$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa File: cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa (raw, json) Hash identifier: WT/3MFqd+FhsCga5++heJLUL48eBQSSn/JPCWj+yk4g= Subject key identifier: A3:0F:D4:D8:71:86:1F:F5:11:65:C5:78:F7:07:A4:C0:13:19:E0:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927D1283CCBDCC8CA0CC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:12:83:cc:bd:cc:8c:a0:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=0938da98-8cb0-414e-a355-ca97a2d2d64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0c:df:ac:92:82:51:8b:e7:c7:f1:ae:b6:42: b9:f1:ad:48:71:92:16:7f:6c:88:69:cd:84:67:bd: e2:1b:87:9c:6c:f4:ac:f3:53:1a:dc:78:52:ac:a1: f4:0f:f5:f3:81:98:04:2b:cb:ab:13:ee:9d:64:54: 33:1c:24:bb:d1:91:eb:c5:b5:bd:12:2d:4a:f3:c6: 2a:2d:9c:23:7f:70:97:69:31:e8:d2:ff:85:4c:16: f3:46:5f:41:ee:a2:79:6f:22:be:76:fc:e0:64:d8: 6b:6b:7c:89:1b:0b:a6:eb:df:07:8f:db:87:d0:39: 52:5a:cf:1a:74:f0:eb:d4:35:80:49:1a:c4:b9:c9: 2b:ca:3b:6f:c9:9a:25:bd:a7:1c:fc:c8:1f:e6:65: 6f:44:3e:f7:75:7b:f9:3f:6f:d9:96:27:2c:82:f4: ce:8b:86:1c:38:b7:b8:cf:61:30:d8:91:81:75:ba: 52:47:b9:5d:7c:9e:6f:ea:61:df:5d:ed:82:bf:d8: e8:2e:ca:18:6a:e3:11:df:e5:e5:61:9c:af:b3:13: 3a:bc:1b:68:72:4a:5d:92:d6:00:82:94:ec:c0:79: 02:c5:19:4a:ff:26:2c:00:26:34:43:64:cd:dd:70: 83:f9:1e:42:5a:bd:ec:ee:6c:f7:eb:72:68:38:c9: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0F:D4:D8:71:86:1F:F5:11:65:C5:78:F7:07:A4:C0:13:19:E0:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cad706ae-b7dd-3f7c-8794-f5ff4e7509a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:14:7d:67:5f:45:ee:6f:f6:50:ac:5b:11:e4:fa:18:d3:f5: 8c:09:90:0b:2a:6b:62:90:ea:7c:2c:c9:70:46:58:d4:26:75: 49:6a:da:ec:21:93:1d:b5:93:53:89:00:e8:e8:0b:55:06:c0: 74:3a:de:0c:dd:3e:6e:3e:a4:a8:ca:56:aa:2d:ea:fb:2f:da: 19:28:37:8a:d0:5a:36:7c:5f:d5:17:bd:6e:e4:3b:97:60:53: 3c:98:6e:28:10:87:df:0d:93:12:05:af:06:81:92:d2:e9:34: ed:26:39:7e:e3:2b:76:53:7b:da:2f:bf:84:4a:0f:00:8a:95: a5:4a:55:ef:03:7f:13:af:9b:e2:aa:89:06:95:4d:a5:39:fe: d4:9c:26:d6:86:c9:29:5d:ac:e2:94:be:8c:4e:11:db:d6:44: 87:e9:8f:f2:78:ed:97:8e:92:da:eb:c7:88:d7:9f:68:37:20: fb:a4:6e:75:4d:4c:c0:8b:9f:e2:51:62:e7:d9:82:eb:d4:23: 8f:68:4e:35:ed:14:5a:c2:e3:cc:2b:4c:a7:e4:95:e9:7c:ab: fa:70:34:a9:34:82:ee:85:8e:db:57:37:27:88:44:fb:da:5c: 1a:6c:65:fe:b0:95:93:1e:48:86:36:3f:a8:4b:ba:3b:f2:97: 21:3d:f5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn0Sg8y9zIygzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MDkzOGRhOTgtOGNiMC00MTRlLWEzNTUtY2E5N2EyZDJkNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAzfrJKCUYvnx/GutkK58a1IcZIWf2yIac2E Z73iG4ecbPSs81Ma3HhSrKH0D/XzgZgEK8urE+6dZFQzHCS70ZHrxbW9Ei1K88Yq LZwjf3CXaTHo0v+FTBbzRl9B7qJ5byK+dvzgZNhra3yJGwum698Hj9uH0DlSWs8a dPDr1DWASRrEuckryjtvyZolvacc/Mgf5mVvRD73dXv5P2/ZlicsgvTOi4YcOLe4 z2Ew2JGBdbpSR7ldfJ5v6mHfXe2Cv9joLsoYauMR3+XlYZyvsxM6vBtockpdktYA gpTswHkCxRlK/yYsACY0Q2TN3XCD+R5CWr3s7mz363JoOMn35wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMP1Nhxhh/1EWXFePcHpMATGeBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2FkNzA2YWUtYjdkZC0z ZjdjLTg3OTQtZjVmZjRlNzUwOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKEUfWdfRe5v9lCsWxHk+hjT9YwJkAsqa2KQ6nwsyXBGWNQmdUlq2uwh kx21k1OJAOjoC1UGwHQ63gzdPm4+pKjKVqot6vsv2hkoN4rQWjZ8X9UXvW7kO5dg UzyYbigQh98NkxIFrwaBktLpNO0mOX7jK3ZTe9ovv4RKDwCKlaVKVe8DfxOvm+Kq iQaVTaU5/tScJtaGySldrOKUvoxOEdvWRIfpj/J47ZeOktrrx4jXn2g3IPukbnVN TMCLn+JRYufZguvUI49oTjXtFFrC48wrTKfklel8q/pwNKk0gu6FjttXNyeIRPva XBpsZf6wlZMeSIY2P6hLujvylyE99Zo= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:16 2025 by rpki-client