$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064d35a-2261-3133-8b6e-ddc1ec1030ba.roa File: e064d35a-2261-3133-8b6e-ddc1ec1030ba.roa (raw, json) Hash identifier: XH41DU6v3NWSmPYuGnlTGCPI2ZHK3oZSeLfw+WoY1Xk= Subject key identifier: A6:C4:2C:65:C2:E7:16:5C:47:3E:85:78:DB:82:4D:CB:86:FA:D7:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0AE5C07DD6255158EE20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064d35a-2261-3133-8b6e-ddc1ec1030ba.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.71.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:0a:e5:c0:7d:d6:25:51:58:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=f2bb7f89-5cbd-4a90-941d-d79182346d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:aa:62:d0:d4:87:fb:b7:c7:db:8e:e5:4f:8c: 1e:45:64:d5:2a:db:6c:cc:ca:cd:6a:10:7e:55:ee: 2c:a0:31:58:9c:72:b7:4a:f9:59:5d:11:e6:e0:a5: c0:b5:c4:c7:94:2a:2c:19:70:77:8e:57:31:04:c9: 9d:a5:d9:d2:76:a6:69:cf:e4:0d:47:d4:9b:23:69: 34:7e:df:5e:68:9a:fe:06:48:b6:bf:71:a7:9a:6d: ba:a5:fc:53:30:f5:f7:da:2d:49:e2:d5:99:96:65: b7:28:f8:d0:98:8a:53:b0:e3:11:2f:d8:7e:20:fd: 50:af:3d:c4:45:78:8f:b4:b6:dd:7c:d6:3f:11:d2: 30:42:df:da:4f:e7:e0:23:ed:26:19:73:61:ad:7f: ef:f4:8e:ee:0d:1c:b6:a4:3a:2b:b6:7c:af:ae:44: d0:06:a7:c4:e8:d9:6e:94:7c:c2:ea:8a:da:47:b8: 41:13:b2:cb:c9:86:1f:ec:2e:c7:f8:86:c7:c8:f6: cb:c6:95:c6:f1:b9:d1:24:5e:a0:95:6b:86:1e:b3: 06:f1:8a:c5:30:f2:8b:4d:f2:1d:13:1c:ee:be:b4: 6f:27:67:48:03:c8:fb:ee:4d:52:26:dd:d8:bd:6e: 1c:42:2b:3e:73:24:0b:a4:54:13:00:19:d5:5a:7d: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:2C:65:C2:E7:16:5C:47:3E:85:78:DB:82:4D:CB:86:FA:D7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e064d35a-2261-3133-8b6e-ddc1ec1030ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:85:fa:84:16:eb:15:39:d4:d7:39:02:e4:35:96:3a:8c:2a: f6:ac:da:9e:fb:b2:9f:40:fd:f8:fa:1e:6b:c8:dd:d2:6c:21: 15:98:97:35:af:76:c6:66:a5:13:bc:33:11:97:fd:0e:8d:1a: d7:bb:69:90:6c:bf:80:ac:7e:c2:a4:9b:84:1e:e3:39:d3:90: 9a:48:1c:10:21:e1:f3:7e:e1:f9:8d:7e:4f:47:4c:17:36:a2: 65:b6:0c:23:be:4c:7f:7d:e6:72:1a:da:2d:09:85:1e:a6:15: 8f:97:1a:55:dd:88:01:8f:dc:f1:3e:80:f9:b1:65:6f:2a:b4: 90:9a:22:be:f4:af:1a:f1:26:04:37:2a:65:86:de:44:a5:f0: d7:89:b4:c3:ac:07:90:69:23:8d:4b:5e:06:57:7c:92:7a:7e: b6:ab:30:28:24:20:7c:e9:2b:fd:cb:5a:97:55:06:44:10:fd: 9a:53:5e:6b:cb:73:ed:18:24:c6:1c:35:ff:48:57:57:76:19: a5:a4:ac:23:44:13:eb:41:7d:be:9c:71:1c:c7:3c:fe:96:a6: 2f:a2:4e:8f:9d:b5:7f:8c:d6:91:6d:82:bc:d5:62:7a:85:71: b6:aa:f4:fc:c0:30:4b:67:4a:97:b1:05:68:71:b1:d3:c3:e7: 58:f8:66:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQrlwH3WJVFY7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZjJiYjdmODktNWNiZC00YTkwLTk0MWQtZDc5MTgyMzQ2ZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjapi0NSH+7fH247lT4weRWTVKttszMrNahB+ Ve4soDFYnHK3SvlZXRHm4KXAtcTHlCosGXB3jlcxBMmdpdnSdqZpz+QNR9SbI2k0 ft9eaJr+Bki2v3Gnmm26pfxTMPX32i1J4tWZlmW3KPjQmIpTsOMRL9h+IP1Qrz3E RXiPtLbdfNY/EdIwQt/aT+fgI+0mGXNhrX/v9I7uDRy2pDortnyvrkTQBqfE6Nlu lHzC6oraR7hBE7LLyYYf7C7H+IbHyPbLxpXG8bnRJF6glWuGHrMG8YrFMPKLTfId ExzuvrRvJ2dIA8j77k1SJt3YvW4cQis+cyQLpFQTABnVWn1/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbELGXC5xZcRz6FeNuCTcuG+teKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTA2NGQzNWEtMjI2MS0z MTMzLThiNmUtZGRjMWVjMTAzMGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEe/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeF+oQW6xU51Nc5AuQ1ljqMKvas2p77sp9A/fj6HmvI3dJsIRWYlzWv dsZmpRO8MxGX/Q6NGte7aZBsv4CsfsKkm4Qe4znTkJpIHBAh4fN+4fmNfk9HTBc2 omW2DCO+TH995nIa2i0JhR6mFY+XGlXdiAGP3PE+gPmxZW8qtJCaIr70rxrxJgQ3 KmWG3kSl8NeJtMOsB5BpI41LXgZXfJJ6frarMCgkIHzpK/3LWpdVBkQQ/ZpTXmvL c+0YJMYcNf9IV1d2GaWkrCNEE+tBfb6ccRzHPP6Wpi+iTo+dtX+M1pFtgrzVYnqF cbaq9PzAMEtnSpexBWhxsdPD51j4Zr0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:02 2025 by rpki-client