$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9e25aa-46ff-3dc2-9db7-4d418c874c3c.roa File: 9b9e25aa-46ff-3dc2-9db7-4d418c874c3c.roa (raw, json) Hash identifier: GJibEXWCIhyUmcddixR055+6SloNa3n2N/i06Bp6gqs= Subject key identifier: 17:33:8B:20:A5:20:C0:88:D0:D6:6D:DA:6D:94:12:CF:65:69:16:EC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927D5AA2566EECE8956D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9e25aa-46ff-3dc2-9db7-4d418c874c3c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:5a:a2:56:6e:ec:e8:95:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=16105f2b-b284-42ba-9ebe-806b494c7665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b3:34:ab:63:f1:e2:b7:18:0e:76:1a:30:db: 28:e5:e5:d6:44:92:45:cb:d5:d6:2b:4a:5b:a4:78: 80:82:44:34:b3:20:05:49:e1:d7:d7:b9:04:c0:b6: e8:37:92:5f:77:cd:49:52:18:83:47:24:8f:f2:01: 7b:11:35:77:8a:2c:b9:33:82:60:ec:fd:39:2e:d8: 88:e7:f5:7d:5a:b3:10:2c:5e:d0:c6:3e:c0:0d:94: 06:08:74:61:ba:9f:e6:e7:e4:66:10:19:a2:81:b3: 5d:95:07:8c:3e:86:6f:2b:b2:cf:7f:e0:55:ed:bf: 82:f0:65:ec:b9:7a:17:d9:e6:7d:11:32:9c:cf:6c: d7:90:f3:7a:9e:b1:c8:04:d6:98:71:bc:e7:27:62: 07:98:bc:1a:c3:f7:54:01:8f:29:61:91:ea:eb:02: af:70:d8:8c:9c:2f:dd:59:43:88:c8:dc:3b:3a:9d: 58:e0:ae:ee:c1:74:09:f1:4e:63:79:b5:c4:b2:fb: 16:8f:5a:29:7b:34:f5:22:58:b2:6a:88:e3:cc:ea: 58:89:91:cd:a0:0b:9a:d8:05:83:1b:3f:d7:d0:c4: 59:61:d8:7b:c7:60:1a:81:01:fa:7d:83:57:13:2f: d0:d4:0b:4d:66:55:8b:4a:e3:c0:d8:c1:9d:ff:b7: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:8B:20:A5:20:C0:88:D0:D6:6D:DA:6D:94:12:CF:65:69:16:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9b9e25aa-46ff-3dc2-9db7-4d418c874c3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ee:e6:2c:16:c6:80:0b:33:64:c2:3d:6e:d2:fe:bb:5c:78: ac:a9:24:97:a6:f4:ce:6d:e1:a2:ba:47:7b:90:69:16:63:20: c9:c8:2a:c1:64:d1:3d:54:22:71:cb:59:7c:90:f0:3a:72:12: 2c:0b:a1:df:93:ea:27:9f:ee:bc:f2:fb:43:40:4a:0c:9b:84: b2:b2:05:9e:e2:80:34:03:21:90:59:94:ca:47:84:a7:1e:31: 17:9c:6a:a1:f2:ee:4e:5b:8a:ef:1a:2b:3e:54:c7:a4:4f:d9: 3f:72:c0:fa:fe:2f:39:21:73:a6:ff:1d:6a:b6:32:92:02:79: b6:2e:d4:49:d1:95:df:06:b0:6f:69:4f:7a:61:bb:c9:45:e4: d9:2f:67:20:af:d3:2a:66:a6:47:77:4e:58:20:fc:d8:d7:82: e2:01:86:61:70:28:45:eb:ad:d5:20:87:f8:a3:e7:48:0f:f9: 4e:25:9d:f0:93:af:fe:0c:df:9c:d5:e1:d0:93:49:38:25:71: 58:08:a8:9c:71:60:31:30:b2:74:92:1f:8a:7d:03:4c:d0:9a: f5:f6:5d:63:61:20:f6:3c:fb:62:5a:ed:4c:97:73:4e:2f:16: e3:6f:ea:f8:4f:6c:14:97:8d:fc:c7:23:ab:9a:39:51:4b:3b: 0a:1f:20:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn1aolZu7OiVbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTYxMDVmMmItYjI4NC00MmJhLTllYmUtODA2YjQ5NGM3NjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLM0q2Px4rcYDnYaMNso5eXWRJJFy9XWK0pb pHiAgkQ0syAFSeHX17kEwLboN5Jfd81JUhiDRySP8gF7ETV3iiy5M4Jg7P05LtiI 5/V9WrMQLF7Qxj7ADZQGCHRhup/m5+RmEBmigbNdlQeMPoZvK7LPf+BV7b+C8GXs uXoX2eZ9ETKcz2zXkPN6nrHIBNaYcbznJ2IHmLwaw/dUAY8pYZHq6wKvcNiMnC/d WUOIyNw7Op1Y4K7uwXQJ8U5jebXEsvsWj1opezT1IliyaojjzOpYiZHNoAua2AWD Gz/X0MRZYdh7x2AagQH6fYNXEy/Q1AtNZlWLSuPA2MGd/7dRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcziyClIMCI0NZt2m2UEs9laRbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWI5ZTI1YWEtNDZmZi0z ZGMyLTlkYjctNGQ0MThjODc0YzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETu5iwWxoALM2TCPW7S/rtceKypJJem9M5t4aK6R3uQaRZjIMnIKsFk 0T1UInHLWXyQ8DpyEiwLod+T6ief7rzy+0NASgybhLKyBZ7igDQDIZBZlMpHhKce MRecaqHy7k5biu8aKz5Ux6RP2T9ywPr+Lzkhc6b/HWq2MpICebYu1EnRld8GsG9p T3phu8lF5NkvZyCv0ypmpkd3Tlgg/NjXguIBhmFwKEXrrdUgh/ij50gP+U4lnfCT r/4M35zV4dCTSTglcVgIqJxxYDEwsnSSH4p9A0zQmvX2XWNhIPY8+2Ja7UyXc04v FuNv6vhPbBSXjfzHI6uaOVFLOwofICY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:10 2025 by rpki-client