$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa File: de441c87-afcb-3e53-98c5-4a828c903001.roa (raw, json) Hash identifier: RCLr5rVcxNjFslsuWkfDTnK90+a4MuqJ4JC45rufW9I= Subject key identifier: 94:A3:B3:FA:E3:EB:93:D5:3B:13:7B:3D:00:6C:B3:BB:49:C4:B9:61 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926D5A779BCAEF2EE4CA04 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6d:5a:77:9b:ca:ef:2e:e4:ca:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=93f15b34-d6c6-480d-aa6c-34cbcc5f0c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d9:28:a4:86:c2:d3:2f:03:47:64:d4:50:3d: a9:fd:04:e9:2e:71:a6:06:cc:4e:b8:bf:cb:56:c4: 0a:fa:c3:b9:65:61:7b:6c:3d:fc:0e:a8:bd:55:41: 26:84:92:11:de:43:a1:ab:9c:05:23:9d:a5:92:30: 0f:e1:3d:9e:3e:cc:9c:33:d7:94:0b:d7:f7:2b:ab: 34:b3:50:f4:f4:eb:f9:d9:bd:3a:80:5c:c0:38:83: e3:c6:f1:5a:2d:e6:63:c8:9e:49:4b:f3:d9:70:09: 61:de:b8:16:f7:bb:31:ef:23:ec:95:32:2b:fe:12: bb:5e:b8:4e:76:99:45:39:88:dc:35:60:9c:ed:05: 5c:fa:05:40:29:17:0c:61:52:ae:b4:28:87:ed:ee: be:92:ef:d5:62:62:23:1f:20:96:08:d2:30:60:de: 8d:5b:d2:c3:fa:51:57:f0:e8:ad:33:13:0e:bc:19: b8:5c:cb:8a:6c:86:04:0c:c7:65:10:69:1b:6e:a6: f5:26:99:2a:6f:d6:cc:64:a6:43:b7:f0:fe:6d:71: 63:6d:dc:20:77:74:ec:e8:0b:5c:0b:20:22:25:18: 1f:63:be:a2:05:57:29:58:95:a9:73:58:ed:df:80: 71:ef:a2:40:23:00:a9:36:24:25:70:1e:fd:49:6e: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A3:B3:FA:E3:EB:93:D5:3B:13:7B:3D:00:6C:B3:BB:49:C4:B9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de441c87-afcb-3e53-98c5-4a828c903001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:3b:fa:d3:4e:4d:13:d7:e1:d4:6b:b8:b1:ec:0c:08:49:8c: 24:3c:30:47:77:b4:48:9c:6d:55:cb:77:da:95:82:ed:ef:8d: ec:ae:39:21:dc:a2:4c:a2:57:ec:2b:e4:02:36:f7:d6:13:43: 58:68:71:8b:28:f6:73:3a:18:4b:d9:14:29:40:e8:78:1b:24: b7:11:4d:65:5c:93:19:62:28:90:59:b8:e4:ac:aa:ba:87:ba: 96:87:8e:4f:0a:21:83:28:c7:b3:8f:f8:b3:53:d6:76:32:7a: 7c:ab:9c:83:98:68:e2:a4:ea:8e:ca:a2:f1:56:9e:cf:dd:d2: 36:f4:b7:b6:a3:cd:b5:80:d1:f5:00:f5:64:36:9f:fb:5e:57: 41:35:c5:b3:2f:4d:36:93:a5:56:68:d3:e7:fc:b1:28:c0:e6: 92:85:f3:c0:da:ca:b0:db:ea:f9:20:e6:17:da:0b:08:a2:c1: f7:28:e8:3f:a0:36:ad:7f:74:aa:04:04:64:89:64:3b:45:58: 8e:5e:aa:7a:d9:ae:26:33:2d:48:32:1f:ab:dc:95:82:85:e7: 7c:8c:ec:22:f1:fc:3e:7a:49:83:2d:f1:30:b5:1c:26:90:b4: 48:ad:3b:bb:a0:24:a5:06:67:d7:d2:b1:4c:48:ec:d2:8c:38: 35:fa:5a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm1ad5vK7y7kygQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OTNmMTViMzQtZDZjNi00ODBkLWFhNmMtMzRjYmNjNWYwYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNkopIbC0y8DR2TUUD2p/QTpLnGmBsxOuL/L VsQK+sO5ZWF7bD38Dqi9VUEmhJIR3kOhq5wFI52lkjAP4T2ePsycM9eUC9f3K6s0 s1D09Ov52b06gFzAOIPjxvFaLeZjyJ5JS/PZcAlh3rgW97sx7yPslTIr/hK7XrhO dplFOYjcNWCc7QVc+gVAKRcMYVKutCiH7e6+ku/VYmIjHyCWCNIwYN6NW9LD+lFX 8OitMxMOvBm4XMuKbIYEDMdlEGkbbqb1Jpkqb9bMZKZDt/D+bXFjbdwgd3Ts6Atc CyAiJRgfY76iBVcpWJWpc1jt34Bx76JAIwCpNiQlcB79SW7d1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSjs/rj65PVOxN7PQBss7tJxLlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGU0NDFjODctYWZjYi0z ZTUzLTk4YzUtNGE4MjhjOTAzMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE7+tNOTRPX4dRruLHsDAhJjCQ8MEd3tEicbVXLd9qVgu3vjeyuOSHc okyiV+wr5AI299YTQ1hocYso9nM6GEvZFClA6HgbJLcRTWVckxliKJBZuOSsqrqH upaHjk8KIYMox7OP+LNT1nYyenyrnIOYaOKk6o7KovFWns/d0jb0t7ajzbWA0fUA 9WQ2n/teV0E1xbMvTTaTpVZo0+f8sSjA5pKF88DayrDb6vkg5hfaCwiiwfco6D+g Nq1/dKoEBGSJZDtFWI5eqnrZriYzLUgyH6vclYKF53yM7CLx/D56SYMt8TC1HCaQ tEitO7ugJKUGZ9fSsUxI7NKMODX6Wj0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:50 2025 by rpki-client