$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa File: cec2e359-1c23-30f6-8a83-2be8581e0783.roa (raw, json) Hash identifier: VSlmbumO5gD5+yD9P/NkN9EolMmLxksvSV4iZ8hiPdg= Subject key identifier: 9F:54:90:A8:9A:EA:96:38:A4:77:C2:C6:01:D3:8D:1A:AB:77:61:B6 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19270A946AE247FF0CAA780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:70:a9:46:ae:24:7f:f0:ca:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ea0dcab5-1ca0-4a67-b440-171edc716346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ce:55:32:f3:93:3a:7f:9b:15:f7:01:98:18: 85:b4:ef:71:c0:05:20:4e:45:fc:9a:dc:6b:0b:05: 1d:b6:c3:ab:95:01:af:21:88:e9:47:08:ed:c8:06: a3:bb:b8:43:be:53:67:ce:ac:63:43:1d:67:ab:1a: 2f:8a:4a:0e:7d:c5:75:75:7b:eb:34:73:04:30:da: d1:7d:e1:08:3b:44:b3:8f:1a:36:69:37:d5:82:c7: c8:38:7e:16:c4:9a:05:4d:0b:ed:a2:4d:56:b7:4c: 29:0c:df:60:f4:47:5c:75:90:8d:a4:59:15:a9:a6: a1:ee:e2:d7:1f:7c:15:44:49:48:9a:e9:af:08:fd: 5d:f2:bc:cd:03:29:71:52:57:66:5b:6c:ac:8c:2d: ce:83:e3:9d:97:6d:f4:14:1c:70:73:48:df:5c:a9: 71:e3:87:2e:84:97:ee:72:99:cb:d4:2f:fd:c4:c0: 0d:32:37:96:71:1d:01:c9:5b:22:e5:62:90:54:8d: 9d:37:f2:da:d8:a9:ec:3b:8e:97:b8:fb:b5:85:50: 5b:cc:c5:2c:99:ef:0d:9e:05:6a:93:48:f9:54:30: 33:5b:7f:48:f7:b3:b7:e9:27:4f:ec:80:1c:97:a4: 78:19:13:2e:1b:33:88:5e:04:6f:2d:26:ff:cf:93: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:90:A8:9A:EA:96:38:A4:77:C2:C6:01:D3:8D:1A:AB:77:61:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cec2e359-1c23-30f6-8a83-2be8581e0783.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b6:11:fb:a3:5a:03:38:c7:19:07:1a:90:da:5d:c2:c0:98: e3:85:6b:fb:8e:c8:18:08:25:bb:e6:4b:1d:0d:8b:c4:d8:4e: d5:a7:53:38:91:0f:3b:c2:98:93:5b:b7:f0:f6:da:7a:af:d5: 73:3c:93:3d:28:bb:1f:41:31:50:c2:9e:6a:5e:c2:82:44:0c: 69:0e:00:40:f5:48:37:ed:31:3d:fa:48:80:17:a8:1c:06:61: f7:55:43:36:be:a8:6f:fc:26:df:ba:4a:a9:8b:c9:af:b9:1f: 3d:c9:09:ad:75:4b:42:2e:bf:cc:67:89:aa:7f:2d:d2:c8:79: c2:1e:f4:6c:5e:2a:1a:ae:16:b1:f9:c2:3e:d9:d9:b2:77:4c: 32:85:c4:e9:6d:99:ca:40:8a:a4:c9:46:43:0c:1b:41:18:2f: 58:c4:51:33:6c:96:5e:94:7d:68:3a:6d:f2:18:0b:cd:72:32: 2e:20:4e:68:10:63:2f:47:b8:e3:78:b8:c3:0e:6f:fb:ae:cc: 0f:7e:2e:47:22:b0:94:99:20:fa:49:f6:67:23:84:dc:d1:3f: 84:96:97:eb:25:dc:ba:0a:e7:4c:a2:34:34:4b:6d:ad:1b:fa: d9:45:fd:28:05:59:2a:07:e1:e2:21:c4:69:01:03:e9:ee:ab: 72:45:38:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknCpRq4kf/DKp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZWEwZGNhYjUtMWNhMC00YTY3LWI0NDAtMTcxZWRjNzE2MzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc5VMvOTOn+bFfcBmBiFtO9xwAUgTkX8mtxr CwUdtsOrlQGvIYjpRwjtyAaju7hDvlNnzqxjQx1nqxovikoOfcV1dXvrNHMEMNrR feEIO0Szjxo2aTfVgsfIOH4WxJoFTQvtok1Wt0wpDN9g9EdcdZCNpFkVqaah7uLX H3wVRElImumvCP1d8rzNAylxUldmW2ysjC3Og+Odl230FBxwc0jfXKlx44cuhJfu cpnL1C/9xMANMjeWcR0ByVsi5WKQVI2dN/La2KnsO46XuPu1hVBbzMUsme8NngVq k0j5VDAzW39I97O36SdP7IAcl6R4GRMuGzOIXgRvLSb/z5OcHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9UkKia6pY4pHfCxgHTjRqrd2G2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2VjMmUzNTktMWMyMy0z MGY2LThhODMtMmJlODU4MWUwNzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMW2EfujWgM4xxkHGpDaXcLAmOOFa/uOyBgIJbvmSx0Ni8TYTtWnUziR DzvCmJNbt/D22nqv1XM8kz0oux9BMVDCnmpewoJEDGkOAED1SDftMT36SIAXqBwG YfdVQza+qG/8Jt+6SqmLya+5Hz3JCa11S0Iuv8xniap/LdLIecIe9GxeKhquFrH5 wj7Z2bJ3TDKFxOltmcpAiqTJRkMMG0EYL1jEUTNsll6UfWg6bfIYC81yMi4gTmgQ Yy9HuON4uMMOb/uuzA9+LkcisJSZIPpJ9mcjhNzRP4SWl+sl3LoK50yiNDRLba0b +tlF/SgFWSoH4eIhxGkBA+nuq3JFOL0= -----END CERTIFICATE-----Generated at Sat Nov 1 15:25:21 2025 by rpki-client