$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa File: e998b096-5c78-3320-92d7-e0141a3efa3e.roa (raw, json) Hash identifier: h94EZPYBC/iXumossFaT9f8nkEzQHlfFJB1DM2Ict3I= Subject key identifier: 76:4C:1B:12:7C:EB:87:C1:F7:62:FA:5C:0A:F4:52:CD:16:E3:CA:72 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667BA24994C12A6C41071C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ba:24:99:4c:12:a6:c4:10:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=60d4a24d-14e0-4660-a56d-fcb668c825d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:4d:7c:7e:55:9c:28:ef:08:75:0c:c0:b4: c0:82:4f:a6:98:44:ac:bc:f0:db:b2:e6:1a:24:39: 93:a2:70:71:ab:09:6c:ce:3e:09:c4:dc:73:49:d0: 8f:1f:c4:fa:11:56:13:ac:3c:89:ce:64:43:52:85: 51:34:35:48:88:25:9b:2f:f5:78:11:7d:8b:49:40: 36:7c:4c:48:fa:47:82:d6:ef:a7:fc:19:77:f3:4d: a2:3d:39:c1:2a:d4:29:78:3a:89:60:3c:33:59:29: b2:a7:a7:50:42:5e:cc:27:81:a5:bf:54:31:80:78: 64:c1:fd:d2:74:bd:8d:e3:9b:d5:f0:90:9b:cc:46: 10:dd:7a:e0:06:d7:09:57:f3:74:68:b1:36:d0:86: 2d:f0:e3:d7:b5:00:3a:4c:a7:72:4f:00:02:78:19: a3:19:50:3a:f7:29:37:51:fe:50:b9:cd:a2:da:85: 96:e1:87:9a:b7:0b:a7:89:54:f4:7b:b5:c3:f8:28: da:4a:5b:f8:23:08:ec:50:bc:ad:88:91:45:89:9d: 1d:20:9c:d8:8a:b3:90:d7:68:5e:4e:75:ca:76:64: f8:e0:a0:79:8c:90:ea:42:6a:74:90:1c:ff:08:fa: 90:96:26:00:43:2f:26:de:89:7b:40:ac:29:2c:c1: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4C:1B:12:7C:EB:87:C1:F7:62:FA:5C:0A:F4:52:CD:16:E3:CA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e998b096-5c78-3320-92d7-e0141a3efa3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9e:cd:b8:23:0c:02:0b:69:1e:81:d6:13:a1:2a:f8:7a:cd: 05:84:c8:44:89:b6:d2:8c:4f:f6:4f:f4:6b:be:8c:f0:a6:7f: c1:54:ba:b3:83:96:c6:49:b0:a4:ef:ce:63:26:df:51:cf:5d: f1:4d:2b:69:22:51:07:37:7e:c7:76:6e:1a:2b:c0:53:d2:b5: 8e:d3:49:11:ea:38:d1:28:a5:5e:d8:a0:bf:d5:d6:d2:a2:df: 1c:9e:92:dc:8c:27:91:b7:d0:46:a9:a8:0e:94:04:66:d9:73: f4:9f:97:bb:27:e6:88:41:61:b0:02:15:e6:03:2e:ef:94:b7: 5d:c6:cc:88:ad:bb:b7:b0:c7:b1:73:6a:6f:16:fe:be:ed:34: 49:f8:2a:c8:bb:6c:cf:93:e0:6f:26:5d:de:15:90:c8:ac:31: 5e:d0:76:6f:35:ee:74:59:10:4c:bd:43:a6:a2:e8:64:5a:05: a0:27:03:8b:71:28:8f:a2:75:18:a9:e4:35:05:d9:a0:93:64: 86:0e:37:be:96:ef:76:74:44:88:55:0a:30:74:c2:72:de:17: 3c:ba:b9:f1:6e:50:76:32:b0:81:97:bf:52:83:3d:5b:c0:b9: 2a:4e:97:a0:4d:9c:6d:b2:b8:b9:b7:1a:c5:41:8e:ed:db:2d: c4:7e:d8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ7okmUwSpsQQccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NjBkNGEyNGQtMTRlMC00NjYwLWE1NmQtZmNiNjY4YzgyNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYVNfH5VnCjvCHUMwLTAgk+mmESsvPDbsuYa JDmTonBxqwlszj4JxNxzSdCPH8T6EVYTrDyJzmRDUoVRNDVIiCWbL/V4EX2LSUA2 fExI+keC1u+n/Bl3802iPTnBKtQpeDqJYDwzWSmyp6dQQl7MJ4Glv1QxgHhkwf3S dL2N45vV8JCbzEYQ3XrgBtcJV/N0aLE20IYt8OPXtQA6TKdyTwACeBmjGVA69yk3 Uf5Quc2i2oWW4YeatwuniVT0e7XD+CjaSlv4IwjsULytiJFFiZ0dIJzYirOQ12he TnXKdmT44KB5jJDqQmp0kBz/CPqQliYAQy8m3ol7QKwpLMHUNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZMGxJ864fB92L6XAr0Us0W48pyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTk5OGIwOTYtNWM3OC0z MzIwLTkyZDctZTAxNDFhM2VmYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmezbgjDAILaR6B1hOhKvh6zQWEyESJttKMT/ZP9Gu+jPCmf8FUurOD lsZJsKTvzmMm31HPXfFNK2kiUQc3fsd2bhorwFPStY7TSRHqONEopV7YoL/V1tKi 3xyektyMJ5G30EapqA6UBGbZc/Sfl7sn5ohBYbACFeYDLu+Ut13GzIitu7ewx7Fz am8W/r7tNEn4Ksi7bM+T4G8mXd4VkMisMV7Qdm817nRZEEy9Q6ai6GRaBaAnA4tx KI+idRip5DUF2aCTZIYON76W73Z0RIhVCjB0wnLeFzy6ufFuUHYysIGXv1KDPVvA uSpOl6BNnG2yuLm3GsVBju3bLcR+2FA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:05 2025 by rpki-client