$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa File: d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa (raw, json) Hash identifier: JdNo3ksrXApBRlROuNu+7rQRhraLLVEKeQ+qe4ErUUk= Subject key identifier: DC:08:2F:76:07:A3:62:61:00:00:39:7E:BC:AB:54:EF:77:6B:32:74 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927DF6BDCBF8DF629F5E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7d:f6:bd:cb:f8:df:62:9f:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=2989892d-f77b-466a-8e72-f979c50c1523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:ec:c8:22:2b:4f:4f:79:34:6c:9e:17:bc: 95:b7:03:92:d4:ed:17:db:84:c9:ac:42:ac:02:8d: 29:bd:3b:93:b0:47:24:a9:eb:97:75:81:c7:9c:36: c8:23:77:7d:af:a2:45:24:a4:56:d8:2f:86:21:be: 28:74:2f:ac:71:cc:98:91:dd:d9:25:83:79:0d:09: 11:97:45:47:6e:07:0f:6c:a7:d2:ff:21:4e:4a:b5: 15:1e:75:20:98:02:bb:4b:b7:34:10:e1:ce:8c:cc: 0c:96:8c:6e:51:3b:0e:df:d7:d3:c7:5d:fe:f2:30: e5:ba:39:1a:f8:15:33:2d:f6:e8:9b:65:d0:22:1a: ed:11:e4:9f:4a:41:f2:d3:f0:5b:f9:4c:18:f9:e4: f8:84:d7:2d:6b:82:96:d5:32:40:bd:aa:53:4a:de: 24:53:aa:d0:35:83:85:da:a3:c7:33:ef:3f:9a:39: 13:81:37:d2:87:6c:ff:4e:4a:c6:9b:a7:dc:d7:3a: bc:b7:8a:20:f8:fc:0c:61:12:1f:63:af:39:ae:88: 31:81:58:01:84:dd:44:8c:a7:61:04:aa:8a:78:51: 69:7b:89:0b:34:86:8d:9d:78:40:0c:68:4f:40:a5: a0:c6:0d:8e:2c:75:6e:38:9e:ae:d0:e9:3a:93:96: 79:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:08:2F:76:07:A3:62:61:00:00:39:7E:BC:AB:54:EF:77:6B:32:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d2a12e60-e84e-3388-8add-50e8bcbdbb63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ca:a2:0b:ea:bc:ef:06:5e:81:ce:c1:ab:29:0f:db:f6:11: 88:da:de:fa:26:e0:8a:1c:ea:de:b9:c4:a1:75:c0:ff:34:a4: a8:ee:97:1a:60:ab:d2:79:18:68:8f:5d:83:14:77:fa:2b:f8: 1a:a4:fe:1f:37:73:17:f8:0b:01:90:87:20:ed:06:18:d8:78: 16:24:8c:a3:c8:34:b8:da:62:4b:fa:70:9c:d8:7c:15:40:02: 54:55:72:63:66:a5:32:db:f2:fe:ed:64:05:77:28:2c:43:0a: 5f:7d:17:24:7c:aa:c5:86:21:49:a7:52:2c:a1:e9:84:cb:3a: a6:95:63:fc:46:b6:89:ba:47:c0:fa:b0:d3:9b:fb:d2:57:9d: 98:ac:7e:f8:d8:51:87:01:06:32:18:4d:a6:66:fa:e3:95:fd: ba:88:f4:80:05:e4:95:2b:81:97:ec:9a:1b:19:f6:e7:c1:41: 6e:5e:d7:20:bc:0a:7f:5f:59:64:81:df:93:3e:6e:1a:3d:86: 1f:73:9c:a8:83:10:de:c8:4d:86:bb:5a:e4:72:75:20:61:fa: 62:6b:a6:1e:3b:0b:ae:e0:0e:a2:29:ea:98:9c:e0:a1:d1:3e: 2c:a6:50:01:25:99:80:bb:cd:0c:a4:41:76:54:e2:77:66:0b: be:94:9f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkn32vcv432KfXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Mjk4OTg5MmQtZjc3Yi00NjZhLThlNzItZjk3OWM1MGMxNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfsyCIrT095NGyeF7yVtwOS1O0X24TJrEKs Ao0pvTuTsEckqeuXdYHHnDbII3d9r6JFJKRW2C+GIb4odC+sccyYkd3ZJYN5DQkR l0VHbgcPbKfS/yFOSrUVHnUgmAK7S7c0EOHOjMwMloxuUTsO39fTx13+8jDlujka +BUzLfbom2XQIhrtEeSfSkHy0/Bb+UwY+eT4hNcta4KW1TJAvapTSt4kU6rQNYOF 2qPHM+8/mjkTgTfSh2z/TkrGm6fc1zq8t4og+PwMYRIfY685rogxgVgBhN1EjKdh BKqKeFFpe4kLNIaNnXhADGhPQKWgxg2OLHVuOJ6u0Ok6k5Z5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwIL3YHo2JhAAA5fryrVO93azJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDJhMTJlNjAtZTg0ZS0z Mzg4LThhZGQtNTBlOGJjYmRiYjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEf5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjKogvqvO8GXoHOwaspD9v2EYja3vom4Ioc6t65xKF1wP80pKjulxpg q9J5GGiPXYMUd/or+Bqk/h83cxf4CwGQhyDtBhjYeBYkjKPINLjaYkv6cJzYfBVA AlRVcmNmpTLb8v7tZAV3KCxDCl99FyR8qsWGIUmnUiyh6YTLOqaVY/xGtom6R8D6 sNOb+9JXnZisfvjYUYcBBjIYTaZm+uOV/bqI9IAF5JUrgZfsmhsZ9ufBQW5e1yC8 Cn9fWWSB35M+bho9hh9znKiDEN7ITYa7WuRydSBh+mJrph47C67gDqIp6pic4KHR PiymUAElmYC7zQykQXZU4ndmC76UnyM= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:59 2025 by rpki-client