$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa File: c3e4ceeb-98f9-3e72-b588-703473930bef.roa (raw, json) Hash identifier: Onm/bjxEsTUbLknDcRus1NWA+Y6Lnu5qlJXWV57QZXs= Subject key identifier: 14:08:58:88:74:24:81:A2:98:79:07:35:F9:4D:CF:00:CC:43:FC:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192701C53C405AD92085E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:1c:53:c4:05:ad:92:08:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f04a7bcd-9007-4f03-a5a7-5529cd01a53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:f6:d2:7d:29:dd:ee:87:8c:b9:4b:aa:3b: c5:4c:a2:2c:b1:e2:07:63:d2:c4:c8:26:0b:83:f9: 6e:26:26:03:66:a9:da:36:13:6c:e8:99:6c:7f:15: 31:0e:41:50:ec:2e:03:28:d1:23:c7:07:48:c1:25: 6b:68:58:d9:1b:ca:1c:90:9b:56:01:ae:e4:f7:4d: 5d:2b:92:fb:fc:fd:c8:ab:08:15:11:d5:b5:ce:01: 2d:0c:4f:94:99:78:81:21:b2:45:e2:6b:9d:3f:58: 6c:27:55:0a:ce:a8:f3:08:98:fb:32:6c:79:0f:37: 95:c5:fb:38:29:00:23:01:a6:c0:7a:ca:2f:37:ee: a0:9d:a7:fd:45:e1:c0:73:7d:9b:62:be:f0:27:c3: 78:1c:61:fe:81:5c:60:59:6d:8f:b1:c6:da:f5:74: 70:69:c9:f4:30:77:ef:1e:26:8a:6c:01:1b:c1:d7: 32:8b:79:86:6c:05:ea:c6:de:25:49:25:53:8a:94: 7f:55:fa:9c:4f:42:c3:10:54:58:6b:42:f6:0a:ce: 3e:b0:41:4e:95:01:a8:dd:8a:30:67:6d:7d:c0:d9: 7b:c8:ca:cc:df:98:cd:b2:5c:74:76:76:0c:a6:a1: f8:e4:2c:9f:cf:5f:73:77:14:8d:0b:ca:23:32:37: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:08:58:88:74:24:81:A2:98:79:07:35:F9:4D:CF:00:CC:43:FC:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3e4ceeb-98f9-3e72-b588-703473930bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:28:0b:84:0f:74:ba:fa:84:df:b5:68:5d:93:bc:0b:a9:80: d6:e6:3d:00:3f:c0:9a:75:01:ec:be:7b:d3:7a:f8:22:3e:3f: 52:f8:09:7f:77:0a:01:e2:e5:7d:2d:45:a7:ba:0a:d6:6c:d8: 42:71:af:c1:38:a8:ed:12:25:1f:40:32:f9:6c:62:3a:25:7f: 95:82:e1:f8:e8:3e:29:3d:e6:83:bf:72:5c:36:9c:2e:2b:5e: d4:e0:7b:6a:a9:66:2f:ae:83:2c:b8:22:7a:ef:b0:a5:ad:5f: dd:45:cd:c3:ab:60:6e:27:06:4f:b8:d5:ea:d0:dd:18:ff:bc: 15:96:56:27:3f:92:30:b4:39:3e:c6:b1:d7:1d:85:06:d1:45: 8b:14:d5:67:64:9f:2e:d4:9f:78:fa:db:65:2f:06:01:bc:3c: e4:dd:5f:27:8c:35:b8:2f:8b:ac:f0:5a:62:32:5b:f2:93:21: 8b:74:4c:d9:a5:2b:eb:4a:3b:d1:c0:fc:6d:c9:93:d3:b5:22: 25:b5:d5:e3:a5:f6:1b:2e:86:f1:f5:51:8b:ba:62:25:7e:7a: 09:62:2e:49:45:a3:ba:2c:03:47:6c:3d:e9:b1:44:d8:69:71: b0:02:72:44:79:79:99:e0:79:6f:1b:59:67:d8:b9:99:4a:a1: d1:fe:f2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknAcU8QFrZIIXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjA0YTdiY2QtOTAwNy00ZjAzLWE1YTctNTUyOWNkMDFhNTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8/20n0p3e6HjLlLqjvFTKIsseIHY9LEyCYL g/luJiYDZqnaNhNs6JlsfxUxDkFQ7C4DKNEjxwdIwSVraFjZG8ockJtWAa7k901d K5L7/P3IqwgVEdW1zgEtDE+UmXiBIbJF4mudP1hsJ1UKzqjzCJj7Mmx5DzeVxfs4 KQAjAabAesovN+6gnaf9ReHAc32bYr7wJ8N4HGH+gVxgWW2Pscba9XRwacn0MHfv HiaKbAEbwdcyi3mGbAXqxt4lSSVTipR/VfqcT0LDEFRYa0L2Cs4+sEFOlQGo3Yow Z219wNl7yMrM35jNslx0dnYMpqH45Cyfz19zdxSNC8ojMjdD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQIWIh0JIGimHkHNflNzwDMQ/y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNlNGNlZWItOThmOS0z ZTcyLWI1ODgtNzAzNDczOTMwYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADooC4QPdLr6hN+1aF2TvAupgNbmPQA/wJp1Aey+e9N6+CI+P1L4CX93 CgHi5X0tRae6CtZs2EJxr8E4qO0SJR9AMvlsYjolf5WC4fjoPik95oO/clw2nC4r XtTge2qpZi+ugyy4InrvsKWtX91FzcOrYG4nBk+41erQ3Rj/vBWWVic/kjC0OT7G sdcdhQbRRYsU1Wdkny7Un3j622UvBgG8POTdXyeMNbgvi6zwWmIyW/KTIYt0TNml K+tKO9HA/G3Jk9O1IiW11eOl9hsuhvH1UYu6YiV+egliLklFo7osA0dsPemxRNhp cbACckR5eZngeW8bWWfYuZlKodH+8iY= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:27 2025 by rpki-client