$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa File: e5868084-5d8c-376e-af1c-77fe0c67ae23.roa (raw, json) Hash identifier: 8MWR1lk9mwPVrWrHQcwDiX1JBvmwPATapo9InPh4qzw= Subject key identifier: B0:AE:DC:77:CD:33:DB:B3:BA:E1:23:68:27:BC:6C:7B:6B:9A:4F:13 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926C738BA5824B0B410820 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6c:73:8b:a5:82:4b:0b:41:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c527b83d-f069-47aa-a293-db3a0a3727c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:d7:1e:35:f8:2d:83:1f:5b:07:6b:d7:1e: 69:ea:b8:9c:55:43:30:4a:04:d9:89:da:3c:e0:e8: 08:7e:58:96:e0:0e:89:5c:5c:93:4f:bc:55:76:42: 67:af:ca:a7:fa:62:1d:95:83:ef:9d:f1:f0:3d:c5: 35:ee:b1:bc:4e:a6:7e:4a:f8:1b:90:ac:7b:65:cd: 97:b5:64:07:01:2d:3f:37:16:ef:f4:4d:66:f5:4f: 4c:04:60:d2:20:06:2e:8f:bf:81:4c:af:50:d6:98: 82:07:56:69:d1:54:32:a4:e7:c3:8a:eb:32:f0:d6: 69:b0:bb:fa:d2:8a:07:0e:9e:ff:b0:d4:56:20:92: 06:5a:d3:2e:36:1f:8e:e0:19:47:07:6b:31:3a:fc: e4:8b:a6:67:c4:3c:c8:3d:85:89:ae:49:17:3c:6a: d9:e4:03:6a:94:30:f3:9b:3f:6b:3e:e2:ea:77:61: 43:6e:a6:e0:a2:81:fa:8e:43:e9:53:f1:a7:c7:31: a0:36:b6:b4:4a:0b:7e:e8:92:74:3f:e7:a6:ac:a7: 04:8f:93:29:66:af:c5:6c:44:61:4f:6d:4a:90:cb: 51:d2:82:5e:fd:fa:90:e9:69:6d:00:43:6b:5d:ab: d5:04:3f:b5:48:16:09:37:38:e2:67:fa:80:10:94: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:DC:77:CD:33:DB:B3:BA:E1:23:68:27:BC:6C:7B:6B:9A:4F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e5868084-5d8c-376e-af1c-77fe0c67ae23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b2:c7:03:43:d1:73:fa:b6:89:97:32:ab:a7:9c:b7:c3:c3: f4:00:ad:63:61:09:4d:8d:28:63:c9:1d:0d:ff:c7:9f:ec:54: 35:e0:64:04:72:46:c7:b7:c3:75:0b:ef:5c:f1:30:85:1c:09: df:09:e5:ca:c4:29:10:cb:a2:8d:2f:4d:34:77:2e:55:b0:62: 49:45:fe:fa:8e:8b:5d:c8:4b:00:72:86:8f:44:bc:69:38:21: 03:07:ac:b8:12:56:02:62:1c:fc:2f:ee:0e:a9:fe:b7:38:fc: 83:79:62:31:56:87:12:1f:4d:65:40:54:1d:57:dc:1e:ae:73: 3b:f6:4e:b9:af:a3:a0:b2:89:94:d2:5b:9b:bd:0a:35:a3:97: 34:9f:fe:0f:05:f6:92:a2:a2:73:a5:f3:f6:b9:c2:29:9f:5e: 51:5c:76:f6:a3:b6:7f:7b:53:87:2f:87:69:43:44:aa:2c:79: 67:dd:99:50:15:5b:e2:d2:fb:e7:e3:7d:e3:41:8e:8f:3f:2f: a8:7b:04:9f:24:f2:24:35:5e:56:5d:e7:a6:70:ed:b7:c5:58: 8f:d5:b2:6d:51:6d:5e:08:97:0d:83:61:16:a0:21:e1:b5:3d: c0:96:cf:3f:2a:ae:f6:f5:f9:46:88:76:14:ec:e9:f1:4c:d9: 7c:73:45:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmxzi6WCSwtBCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzUyN2I4M2QtZjA2OS00N2FhLWEyOTMtZGIzYTBhMzcyN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDrXHjX4LYMfWwdr1x5p6ricVUMwSgTZido8 4OgIfliW4A6JXFyTT7xVdkJnr8qn+mIdlYPvnfHwPcU17rG8TqZ+SvgbkKx7Zc2X tWQHAS0/Nxbv9E1m9U9MBGDSIAYuj7+BTK9Q1piCB1Zp0VQypOfDiusy8NZpsLv6 0ooHDp7/sNRWIJIGWtMuNh+O4BlHB2sxOvzki6ZnxDzIPYWJrkkXPGrZ5ANqlDDz mz9rPuLqd2FDbqbgooH6jkPpU/GnxzGgNra0Sgt+6JJ0P+emrKcEj5MpZq/FbERh T21KkMtR0oJe/fqQ6WltAENrXavVBD+1SBYJNzjiZ/qAEJTxbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCu3HfNM9uzuuEjaCe8bHtrmk8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTU4NjgwODQtNWQ4Yy0z NzZlLWFmMWMtNzdmZTBjNjdhZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWyxwND0XP6tomXMqunnLfDw/QArWNhCU2NKGPJHQ3/x5/sVDXgZARy Rse3w3UL71zxMIUcCd8J5crEKRDLoo0vTTR3LlWwYklF/vqOi13ISwByho9EvGk4 IQMHrLgSVgJiHPwv7g6p/rc4/IN5YjFWhxIfTWVAVB1X3B6uczv2Trmvo6CyiZTS W5u9CjWjlzSf/g8F9pKionOl8/a5wimfXlFcdvajtn97U4cvh2lDRKoseWfdmVAV W+LS++fjfeNBjo8/L6h7BJ8k8iQ1XlZd56Zw7bfFWI/Vsm1RbV4Ilw2DYRagIeG1 PcCWzz8qrvb1+UaIdhTs6fFM2XxzReM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:17 2025 by rpki-client