$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa File: e535e3ad-72b4-3284-81a1-3669b6cee67a.roa (raw, json) Hash identifier: Dcjpm8TthY3dTDZ5RnwHA98LwNWb/DKXDTvogWBA4xQ= Subject key identifier: 14:1C:6A:FA:58:06:AC:1D:86:E0:E3:14:FB:7D:4C:13:CC:79:E4:B2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926D0FAC81494E463030C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6d:0f:ac:81:49:4e:46:30:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9b5754a9-99f8-45b7-9838-46ad389424fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:e1:09:0d:b8:45:3e:0b:73:7e:b5:87:cd: bc:2a:cd:9c:d1:a4:01:b4:41:8b:15:74:63:21:8f: 70:2e:14:8f:f2:7b:8e:43:87:97:bc:ae:f3:b7:c9: 9d:b1:40:57:2b:5c:51:23:96:2d:db:ea:06:d1:f0: 2b:5d:90:ba:2b:02:d6:9e:82:b6:b2:7d:9c:fe:c1: 05:71:8a:7b:67:d9:37:da:04:28:c4:a1:eb:12:7f: 90:9c:e3:ef:da:96:d9:ed:ca:03:33:15:e8:89:4d: 3d:18:63:3e:04:01:23:7b:3e:6d:2b:57:94:5c:90: 1c:78:72:ac:da:8b:57:77:f3:2c:a4:ff:ba:32:87: a0:80:59:b0:0a:ed:e2:35:59:74:f7:5c:fe:cf:6e: db:a5:46:e5:80:05:85:28:3b:0a:69:18:be:29:b5: c9:aa:52:d7:bb:06:e0:4e:60:71:47:56:fd:2e:80: f9:e2:5a:ae:97:fd:97:8a:39:b1:4a:ac:94:a7:85: 14:c0:52:27:4b:f5:75:31:69:a3:a3:43:89:2c:8a: 20:8c:11:c2:63:8b:d9:b4:6b:04:27:92:04:0e:39: ea:70:d4:04:31:bd:37:44:2e:a2:2b:58:d8:f6:df: a1:0d:26:a3:11:8c:8e:7e:60:80:83:5d:ac:d4:81: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1C:6A:FA:58:06:AC:1D:86:E0:E3:14:FB:7D:4C:13:CC:79:E4:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e535e3ad-72b4-3284-81a1-3669b6cee67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7c:eb:6c:8f:90:6c:f6:f6:54:f1:52:77:e0:ef:90:10:a3: 6e:ee:dd:e8:19:68:3a:e3:2f:41:09:49:1b:4f:76:54:30:bc: 08:40:94:cb:b0:1b:34:04:dc:cf:8c:6c:c6:52:bf:bd:1c:3f: 11:5c:7d:44:94:8f:b5:3a:32:f8:2b:e5:8a:f6:c1:50:65:38: e9:d5:b8:f8:88:f1:79:bc:9e:80:07:50:2d:6a:b5:9b:c2:94: 39:2f:b3:26:2a:84:7c:08:61:5a:25:24:99:1e:e5:58:d5:d4: 33:89:ec:a4:e1:7f:65:2e:e1:7b:fa:42:45:f4:90:84:7b:8b: 39:39:03:9c:57:6f:5a:a0:51:19:88:16:f3:af:f1:a4:18:ff: bd:a6:c3:5c:f6:25:b9:9a:a2:9c:f3:b3:23:65:2f:5c:82:d4: 2d:c9:b0:d1:48:3d:42:65:42:f5:00:09:73:84:25:ec:48:ac: 47:d4:7e:09:d7:a9:b1:51:91:dc:fc:10:2c:18:39:09:95:f5: 73:0b:c5:94:49:a2:17:28:fa:95:91:4c:29:59:fc:39:29:5b: 94:c0:ee:6b:84:4d:0c:42:0c:09:bc:28:0e:a2:87:12:9f:11: ce:50:c5:e6:88:3e:40:dd:45:fa:bb:57:fc:b5:5a:43:71:fe: af:e4:4d:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm0PrIFJTkYwMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OWI1NzU0YTktOTlmOC00NWI3LTk4MzgtNDZhZDM4OTQyNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hDhCQ24RT4Lc361h828Ks2c0aQBtEGLFXRj IY9wLhSP8nuOQ4eXvK7zt8mdsUBXK1xRI5Yt2+oG0fArXZC6KwLWnoK2sn2c/sEF cYp7Z9k32gQoxKHrEn+QnOPv2pbZ7coDMxXoiU09GGM+BAEjez5tK1eUXJAceHKs 2otXd/MspP+6MoeggFmwCu3iNVl091z+z27bpUblgAWFKDsKaRi+KbXJqlLXuwbg TmBxR1b9LoD54lqul/2XijmxSqyUp4UUwFInS/V1MWmjo0OJLIogjBHCY4vZtGsE J5IEDjnqcNQEMb03RC6iK1jY9t+hDSajEYyOfmCAg12s1IH+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQcavpYBqwdhuDjFPt9TBPMeeSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTUzNWUzYWQtNzJiNC0z Mjg0LTgxYTEtMzY2OWI2Y2VlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl862yPkGz29lTxUnfg75AQo27u3egZaDrjL0EJSRtPdlQwvAhAlMuw GzQE3M+MbMZSv70cPxFcfUSUj7U6Mvgr5Yr2wVBlOOnVuPiI8Xm8noAHUC1qtZvC lDkvsyYqhHwIYVolJJke5VjV1DOJ7KThf2Uu4Xv6QkX0kIR7izk5A5xXb1qgURmI FvOv8aQY/72mw1z2JbmaopzzsyNlL1yC1C3JsNFIPUJlQvUACXOEJexIrEfUfgnX qbFRkdz8ECwYOQmV9XMLxZRJohco+pWRTClZ/DkpW5TA7muETQxCDAm8KA6ihxKf Ec5QxeaIPkDdRfq7V/y1WkNx/q/kTUo= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:43 2025 by rpki-client