$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf0ddd1e-11b0-30bd-b950-30b37dca9af9.roa File: bf0ddd1e-11b0-30bd-b950-30b37dca9af9.roa (raw, json) Hash identifier: uyoYGNmuiyqCwca1nSOD/7ak53IVwLPNCRxvALI6IDg= Subject key identifier: 39:B1:5F:CA:09:84:A2:22:C4:69:D2:35:99:C1:D4:20:DA:C1:6B:FF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA93286C644694EE5631DA480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf0ddd1e-11b0-30bd-b950-30b37dca9af9.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:86:c6:44:69:4e:e5:63:1d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b732fa36-67df-4b19-b46d-df9461de62dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:f7:56:22:fc:84:96:b2:ab:ae:ae:c7:28: b9:5a:3f:bd:9b:cd:1a:92:3a:fa:90:73:04:14:28: fc:bb:dd:a1:68:fb:86:fd:e0:12:3e:4f:b7:71:b4: ab:11:6e:77:07:4d:51:7e:36:5a:c1:a4:c7:cc:16: 6f:d2:80:28:39:35:ba:b4:72:b1:e0:56:26:ad:3e: e1:dc:5c:ed:1b:66:30:28:6d:3e:a4:2a:dd:ab:df: 90:02:c3:84:44:ad:fa:08:88:32:e1:ad:52:c5:06: 24:2e:65:35:66:7d:46:14:8d:51:38:4b:4f:1d:1f: 1f:c8:14:e1:b3:26:24:dd:67:22:14:24:38:b3:d3: b7:54:b9:b6:40:27:80:b0:b3:51:97:3b:28:64:04: 25:71:07:cb:b4:79:82:b4:9e:d7:a4:1b:6b:46:8b: 7e:ca:72:a7:82:f7:32:51:49:b6:b7:82:11:50:96: 71:52:2b:57:af:51:f1:b0:3c:67:fd:19:2f:9f:4b: 80:33:4e:4b:b7:ff:c9:94:c2:72:6b:c4:a2:91:85: 4c:d4:5c:50:97:d2:e7:46:e2:eb:94:1d:b8:dd:80: 5a:9d:6c:d6:c8:0d:8a:25:97:fc:f6:2d:ad:31:30: 8c:b6:3e:a3:bb:87:17:5b:2e:6f:aa:eb:f9:e3:95: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B1:5F:CA:09:84:A2:22:C4:69:D2:35:99:C1:D4:20:DA:C1:6B:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf0ddd1e-11b0-30bd-b950-30b37dca9af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:d3:28:48:ea:96:c5:f5:22:b4:a8:22:c1:70:9b:e0:dc:bd: f9:6b:8c:09:f7:b6:1c:c5:dd:82:1d:78:11:c2:70:8a:77:1d: 46:01:4f:eb:9e:82:ce:82:02:05:58:21:44:e6:d6:64:19:32: f5:7b:fd:98:6e:bb:37:89:fc:80:fc:05:3c:27:33:f5:f6:49: 08:a9:3d:60:61:b1:88:d5:0e:e1:b3:5e:84:92:65:52:f7:3d: 1a:4c:3a:64:9b:ae:ac:f2:6b:59:cf:16:44:fc:89:20:48:38: da:76:ea:16:d5:71:8d:e7:6e:58:39:48:63:18:2d:e8:4e:61: e3:5f:8c:2c:4a:fb:22:3f:48:44:bf:64:93:70:67:5f:2e:a1: ed:24:12:a7:48:16:85:72:15:f7:08:bb:81:59:0a:f6:a8:b2: ac:d3:43:53:37:c5:67:42:cb:74:79:a9:a1:e3:01:fe:72:73: 6b:3b:97:d7:6f:fc:63:03:9b:a1:38:bc:34:87:a7:de:c2:99: e4:c5:f0:92:27:61:3a:00:8e:0b:b0:1f:c1:a4:2c:e5:3d:cd: de:28:13:89:0b:71:0c:15:fe:22:d2:b0:b2:10:6f:9e:fc:1a: fc:3c:61:54:69:5d:49:71:f9:a6:9f:13:fd:27:b6:5e:a1:99: 19:af:6a:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMobGRGlO5WMdpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YjczMmZhMzYtNjdkZi00YjE5LWI0NmQtZGY5NDYxZGU2MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuD3ViL8hJayq66uxyi5Wj+9m80akjr6kHME FCj8u92haPuG/eASPk+3cbSrEW53B01RfjZawaTHzBZv0oAoOTW6tHKx4FYmrT7h 3FztG2YwKG0+pCrdq9+QAsOERK36CIgy4a1SxQYkLmU1Zn1GFI1ROEtPHR8fyBTh syYk3WciFCQ4s9O3VLm2QCeAsLNRlzsoZAQlcQfLtHmCtJ7XpBtrRot+ynKngvcy UUm2t4IRUJZxUitXr1HxsDxn/Rkvn0uAM05Lt//JlMJya8SikYVM1FxQl9LnRuLr lB243YBanWzWyA2KJZf89i2tMTCMtj6ju4cXWy5vquv545UPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmxX8oJhKIixGnSNZnB1CDawWv/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmYwZGRkMWUtMTFiMC0z MGJkLWI5NTAtMzBiMzdkY2E5YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvTKEjqlsX1IrSoIsFwm+DcvflrjAn3thzF3YIdeBHCcIp3HUYBT+ue gs6CAgVYIUTm1mQZMvV7/ZhuuzeJ/ID8BTwnM/X2SQipPWBhsYjVDuGzXoSSZVL3 PRpMOmSbrqzya1nPFkT8iSBIONp26hbVcY3nblg5SGMYLehOYeNfjCxK+yI/SES/ ZJNwZ18uoe0kEqdIFoVyFfcIu4FZCvaosqzTQ1M3xWdCy3R5qaHjAf5yc2s7l9dv /GMDm6E4vDSHp97CmeTF8JInYToAjguwH8GkLOU9zd4oE4kLcQwV/iLSsLIQb578 Gvw8YVRpXUlx+aafE/0ntl6hmRmvamE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:08 2025 by rpki-client