$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b7e17f9-bdc7-3b9e-8f62-9412a8dcbb18.roa File: 8b7e17f9-bdc7-3b9e-8f62-9412a8dcbb18.roa (raw, json) Hash identifier: y5/dAano6gf2hgNW6QlOwUo71qVZlRGYNSRJlGe+PrE= Subject key identifier: E9:44:2C:28:3F:BC:0C:88:46:33:0E:F5:D7:7B:EF:BE:D6:AA:73:73 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0BC8EAA0BE9B56890C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b7e17f9-bdc7-3b9e-8f62-9412a8dcbb18.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.71.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0b:c8:ea:a0:be:9b:56:89:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=33c58701-1092-4469-823a-c59e2d25201d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:13:9c:24:3d:a5:b7:89:91:44:d4:72:94: 9f:8f:ce:8e:d6:d8:c4:dd:2c:dd:7f:6f:7f:cc:5e: 25:67:44:88:0c:e7:37:f1:6a:19:5a:24:eb:f6:61: 09:5a:19:33:db:f9:30:b1:5d:4e:a8:ca:cf:c4:4d: 1b:04:04:72:f1:5e:34:9b:5f:3b:f8:27:5f:4d:95: 91:d0:d4:22:4f:54:4c:92:05:dc:89:85:85:42:2f: 72:10:e9:3f:c5:3c:34:ad:21:a3:7a:9e:87:5b:32: 81:90:30:49:43:19:83:53:cf:f8:67:a6:55:22:74: a5:81:6e:5a:4b:51:5a:1e:89:a3:8d:59:55:fd:ab: 02:97:04:70:6a:62:f5:80:85:ae:60:91:96:98:62: 63:9f:f2:63:50:bd:84:e2:d0:cd:1a:16:03:33:59: 73:38:8a:98:30:93:40:19:3f:ee:93:b4:7d:d6:d1: d0:75:96:fa:c7:78:b5:11:81:0f:cb:9c:7f:64:c5: 09:20:0a:32:25:74:d6:0d:eb:62:7c:6c:b0:73:1f: 0b:f2:db:ca:0c:84:94:82:9a:08:01:04:1e:56:5e: 2e:dd:0d:2e:dd:26:23:6f:82:d1:4e:bf:3d:48:93: 67:7b:f8:9e:db:2e:ba:81:58:c1:c3:b2:87:b9:e4: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:44:2C:28:3F:BC:0C:88:46:33:0E:F5:D7:7B:EF:BE:D6:AA:73:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8b7e17f9-bdc7-3b9e-8f62-9412a8dcbb18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:bc:58:e8:fb:5a:96:aa:c0:ee:a0:36:f8:27:8d:f1:11:da: ca:c7:91:6c:88:7d:00:26:7d:ee:e2:d3:b8:7f:58:80:b9:99: 82:cf:2e:20:ca:98:f7:0e:79:f1:ea:97:4c:75:d3:97:a4:ca: b9:76:43:ab:39:e1:ab:51:34:1f:d7:53:a7:f8:59:32:da:94: a1:9f:9b:57:d0:38:2c:e9:f9:d2:17:2f:23:a0:b9:6b:c2:c9: 37:1c:54:29:22:1c:e7:c2:81:4e:0c:9c:33:85:31:42:2c:49: 90:98:26:dc:0b:12:4f:fa:43:13:58:5b:ff:aa:c4:74:94:55: ad:d3:6a:4a:62:2e:ee:0a:e3:4f:3e:8b:68:b1:62:c1:fd:64: 8c:0b:99:4d:1e:a2:27:63:c6:15:16:29:14:f1:76:55:9b:4b: 6c:63:7a:1c:68:87:bf:fe:f7:6b:2f:22:32:06:aa:f9:6b:0f: 65:bc:e3:d5:05:cd:23:0d:ae:f2:66:f5:0a:b4:0d:1e:be:3f: a9:d9:43:14:a6:9b:e9:d4:42:f1:d0:bd:0f:b3:32:e5:0f:15: f2:2d:50:ac:94:76:3c:36:58:1c:08:59:59:a8:84:34:70:07: 0a:96:49:9b:2d:ca:93:95:49:ce:08:6d:34:ac:9e:66:6f:fe: 15:db:18:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQvI6qC+m1aJDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MzNjNTg3MDEtMTA5Mi00NDY5LTgyM2EtYzU5ZTJkMjUyMDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSETnCQ9pbeJkUTUcpSfj86O1tjE3Szdf29/ zF4lZ0SIDOc38WoZWiTr9mEJWhkz2/kwsV1OqMrPxE0bBARy8V40m187+CdfTZWR 0NQiT1RMkgXciYWFQi9yEOk/xTw0rSGjep6HWzKBkDBJQxmDU8/4Z6ZVInSlgW5a S1FaHomjjVlV/asClwRwamL1gIWuYJGWmGJjn/JjUL2E4tDNGhYDM1lzOIqYMJNA GT/uk7R91tHQdZb6x3i1EYEPy5x/ZMUJIAoyJXTWDetifGywcx8L8tvKDISUgpoI AQQeVl4u3Q0u3SYjb4LRTr89SJNne/ie2y66gVjBw7KHueTvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlELCg/vAyIRjMO9dd7777WqnNzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGI3ZTE3ZjktYmRjNy0z YjllLThmNjItOTQxMmE4ZGNiYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK8WOj7WpaqwO6gNvgnjfER2srHkWyIfQAmfe7i07h/WIC5mYLPLiDK mPcOefHql0x105ekyrl2Q6s54atRNB/XU6f4WTLalKGfm1fQOCzp+dIXLyOguWvC yTccVCkiHOfCgU4MnDOFMUIsSZCYJtwLEk/6QxNYW/+qxHSUVa3TakpiLu4K408+ i2ixYsH9ZIwLmU0eoidjxhUWKRTxdlWbS2xjehxoh7/+92svIjIGqvlrD2W849UF zSMNrvJm9Qq0DR6+P6nZQxSmm+nUQvHQvQ+zMuUPFfItUKyUdjw2WBwIWVmohDRw BwqWSZstypOVSc4IbTSsnmZv/hXbGBI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:41 2025 by rpki-client