$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa File: bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa (raw, json) Hash identifier: hi1txpDgQ2AyA5rGg0u7w77mJLmTmQ/+XyktyhJEp9E= Subject key identifier: 63:31:A2:61:ED:C6:0D:F4:41:17:4D:AE:A5:F0:92:29:D4:07:DF:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927C3B46A2CBB80FBFF3E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7c:3b:46:a2:cb:b8:0f:bf:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=47aba790-8791-4835-b95d-a6762d23e524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c9:97:62:74:8c:c3:56:63:ca:d2:71:77:93: 16:e7:55:da:52:a1:58:43:41:60:0f:d4:46:cf:95: 61:9e:1a:cc:ae:86:23:8d:76:c6:de:34:2b:62:fa: 8f:64:99:d3:43:c6:5d:75:96:d2:a0:2a:3d:32:d0: 72:b6:e1:5b:de:27:cc:4c:56:ee:e4:40:64:81:1e: db:ed:13:10:bf:86:06:2e:8c:29:f2:d6:c2:dc:1b: 8c:3c:e1:83:1b:56:5c:86:c0:f6:0c:7f:ef:7a:bf: 92:3c:82:fa:c7:0c:bd:cd:56:92:88:df:11:0e:f1: cc:68:3f:25:0f:b6:a2:a5:35:b7:c9:1a:0c:89:72: 07:9a:6b:fa:0a:ff:f8:42:78:d9:51:be:c1:4d:ab: 44:b2:66:c7:a1:7c:47:e0:0e:99:fd:b6:06:44:6e: 4f:cf:88:ae:5a:d0:5f:27:1d:b0:dc:ff:8d:c2:f6: 84:b0:a2:5d:e5:82:56:9a:3e:7c:6e:4a:50:d6:0c: da:b3:0e:dc:26:40:b1:84:23:4c:1c:72:6b:44:ed: c8:a8:c0:17:2a:b3:9d:7b:b8:d0:3c:0f:7f:7e:60: dc:52:a4:aa:84:f5:fc:48:ba:bb:76:8a:8a:7c:93: 3f:09:8e:25:62:2b:5d:bd:f5:8b:39:f1:e9:4a:e5: ae:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:A2:61:ED:C6:0D:F4:41:17:4D:AE:A5:F0:92:29:D4:07:DF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bf16ef4f-2e12-3fc5-8ca1-716cee11f614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:03:7d:cc:a5:d3:dc:15:bd:82:ea:03:f4:32:7d:50:6f:02: 1f:95:80:fb:79:56:4b:db:41:e7:42:c0:0d:cb:69:24:1a:46: 29:dc:e6:fd:87:38:de:eb:0f:69:95:32:cf:fc:33:b3:4b:8a: 1a:b0:63:6d:05:5c:af:70:ad:74:63:2e:70:9e:b7:63:67:f6: f0:10:bb:d0:5f:19:09:4b:b0:c1:03:16:40:f5:75:b2:42:e7: fd:a7:19:3a:d6:fd:37:f4:00:9a:99:8f:1c:95:5e:cf:65:9c: 23:f0:44:56:23:b3:bb:62:23:80:61:64:08:08:e8:5d:b2:d4: 7d:7b:bd:47:38:d7:fa:d2:c7:ed:cd:82:07:a3:fd:21:ba:77: 99:4a:2c:df:66:4f:17:00:fd:25:d3:07:68:1f:5a:26:dc:8a: 34:b9:f5:c8:2f:84:a3:16:bc:73:31:6f:6f:a9:48:c1:29:73: 20:ef:09:9c:a4:9a:59:95:9f:ba:df:71:4d:81:f9:57:19:9a: 96:06:49:82:dd:cb:59:88:80:6a:ce:4f:04:c8:60:d1:9f:6d: f2:e7:da:2b:ca:5d:66:b9:11:53:7b:5c:49:e9:bb:21:1e:66: b0:e5:96:90:f6:0f:40:11:61:8c:b2:3f:b6:a0:a9:cb:6e:89: 19:9e:98:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknw7RqLLuA+/8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NDdhYmE3OTAtODc5MS00ODM1LWI5NWQtYTY3NjJkMjNlNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8mXYnSMw1ZjytJxd5MW51XaUqFYQ0FgD9RG z5VhnhrMroYjjXbG3jQrYvqPZJnTQ8ZddZbSoCo9MtBytuFb3ifMTFbu5EBkgR7b 7RMQv4YGLowp8tbC3BuMPOGDG1ZchsD2DH/ver+SPIL6xwy9zVaSiN8RDvHMaD8l D7aipTW3yRoMiXIHmmv6Cv/4QnjZUb7BTatEsmbHoXxH4A6Z/bYGRG5Pz4iuWtBf Jx2w3P+NwvaEsKJd5YJWmj58bkpQ1gzasw7cJkCxhCNMHHJrRO3IqMAXKrOde7jQ PA9/fmDcUqSqhPX8SLq7doqKfJM/CY4lYitdvfWLOfHpSuWuiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMxomHtxg30QRdNrqXwkinUB9/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmYxNmVmNGYtMmUxMi0z ZmM1LThjYTEtNzE2Y2VlMTFmNjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQDfcyl09wVvYLqA/QyfVBvAh+VgPt5VkvbQedCwA3LaSQaRinc5v2H ON7rD2mVMs/8M7NLihqwY20FXK9wrXRjLnCet2Nn9vAQu9BfGQlLsMEDFkD1dbJC 5/2nGTrW/Tf0AJqZjxyVXs9lnCPwRFYjs7tiI4BhZAgI6F2y1H17vUc41/rSx+3N ggej/SG6d5lKLN9mTxcA/SXTB2gfWibcijS59cgvhKMWvHMxb2+pSMEpcyDvCZyk mlmVn7rfcU2B+VcZmpYGSYLdy1mIgGrOTwTIYNGfbfLn2ivKXWa5EVN7XEnpuyEe ZrDllpD2D0ARYYyyP7agqctuiRmemIU= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:19 2025 by rpki-client