$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa File: 9adbafcd-3e89-3384-a841-a56fd04e9a52.roa (raw, json) Hash identifier: 4Uwfe8n5vR4eBYap8efsMvPalgaVyY/b5ulCbXSfgBw= Subject key identifier: D9:53:B3:C3:07:35:32:0E:81:78:03:94:1E:4A:2B:A1:FC:A0:95:77 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927BD2B1CDD89F3F57E980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7b:d2:b1:cd:d8:9f:3f:57:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=67f0a537-a02f-4888-8df8-b386de7b5c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:a4:ce:d2:b4:f7:7d:b2:9f:61:5c:dc:a8: 9f:19:d9:18:d5:65:bd:4b:9b:dc:fc:6a:21:3b:5c: bf:96:3b:3e:b2:89:10:08:e8:a3:ef:f4:bb:2c:38: 95:17:2c:d3:1e:c7:eb:97:0c:d9:e5:6c:72:0f:d0: 29:28:d8:0a:d3:8b:ad:80:32:44:5b:f7:1d:ff:76: 7d:b8:a9:ae:d2:c4:c0:7a:89:64:b3:c0:a6:ed:bd: a7:2b:e1:e3:53:ea:c8:e2:3a:8c:29:43:2a:b9:37: 62:d1:d1:a6:f6:6f:d4:83:2f:7c:c1:a4:8a:79:5b: ce:65:7e:fc:c4:cd:67:e5:eb:53:d8:8a:89:85:2e: d9:07:38:6c:69:0e:cd:3b:03:ca:82:e7:38:02:00: 0e:9d:2c:b8:09:64:c6:b1:59:97:91:3c:1d:59:d6: 4e:35:0d:4c:2a:59:6c:f6:3f:95:63:70:ef:dd:ce: b9:8f:57:16:e6:d7:eb:eb:22:9a:3d:f0:73:08:b0: 96:ef:b6:44:30:3f:3f:db:57:48:fa:fe:be:f1:c7: d9:71:4b:a4:14:a3:19:17:d6:83:04:ec:05:8c:8f: 7c:82:e1:92:b3:d4:27:ba:80:6f:12:93:89:1e:b3: 0d:80:79:78:88:f4:5d:44:4a:97:c2:18:25:63:74: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:53:B3:C3:07:35:32:0E:81:78:03:94:1E:4A:2B:A1:FC:A0:95:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9adbafcd-3e89-3384-a841-a56fd04e9a52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:23:bd:32:37:6b:22:63:77:ec:36:56:ff:54:de:fc:5f:7e: 18:01:e2:62:bf:1a:24:1f:22:cf:66:03:de:d1:58:8a:73:4e: 6a:30:f6:4c:72:74:74:92:7c:26:37:8a:84:14:ac:4a:54:0f: ba:6d:8b:49:f2:0d:a8:a6:ee:64:41:6f:84:84:a8:4c:7a:b7: da:de:8f:a6:1e:7c:32:c7:fd:98:41:3c:fb:3b:28:e0:e8:c5: 95:b6:b7:5b:27:39:15:87:85:b8:96:88:31:72:8a:4f:51:fc: 94:6d:a3:cc:9e:74:75:a9:36:50:a3:21:8c:e2:f7:6d:9b:40: 0d:81:c2:c8:95:e6:9a:14:bd:f8:5a:e1:d0:76:3e:55:19:20: ed:f5:28:aa:75:ed:e1:cb:c8:f0:69:e4:42:86:4e:85:d5:06: 7d:b3:cb:82:15:bc:cf:dc:8a:52:13:00:cd:93:fa:2c:62:f6: a6:3b:e3:36:8d:ac:48:51:cf:a6:40:31:5e:1e:0e:e3:53:f9: b8:eb:b7:49:23:ca:62:aa:e6:15:b9:6e:cb:a1:44:c7:65:35: a8:3c:98:b9:19:73:ea:d5:c6:2e:81:63:6d:90:f8:77:54:4e: 73:bb:0d:80:9f:5d:1d:2d:4f:2a:97:4a:8f:91:63:2c:b2:16: 39:51:61:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknvSsc3Ynz9X6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjdmMGE1MzctYTAyZi00ODg4LThkZjgtYjM4NmRlN2I1Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoOkztK0932yn2Fc3KifGdkY1WW9S5vc/Goh O1y/ljs+sokQCOij7/S7LDiVFyzTHsfrlwzZ5WxyD9ApKNgK04utgDJEW/cd/3Z9 uKmu0sTAeolks8Cm7b2nK+HjU+rI4jqMKUMquTdi0dGm9m/Ugy98waSKeVvOZX78 xM1n5etT2IqJhS7ZBzhsaQ7NOwPKguc4AgAOnSy4CWTGsVmXkTwdWdZONQ1MKlls 9j+VY3Dv3c65j1cW5tfr6yKaPfBzCLCW77ZEMD8/21dI+v6+8cfZcUukFKMZF9aD BOwFjI98guGSs9QnuoBvEpOJHrMNgHl4iPRdREqXwhglY3QlwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlTs8MHNTIOgXgDlB5KK6H8oJV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWFkYmFmY2QtM2U4OS0z Mzg0LWE4NDEtYTU2ZmQwNGU5YTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgjvTI3ayJjd+w2Vv9U3vxffhgB4mK/GiQfIs9mA97RWIpzTmow9kxy dHSSfCY3ioQUrEpUD7pti0nyDaim7mRBb4SEqEx6t9rej6YefDLH/ZhBPPs7KODo xZW2t1snORWHhbiWiDFyik9R/JRto8yedHWpNlCjIYzi922bQA2BwsiV5poUvfha 4dB2PlUZIO31KKp17eHLyPBp5EKGToXVBn2zy4IVvM/cilITAM2T+ixi9qY74zaN rEhRz6ZAMV4eDuNT+bjrt0kjymKq5hW5bsuhRMdlNag8mLkZc+rVxi6BY22Q+HdU TnO7DYCfXR0tTyqXSo+RYyyyFjlRYQk= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:01 2025 by rpki-client