee:7a:f3:1f:0e:18:d8:00:a9:ed:63:c7:e0:91: 24:c6:c1:02:7f:5b:93:bf:7d:93:03:d5:04:e8:df: af:3d:d1:15:b1:8c:ea:32:6d:86:78:01:63:58:70: f6:39:dd:a3:e5:c9:64:49:45:e3:7e:7b:06:9d:09: ef:98:ec:aa:e4:e4:76:a2:12:b8:0b:f4:f5:f7:7b: 15:c8:09:5e:09:10:01:11:60:aa:c8:8c:98:45:87: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:56:CF:5B:C0:84:D3:B4:7B:3A:B9:7E:79:DA:B2:25:81:AE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/84c98623-f793-3260-a458-dd93c7c33218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:19:9e:53:cb:88:cd:ef:02:e5:4c:19:2e:07:7b:3e:cf:7f: cb:10:81:fc:b3:af:a6:65:9f:48:ae:c8:49:9d:48:69:35:53: c1:73:0f:a2:74:e6:19:58:bf:d7:6c:d2:96:34:77:a9:99:c0: ba:fe:30:70:a5:86:b9:a1:c0:ad:9d:92:9d:b5:c2:86:f8:b1: f1:4d:5f:96:16:04:3d:2b:98:91:85:2e:1f:7b:c3:a1:8b:35: 86:63:26:9e:a4:8e:d8:4c:15:06:0e:cc:0b:c1:5a:24:cd:fc: 85:13:fd:c9:86:07:1e:3d:9a:ef:25:0e:97:c0:f5:fb:81:34: 96:88:f1:bb:69:52:b1:14:e7:28:ad:74:31:ab:e0:3d:ca:b4: c3:3d:68:c6:f4:01:de:c4:6c:0b:9e:49:6e:c5:f3:42:a4:b6: 77:61:6d:c0:94:29:2c:76:1e:c5:40:b4:e5:7e:cb:1a:34:31: 24:bb:c1:3a:a6:54:11:4e:c1:67:0d:9d:06:73:6f:e6:08:72: a0:bf:94:84:a8:55:3f:d8:c9:0e:37:72:f1:a6:92:ec:0e:f3: 03:46:69:9b:81:fc:da:56:1c:23:e0:ae:88:07:df:71:99:73: 12:86:e6:01:62:cf:8d:ed:e6:8b:77:4f:13:61:b1:4f:e2:6f: ad:c9:c8:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn1ILrIfi+Wm64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OTQwODc1MzQtOGE3Yy00ODY2LWEzMDItOWI3MjdiYWVhODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysNfuDNyo8apvzrsw47miwhc9BDf6ldcE2YC ZdLn5l2cxxm9JEqGtMBMr7mtZAUPu+v+p7qVmAXKSFfViYOtbOnDDKLx6OvuVXjb tSwtMVryhuzBDeycvzszvAowKlrgJvQLD3d0r44UzH6CbLcC982laDIz8HpOFTSa Sw/zIHo4xIa/8aUmJPj4GpCYEsVON1jAj7dh6PLGrMI6z1eGYuz/zbz67nrzHw4Y 2ACp7WPH4JEkxsECf1uTv32TA9UE6N+vPdEVsYzqMm2GeAFjWHD2Od2j5clkSUXj fnsGnQnvmOyq5OR2ohK4C/T193sVyAleCRABEWCqyIyYRYc8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzKVs9bwITTtHs6uX552rIlga58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODRjOTg2MjMtZjc5My0z MjYwLWE0NTgtZGQ5M2M3YzMzMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsZnlPLiM3vAuVMGS4Hez7Pf8sQgfyzr6Zln0iuyEmdSGk1U8FzD6J0 5hlYv9ds0pY0d6mZwLr+MHClhrmhwK2dkp21wob4sfFNX5YWBD0rmJGFLh97w6GL NYZjJp6kjthMFQYOzAvBWiTN/IUT/cmGBx49mu8lDpfA9fuBNJaI8btpUrEU5yit dDGr4D3KtMM9aMb0Ad7EbAueSW7F80KktndhbcCUKSx2HsVAtOV+yxo0MSS7wTqm VBFOwWcNnQZzb+YIcqC/lISoVT/YyQ43cvGmkuwO8wNGaZuB/NpWHCPgrogH33GZ cxKG5gFiz43t5ot3TxNhsU/ib63JyEE= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:27 2025 by rpki-client