$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/abc478a1-7a2c-3e82-944e-e3f4f67ea8de.roa File: abc478a1-7a2c-3e82-944e-e3f4f67ea8de.roa (raw, json) Hash identifier: nuG8TNa1z6I84rnmNUhFmNsW55cNNn6ib8TbzgHIHgc= Subject key identifier: 99:9A:F4:23:EA:25:9B:91:A2:CF:93:2A:7A:B4:0F:A5:69:66:78:1A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFA7BF052C69B55ABAB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/abc478a1-7a2c-3e82-944e-e3f4f67ea8de.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.71.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:fa:7b:f0:52:c6:9b:55:ab:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=bb74051d-f5d6-43ee-8212-dd3fe9bb8c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:d8:f4:56:d3:9e:11:25:4c:68:14:75:8e: 67:53:9f:82:bb:80:24:ea:6f:f2:df:d4:61:73:9d: ae:e6:cb:3b:71:c7:45:91:ff:ed:5c:46:91:b5:0d: 19:9b:f1:21:f6:0a:20:da:b0:08:36:4c:62:fa:cb: 4f:11:5b:20:dc:1b:e7:8d:53:47:25:85:48:75:02: 2d:e8:aa:86:67:7e:cc:32:75:c5:7e:fd:de:d2:ad: 73:24:75:05:12:d4:3e:5d:03:a3:b9:07:bc:07:19: 57:6b:ab:11:45:50:8f:87:f3:ad:b9:ba:56:ce:27: 2c:57:44:20:c5:4b:7b:ed:5d:e5:9d:13:c0:25:10: 49:92:39:6b:3b:22:63:9c:d8:0b:6c:22:65:ea:c2: d3:40:5d:a6:e4:45:9b:4e:1a:cf:fe:cd:a2:7e:3b: 70:01:55:ee:17:3d:93:37:be:00:05:b5:21:6c:88: b1:44:3f:47:1e:0f:0d:64:c7:2a:e7:f7:de:6b:35: cd:f4:e5:a9:82:db:15:a1:82:06:bc:1c:72:33:38: 7f:43:7b:03:f0:fe:70:84:81:10:b8:8a:20:62:bc: 1f:55:0a:69:13:3c:9c:f3:da:8f:23:85:bb:31:b0: 9b:6e:55:3f:9a:60:f8:d8:3b:ac:54:99:4d:61:5a: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:F4:23:EA:25:9B:91:A2:CF:93:2A:7A:B4:0F:A5:69:66:78:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/abc478a1-7a2c-3e82-944e-e3f4f67ea8de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:31:4c:62:d8:0a:59:fb:8e:4d:56:86:96:cb:ef:cf:d8:5e: 1e:1c:57:c8:81:3e:39:86:c1:b5:45:50:c5:ee:d7:f2:a7:74: a2:13:8e:b1:3e:67:b7:53:c0:57:e3:f4:d8:81:95:b1:79:9f: 87:78:63:06:67:2a:10:eb:a0:9a:2a:ff:3d:c0:98:3a:d0:9c: 8e:a2:3c:8b:7b:5e:b9:8d:42:22:89:f7:12:2f:0d:e4:02:2e: 1b:05:60:be:19:12:77:fe:f7:25:19:34:1b:fe:29:a4:2d:2c: b8:b5:dc:37:8f:4a:87:d5:2a:7b:81:30:e3:64:09:bc:5a:e8: 1a:c3:69:bc:b6:35:42:f2:54:e2:ae:05:ce:af:08:da:a8:77: 77:a8:22:e2:a8:a7:c2:c8:43:6e:a8:7d:c1:0c:50:72:76:de: d4:6d:37:08:25:58:d4:38:7b:02:98:d9:d1:01:9f:3f:cb:10: 63:5d:7b:22:52:78:aa:ee:92:08:ba:c8:4c:b9:39:f3:0a:44: 5f:90:76:94:f8:38:b5:93:20:6d:d5:98:61:b9:90:fb:20:14: a2:56:46:be:6e:3d:71:0a:85:25:12:a8:47:4b:33:b7:e9:b4: 88:46:3c:df:54:5e:02:b2:f9:94:f5:79:1d:b5:2e:7c:f7:f7: d1:b3:e7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPp78FLGm1WrqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YmI3NDA1MWQtZjVkNi00M2VlLTgyMTItZGQzZmU5YmI4YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsLY9FbTnhElTGgUdY5nU5+Cu4Ak6m/y39Rh c52u5ss7ccdFkf/tXEaRtQ0Zm/Eh9gog2rAINkxi+stPEVsg3BvnjVNHJYVIdQIt 6KqGZ37MMnXFfv3e0q1zJHUFEtQ+XQOjuQe8BxlXa6sRRVCPh/OtubpWzicsV0Qg xUt77V3lnRPAJRBJkjlrOyJjnNgLbCJl6sLTQF2m5EWbThrP/s2ifjtwAVXuFz2T N74ABbUhbIixRD9HHg8NZMcq5/feazXN9OWpgtsVoYIGvBxyMzh/Q3sD8P5whIEQ uIogYrwfVQppEzyc89qPI4W7MbCbblU/mmD42DusVJlNYVrK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJma9CPqJZuRos+TKnq0D6VpZngaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWJjNDc4YTEtN2EyYy0z ZTgyLTk0NGUtZTNmNGY2N2VhOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEExTGLYCln7jk1WhpbL78/YXh4cV8iBPjmGwbVFUMXu1/KndKITjrE+ Z7dTwFfj9NiBlbF5n4d4YwZnKhDroJoq/z3AmDrQnI6iPIt7XrmNQiKJ9xIvDeQC LhsFYL4ZEnf+9yUZNBv+KaQtLLi13DePSofVKnuBMONkCbxa6BrDaby2NULyVOKu Bc6vCNqod3eoIuKop8LIQ26ofcEMUHJ23tRtNwglWNQ4ewKY2dEBnz/LEGNdeyJS eKrukgi6yEy5OfMKRF+QdpT4OLWTIG3VmGG5kPsgFKJWRr5uPXEKhSUSqEdLM7fp tIhGPN9UXgKy+ZT1eR21Lnz399Gz57Q= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:29 2025 by rpki-client