$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beaa19de-1ead-38c1-a867-330765741728.roa File: beaa19de-1ead-38c1-a867-330765741728.roa (raw, json) Hash identifier: cTiFpCbMA5JrfRQd/CT3y6Yi9UIB8t1Tju6DR9ymYBM= Subject key identifier: 31:B8:51:E2:01:8A:CF:59:F8:09:D8:A4:9C:4C:0B:F9:AE:69:BF:9D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926DD020951AD9416EAC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beaa19de-1ead-38c1-a867-330765741728.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6d:d0:20:95:1a:d9:41:6e:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=7dcf7c1e-042c-4e23-9bc3-f233029deabc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:c8:61:df:61:f1:ad:5d:74:18:9d:4b:c6: 51:bc:ec:3a:5b:37:d3:86:24:c3:f0:00:cf:dc:67: a0:98:7d:de:96:d9:13:2e:09:b8:04:94:83:68:ee: b2:fa:46:e9:67:05:97:4f:f2:ed:a5:bb:bb:20:01: 93:23:f3:7c:89:9a:1a:32:20:9d:d4:4a:d6:50:3d: 83:86:62:3e:31:2e:1d:44:c6:d7:31:93:af:aa:99: f9:cb:6d:51:4d:cd:46:9d:a1:4b:81:30:2f:b6:c6: 7d:2c:49:6d:65:42:1a:07:b6:e9:40:7a:37:45:91: 67:d5:12:2f:6b:ab:ec:a8:0d:96:0a:d5:24:cf:a5: ad:32:f6:07:d9:de:fe:fe:bb:e1:68:cb:80:d7:2d: 93:5a:70:3e:28:72:9f:d8:27:23:6c:03:98:98:db: 90:80:bb:82:cc:2d:3a:8a:6e:f9:95:99:0a:6b:26: f7:34:5a:14:77:5c:2b:4f:70:78:20:28:a0:77:0e: 33:ff:f8:48:8b:07:f3:c8:4c:72:16:7e:31:b6:72: 55:6b:ef:e9:ca:58:c1:8b:53:2b:d3:6d:1a:28:95: 6b:e9:93:3c:de:0b:4f:cc:55:2a:9e:a7:1b:cc:15: af:fc:66:e5:d7:a9:1c:3d:84:be:16:47:14:2c:73: ad:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B8:51:E2:01:8A:CF:59:F8:09:D8:A4:9C:4C:0B:F9:AE:69:BF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/beaa19de-1ead-38c1-a867-330765741728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6b:19:34:a0:66:86:e9:9f:cf:0d:b4:47:71:d7:0b:12:09: 0f:1d:7d:51:5d:7f:c6:88:2b:9d:8d:b3:c5:83:9a:06:3e:19: ca:09:1f:3d:be:72:5d:ca:f8:37:1a:c7:c9:c9:5e:98:22:62: 0f:42:a6:19:af:cb:0c:fc:75:57:c0:ac:bd:30:fc:d4:01:d9: b5:97:6b:5a:90:af:46:b2:7b:af:0a:17:20:e3:0e:e0:7a:ca: cb:a9:90:37:d0:14:43:cf:d3:dd:d7:56:7c:97:24:87:19:f9: fe:6d:9a:fc:2d:a1:28:5d:c0:fb:23:fc:29:86:b6:f0:48:2f: a6:a1:02:1d:9e:54:ef:c0:49:81:4d:a9:01:71:b6:20:4e:05: 48:49:60:9c:e2:4b:a6:56:8b:72:70:ed:70:7e:c9:3e:27:75: 3c:85:ec:79:78:a3:f8:c9:32:4d:c9:5d:f8:9b:14:ea:f3:7d: e5:92:f9:f6:6f:38:de:5c:6a:b8:0b:66:fa:6f:06:85:b3:cc: 04:53:39:e4:0b:9b:24:ee:5a:4a:5b:8e:5b:26:47:98:fc:ca: 4d:53:d1:df:23:3a:4a:c5:fd:84:4d:de:76:21:5d:a8:a7:86: 26:c2:12:ad:20:3c:8e:a0:7a:27:9a:9c:8d:90:28:90:8a:fa: 88:50:5d:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm3QIJUa2UFurAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk N2RjZjdjMWUtMDQyYy00ZTIzLTliYzMtZjIzMzAyOWRlYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiufIYd9h8a1ddBidS8ZRvOw6WzfThiTD8ADP 3GegmH3eltkTLgm4BJSDaO6y+kbpZwWXT/Ltpbu7IAGTI/N8iZoaMiCd1ErWUD2D hmI+MS4dRMbXMZOvqpn5y21RTc1GnaFLgTAvtsZ9LEltZUIaB7bpQHo3RZFn1RIv a6vsqA2WCtUkz6WtMvYH2d7+/rvhaMuA1y2TWnA+KHKf2CcjbAOYmNuQgLuCzC06 im75lZkKayb3NFoUd1wrT3B4ICigdw4z//hIiwfzyExyFn4xtnJVa+/pyljBi1Mr 020aKJVr6ZM83gtPzFUqnqcbzBWv/Gbl16kcPYS+FkcULHOt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG4UeIBis9Z+AnYpJxMC/muab+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmVhYTE5ZGUtMWVhZC0z OGMxLWE4NjctMzMwNzY1NzQxNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEd6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJrGTSgZobpn88NtEdx1wsSCQ8dfVFdf8aIK52Ns8WDmgY+GcoJHz2+ cl3K+Dcax8nJXpgiYg9Cphmvywz8dVfArL0w/NQB2bWXa1qQr0aye68KFyDjDuB6 ysupkDfQFEPP093XVnyXJIcZ+f5tmvwtoShdwPsj/CmGtvBIL6ahAh2eVO/ASYFN qQFxtiBOBUhJYJziS6ZWi3Jw7XB+yT4ndTyF7Hl4o/jJMk3JXfibFOrzfeWS+fZv ON5cargLZvpvBoWzzARTOeQLmyTuWkpbjlsmR5j8yk1T0d8jOkrF/YRN3nYhXain hibCEq0gPI6geieanI2QKJCK+ohQXRU= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:50 2025 by rpki-client