$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa File: b3f089f5-5c10-3467-a622-c6ea09b985d8.roa (raw, json) Hash identifier: lz75NopCWof3t82kkXbXrX+UT/D/Jm0SwJu22oWyEU4= Subject key identifier: DD:21:66:CC:AC:2E:36:4B:E0:55:3B:88:83:5A:D8:02:6C:7F:F1:A0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927E06734625432F1A1340 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7e:06:73:46:25:43:2f:1a:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9509e87d-e3ad-41a8-beae-c3f8d1540177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f3:04:c0:04:02:f3:23:50:ae:ff:de:a6:ca: 15:4f:4d:05:88:d9:0a:f2:3d:01:ca:3c:53:c3:7b: e8:9c:ef:18:e9:99:6f:45:29:2f:64:fa:db:43:67: 1c:1a:76:ef:5a:22:41:d9:a7:1a:94:76:9a:41:f7: b8:50:aa:cf:e1:f4:37:5a:01:60:00:ac:0d:76:fa: b4:32:1e:9a:98:c7:7b:ff:33:64:d1:02:f8:b4:0e: 8a:4f:f1:ee:fa:87:ba:02:01:43:88:1e:68:ab:db: a9:ac:8c:e2:9f:99:d7:71:19:7f:b5:5a:e9:2b:13: 3a:5f:ba:d4:60:d0:c1:79:1e:fc:29:b7:0b:27:ad: de:c7:45:9d:23:10:15:4b:fc:95:45:fe:c9:67:82: dc:bb:56:7f:96:5f:8d:ab:c8:7e:05:f0:b7:0d:06: 2a:27:a6:ce:2b:0b:40:2d:9c:03:d3:cb:87:06:d9: 8a:7d:99:d8:c5:f7:00:0c:14:4b:5e:cc:3f:c6:09: f8:24:59:7f:f5:3a:78:30:d5:30:fe:ba:d1:b0:3b: 2d:d7:ea:4a:46:86:ea:da:c7:03:2c:ff:a3:55:80: 6c:a6:c2:a8:2a:9a:bc:68:31:f6:98:95:2d:f9:2b: 33:4d:c0:9f:a3:e4:90:6c:25:10:b4:d9:2b:84:1e: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:21:66:CC:AC:2E:36:4B:E0:55:3B:88:83:5A:D8:02:6C:7F:F1:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b3f089f5-5c10-3467-a622-c6ea09b985d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:34:1e:46:7b:58:56:56:ef:49:48:40:43:30:45:70:8f:a5: 05:87:d2:a7:67:e9:a3:ac:7b:6b:c2:2e:58:db:f7:3f:38:2e: 3d:c3:29:4d:8e:e2:26:53:c1:0a:2d:0b:8e:14:ad:29:01:ee: 64:08:32:68:ad:86:94:15:e5:c4:ef:6b:63:3e:ec:d8:d5:59: 13:4a:06:47:76:e3:41:17:e3:5c:e3:4b:68:7a:ff:92:25:a0: f1:d9:93:57:c0:a5:42:4e:4e:14:3c:d8:8f:70:7e:55:79:19: 33:c7:6f:4a:24:9d:a9:e1:b2:17:49:e3:22:da:64:93:8d:ab: a2:7c:31:5c:73:62:c7:15:be:01:f8:b3:8c:c8:b3:b1:d8:39: 40:c1:40:4e:86:d2:ba:ac:88:b4:46:5c:56:d2:41:6a:5c:af: 93:60:33:c4:16:9e:3d:07:8a:44:ba:73:bf:fb:1e:2b:a7:3c: 13:78:55:81:a8:85:0a:8b:63:d3:fc:4b:d3:cf:8e:47:4d:c8: 21:da:f0:e6:70:d8:ea:bc:99:b5:fd:20:8b:02:eb:00:c8:a9: e2:68:1a:c8:f6:5a:55:28:cd:23:25:15:b8:e2:7a:bb:40:d6: 63:de:78:89:24:19:e9:3a:f1:aa:d6:7f:15:1d:85:66:61:60: 3d:83:9a:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn4Gc0YlQy8aE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OTUwOWU4N2QtZTNhZC00MWE4LWJlYWUtYzNmOGQxNTQwMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPMEwAQC8yNQrv/epsoVT00FiNkK8j0ByjxT w3vonO8Y6ZlvRSkvZPrbQ2ccGnbvWiJB2acalHaaQfe4UKrP4fQ3WgFgAKwNdvq0 Mh6amMd7/zNk0QL4tA6KT/Hu+oe6AgFDiB5oq9uprIzin5nXcRl/tVrpKxM6X7rU YNDBeR78KbcLJ63ex0WdIxAVS/yVRf7JZ4Lcu1Z/ll+Nq8h+BfC3DQYqJ6bOKwtA LZwD08uHBtmKfZnYxfcADBRLXsw/xgn4JFl/9Tp4MNUw/rrRsDst1+pKRobq2scD LP+jVYBspsKoKpq8aDH2mJUt+SszTcCfo+SQbCUQtNkrhB4aqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0hZsysLjZL4FU7iINa2AJsf/GgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjNmMDg5ZjUtNWMxMC0z NDY3LWE2MjItYzZlYTA5Yjk4NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE0HkZ7WFZW70lIQEMwRXCPpQWH0qdn6aOse2vCLljb9z84Lj3DKU2O 4iZTwQotC44UrSkB7mQIMmithpQV5cTva2M+7NjVWRNKBkd240EX41zjS2h6/5Il oPHZk1fApUJOThQ82I9wflV5GTPHb0oknanhshdJ4yLaZJONq6J8MVxzYscVvgH4 s4zIs7HYOUDBQE6G0rqsiLRGXFbSQWpcr5NgM8QWnj0HikS6c7/7HiunPBN4VYGo hQqLY9P8S9PPjkdNyCHa8OZw2Oq8mbX9IIsC6wDIqeJoGsj2WlUozSMlFbjiertA 1mPeeIkkGek68arWfxUdhWZhYD2DmqY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:16 2025 by rpki-client