$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc684770-3f17-3dae-b871-398c5ae491a8.roa File: cc684770-3f17-3dae-b871-398c5ae491a8.roa (raw, json) Hash identifier: QW93GOI9yyNW27dMYnJvqpwRd9J5lX6kZTWhBhZYuaA= Subject key identifier: 82:C2:B8:7D:61:35:CC:01:B4:2A:DB:91:26:5B:EC:22:33:E6:51:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C77BDDBC596F70E95180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc684770-3f17-3dae-b871-398c5ae491a8.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c7:7b:dd:bc:59:6f:70:e9:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=7850d911-50d3-47a0-82d0-6783ed0ffd24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:50:18:96:1b:56:4f:d3:ae:d9:41:1f:81:8e: a5:02:a1:f5:46:b4:ed:b8:71:ec:5d:ad:2e:bd:bc: bd:03:ef:9f:95:5d:68:01:c8:10:64:61:69:5a:6b: 71:3a:4b:fb:49:a1:d1:3f:96:9d:fe:51:df:3c:19: d2:d7:a4:cb:12:9f:28:e6:43:bf:d4:d2:71:3f:80: db:8f:78:63:a7:b1:44:7b:13:1f:78:26:fe:d7:05: e9:5c:c9:e6:d4:ca:b0:cd:9d:ff:4e:b2:4d:d2:d6: 3f:89:61:98:eb:16:ed:cf:4e:3c:65:56:79:05:82: fb:65:fc:81:97:33:e0:71:78:29:cb:d9:a0:0d:17: b5:bb:ee:42:8e:1f:0f:af:7e:66:58:52:51:2c:05: 36:41:c6:32:e1:f2:d4:68:8a:15:0d:52:98:49:f7: e4:bf:91:cc:df:2f:cb:7f:ef:31:4f:ea:43:1a:59: f7:24:29:4b:c7:55:e2:be:82:40:43:6d:e3:58:21: e7:2e:31:88:46:eb:9b:15:87:b7:5c:13:e0:85:fc: 47:5c:ac:f2:fd:69:77:75:4b:f9:37:4b:d1:07:a2: 3a:e8:2b:e7:8c:f9:d5:cc:2a:39:84:c5:05:07:3d: f9:c2:dd:0c:0d:71:2d:c5:09:0a:5d:20:08:34:1d: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:B8:7D:61:35:CC:01:B4:2A:DB:91:26:5B:EC:22:33:E6:51:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cc684770-3f17-3dae-b871-398c5ae491a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:2d:3a:bb:1e:9b:13:b0:35:55:64:75:a2:73:64:3a:ad:78: c9:4e:f8:f7:66:20:bc:44:65:7d:d0:0e:3c:64:08:0f:f6:35: 7f:ad:93:9a:fb:9b:60:c7:fb:dc:91:93:c0:51:92:4e:26:e5: 25:43:fc:37:6b:03:96:44:b5:d1:78:2d:81:a2:98:4c:88:cc: 5f:7d:93:e8:41:e2:fe:66:d8:de:48:a5:83:fe:e5:37:ad:e9: 61:43:ab:2e:f9:83:ac:d0:13:59:6c:e7:69:f0:c8:ad:13:73: e3:c5:67:08:86:e0:40:7f:99:29:a4:04:30:89:c0:6b:8f:52: 27:14:3c:b8:12:29:69:0e:c6:a3:41:c8:2f:02:ad:93:eb:ac: 49:41:a8:65:34:03:a0:9f:63:7e:ab:3e:e6:cc:63:54:3a:87: 2b:06:4a:de:9e:d0:65:81:12:f5:f3:4e:ac:bf:ab:1e:c8:6e: bb:ce:3e:3d:95:a1:58:0d:f5:8b:32:1a:e2:01:e3:63:27:3e: 4e:ca:19:fe:85:b1:bb:56:c4:19:a9:93:71:fd:d7:2a:ab:0b: 36:e7:3d:08:f4:c9:ce:5a:76:24:f1:8b:73:15:cd:49:65:7c: a9:34:f9:d5:ba:0f:80:ff:d2:6f:cb:7b:d7:d9:fe:4d:df:5b: 20:00:1c:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8d73bxZb3DpUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk Nzg1MGQ5MTEtNTBkMy00N2EwLTgyZDAtNjc4M2VkMGZmZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFAYlhtWT9Ou2UEfgY6lAqH1RrTtuHHsXa0u vby9A++flV1oAcgQZGFpWmtxOkv7SaHRP5ad/lHfPBnS16TLEp8o5kO/1NJxP4Db j3hjp7FEexMfeCb+1wXpXMnm1MqwzZ3/TrJN0tY/iWGY6xbtz048ZVZ5BYL7ZfyB lzPgcXgpy9mgDRe1u+5Cjh8Pr35mWFJRLAU2QcYy4fLUaIoVDVKYSffkv5HM3y/L f+8xT+pDGln3JClLx1XivoJAQ23jWCHnLjGIRuubFYe3XBPghfxHXKzy/Wl3dUv5 N0vRB6I66CvnjPnVzCo5hMUFBz35wt0MDXEtxQkKXSAINB15aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILCuH1hNcwBtCrbkSZb7CIz5lHTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2M2ODQ3NzAtM2YxNy0z ZGFlLWI4NzEtMzk4YzVhZTQ5MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0tOrsemxOwNVVkdaJzZDqteMlO+PdmILxEZX3QDjxkCA/2NX+tk5r7 m2DH+9yRk8BRkk4m5SVD/DdrA5ZEtdF4LYGimEyIzF99k+hB4v5m2N5IpYP+5Tet 6WFDqy75g6zQE1ls52nwyK0Tc+PFZwiG4EB/mSmkBDCJwGuPUicUPLgSKWkOxqNB yC8CrZPrrElBqGU0A6CfY36rPubMY1Q6hysGSt6e0GWBEvXzTqy/qx7IbrvOPj2V oVgN9YsyGuIB42MnPk7KGf6FsbtWxBmpk3H91yqrCzbnPQj0yc5adiTxi3MVzUll fKk0+dW6D4D/0m/Le9fZ/k3fWyAAHEU= -----END CERTIFICATE-----Generated at Sun Nov 2 04:24:24 2025 by rpki-client