$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa File: d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa (raw, json) Hash identifier: sH9J9wTSw4pzO1Jbipkdp26UYq30ywlJUC5G51RGi5g= Subject key identifier: 7A:01:04:CD:00:44:B2:C6:B8:6E:D5:EA:35:43:9D:08:FE:3A:D5:C1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584B0B76CDCA7CDC5D4FBD34AD40 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 13335 IP address blocks: 172.71.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:cd:ca:7c:dc:5d:4f:bd:34:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=6cc544d7-3b5b-47c7-82ba-e8b5c91b360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:df:c3:3c:4b:6d:37:f4:47:42:fe:44:a4: e3:84:b9:bc:05:1a:6e:3d:58:af:7f:d7:11:d2:66: 15:3b:22:42:70:88:b3:96:f8:69:ce:b2:a0:fa:22: cc:d1:3e:1f:e6:fd:6c:44:e1:db:23:6b:1d:82:2d: 54:e1:b1:bc:5f:ba:91:a3:33:99:d2:c0:8b:0c:f9: e8:1e:90:66:cd:c5:16:54:e7:29:91:49:46:f1:c2: 70:6e:d4:3d:28:21:35:c7:d9:75:03:1c:52:ac:e7: 3d:89:f6:97:28:08:4b:b1:0a:d6:b1:26:37:67:a4: 47:78:1b:f7:fa:ba:af:53:cf:68:bf:78:d0:db:1e: 42:d1:a6:8a:90:50:bf:b2:dd:63:56:35:a3:e9:8b: 18:da:16:ba:52:cb:4b:c4:59:31:f2:bb:5f:08:b3: b5:a3:b0:fe:9b:d0:ac:8c:af:b6:b5:88:b9:3c:5e: a4:9f:48:f8:94:25:f6:ec:78:cd:9d:40:e8:61:b4: b4:98:3b:f6:f2:da:c7:e0:44:d5:f8:a6:f8:c4:f9: b5:2d:94:18:30:95:c4:9a:ea:59:b9:a9:f4:19:8e: 52:93:18:a7:aa:13:9c:a7:fc:50:41:d3:72:90:8b: 8d:3b:f1:91:6d:cf:0f:0c:73:74:31:07:d8:28:cd: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:01:04:CD:00:44:B2:C6:B8:6E:D5:EA:35:43:9D:08:FE:3A:D5:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d469b3f1-1610-30fc-9a5e-91bc4b32d1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6d:08:12:33:36:12:28:1e:2f:c4:29:17:29:ca:d7:11:8d: 43:96:3a:e4:7c:4a:30:b8:6b:6b:96:9c:77:2d:ec:85:ea:9f: 3f:34:5e:ff:6d:cb:e3:11:83:a4:9a:1b:3e:f0:88:7c:ab:93: 8a:48:74:b5:b2:aa:b3:76:c7:16:7b:c8:d1:17:0a:eb:df:62: 15:00:81:77:0f:a9:86:06:c8:3b:19:b1:44:a3:8c:4d:ed:fa: 0a:8b:3b:31:19:29:ae:34:0b:3d:aa:26:b9:6a:79:60:bb:e1: 18:13:39:d9:01:9e:a9:d9:7d:2c:fe:e1:5c:b0:c8:bd:a8:6e: 8b:9d:46:91:4e:75:57:c6:76:05:24:14:44:6b:40:70:5d:0b: 24:89:ca:63:89:9d:f6:94:da:3b:f1:5b:28:6c:10:41:55:2b: 73:80:5e:59:ac:4c:8d:c5:48:32:28:50:7f:da:c9:15:01:f0: cf:d8:73:1b:76:56:70:03:16:51:43:b2:a0:74:fc:c0:ec:65: 75:a3:9f:f8:3a:b2:09:9f:c3:60:c4:db:6c:c2:b2:0e:ef:58: 81:7d:00:34:48:21:f4:8f:67:47:7d:9d:66:16:e9:46:5f:dd: ca:c7:59:b5:4e:3d:10:2d:0c:ae:88:93:90:77:0c:ca:5d:15: 72:a4:ab:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLds3KfNxdT700rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NmNjNTQ0ZDctM2I1Yi00N2M3LTgyYmEtZThiNWM5MWIzNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DffwzxLbTf0R0L+RKTjhLm8BRpuPVivf9cR 0mYVOyJCcIizlvhpzrKg+iLM0T4f5v1sROHbI2sdgi1U4bG8X7qRozOZ0sCLDPno HpBmzcUWVOcpkUlG8cJwbtQ9KCE1x9l1AxxSrOc9ifaXKAhLsQrWsSY3Z6RHeBv3 +rqvU89ov3jQ2x5C0aaKkFC/st1jVjWj6YsY2ha6UstLxFkx8rtfCLO1o7D+m9Cs jK+2tYi5PF6kn0j4lCX27HjNnUDoYbS0mDv28trH4ETV+Kb4xPm1LZQYMJXEmupZ uan0GY5SkxinqhOcp/xQQdNykIuNO/GRbc8PDHN0MQfYKM2B9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoBBM0ARLLGuG7V6jVDnQj+OtXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDQ2OWIzZjEtMTYxMC0z MGZjLTlhNWUtOTFiYzRiMzJkMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBtCBIzNhIoHi/EKRcpytcRjUOWOuR8SjC4a2uWnHct7IXqnz80Xv9t y+MRg6SaGz7wiHyrk4pIdLWyqrN2xxZ7yNEXCuvfYhUAgXcPqYYGyDsZsUSjjE3t +gqLOzEZKa40Cz2qJrlqeWC74RgTOdkBnqnZfSz+4VywyL2oboudRpFOdVfGdgUk FERrQHBdCySJymOJnfaU2jvxWyhsEEFVK3OAXlmsTI3FSDIoUH/ayRUB8M/Ycxt2 VnADFlFDsqB0/MDsZXWjn/g6sgmfw2DE22zCsg7vWIF9ADRIIfSPZ0d9nWYW6UZf 3crHWbVOPRAtDK6Ik5B3DMpdFXKkq7Q= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:03 2025 by rpki-client