$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bdbd3f-2a57-3b6f-8db9-70925ec8eb02.roa File: e9bdbd3f-2a57-3b6f-8db9-70925ec8eb02.roa (raw, json) Hash identifier: GIBYBwwWEjLeZDjMVP9BXEFed0FreRMO0JIyaGqc8MA= Subject key identifier: F6:D5:1C:80:66:02:B6:5A:D6:B6:70:28:F7:0E:C3:0B:94:AA:C5:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927B9F2987FF7ED3359400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bdbd3f-2a57-3b6f-8db9-70925ec8eb02.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7b:9f:29:87:ff:7e:d3:35:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=84d273ec-1f36-4fd0-a740-a2c0fb44861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:18:cb:81:36:c3:24:b9:44:37:09:4d:85: c6:24:42:38:0f:01:7f:90:af:cf:11:92:c2:2d:95: b5:1e:65:f7:56:31:e2:0d:1b:8d:e7:5f:56:f1:67: 8e:00:cc:c8:73:db:2b:66:78:c7:95:a0:ce:9c:be: c4:98:43:67:e7:9a:eb:6a:f0:ac:7c:2b:21:44:87: 91:00:3e:c3:26:92:8b:4c:29:bd:15:4f:f2:4c:4f: 43:47:76:5d:34:e0:42:9a:cf:9f:f0:66:86:02:5e: 5a:7e:7e:21:59:9d:1b:73:19:65:79:54:88:1f:6f: a9:32:3a:be:12:5c:5e:80:1a:59:7e:45:7b:92:93: bb:db:67:b2:6b:04:ab:47:72:92:f5:15:e3:1b:13: 82:0e:6a:2d:cf:d7:30:60:47:3d:db:b2:a0:ca:6f: 40:59:dd:70:6d:f7:3f:2a:17:8f:ba:4f:83:fc:69: 91:32:8c:15:70:a1:7e:c8:c9:de:05:69:84:ea:45: 95:3c:3c:3b:c0:f7:6a:d8:5b:55:8c:8d:82:11:3a: 4f:4a:4f:43:6e:ab:18:67:0a:5c:ee:de:d0:d7:ec: b6:54:be:c1:05:fa:e9:15:be:8e:70:35:1e:c7:cc: 9d:14:1c:d8:b7:d8:de:26:54:ba:56:1b:0b:52:68: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:1C:80:66:02:B6:5A:D6:B6:70:28:F7:0E:C3:0B:94:AA:C5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e9bdbd3f-2a57-3b6f-8db9-70925ec8eb02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f0:3a:18:4d:aa:1f:23:27:74:cc:a8:cf:e8:a7:f6:07:59: 4f:14:bd:76:53:be:79:50:19:a6:0b:bf:90:8d:bc:42:0e:c6: 33:41:6f:98:15:0f:d3:8b:af:dc:6f:f5:0e:9f:70:bb:e1:a1: 5a:b3:02:33:5b:da:6c:9f:73:40:01:57:22:92:a4:94:36:ba: 02:59:25:fa:7f:23:59:13:f3:81:fb:85:7a:1c:6a:f5:0b:18: ea:dc:3d:62:77:ca:08:18:24:69:4c:f3:9a:36:e9:a6:fb:2b: bb:35:d9:63:95:60:17:42:87:bc:2a:96:d3:fa:b7:f0:95:2b: 5f:ef:a7:52:81:74:5c:eb:96:62:64:b5:d5:a2:6e:89:ad:3a: 7b:32:a6:bd:2b:4f:2b:b7:65:18:17:3a:35:7b:80:15:79:43: aa:00:6e:16:e6:cf:76:07:51:cf:dc:75:7b:d8:21:ff:84:2b: cf:e4:ff:f5:b4:89:1c:69:e4:e6:b2:0f:6a:f1:8b:36:e8:2e: 93:f7:b3:fd:62:b2:d2:75:8e:fb:2e:d7:c9:4e:e1:bd:24:99: 9b:04:b6:9c:b8:85:00:fc:48:1b:db:29:19:da:07:47:59:a0: 6d:d3:3f:ef:a1:ca:7e:0f:fa:51:95:c7:56:34:af:e0:d3:0d: be:aa:4a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknufKYf/ftM1lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ODRkMjczZWMtMWYzNi00ZmQwLWE3NDAtYTJjMGZiNDQ4NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsYy4E2wyS5RDcJTYXGJEI4DwF/kK/PEZLC LZW1HmX3VjHiDRuN519W8WeOAMzIc9srZnjHlaDOnL7EmENn55rravCsfCshRIeR AD7DJpKLTCm9FU/yTE9DR3ZdNOBCms+f8GaGAl5afn4hWZ0bcxlleVSIH2+pMjq+ ElxegBpZfkV7kpO722eyawSrR3KS9RXjGxOCDmotz9cwYEc927Kgym9AWd1wbfc/ KhePuk+D/GmRMowVcKF+yMneBWmE6kWVPDw7wPdq2FtVjI2CETpPSk9DbqsYZwpc 7t7Q1+y2VL7BBfrpFb6OcDUex8ydFBzYt9jeJlS6VhsLUmiB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbVHIBmArZa1rZwKPcOwwuUqsXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZTliZGJkM2YtMmE1Ny0z YjZmLThkYjktNzA5MjVlYzhlYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEdiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPwOhhNqh8jJ3TMqM/op/YHWU8UvXZTvnlQGaYLv5CNvEIOxjNBb5gV D9OLr9xv9Q6fcLvhoVqzAjNb2myfc0ABVyKSpJQ2ugJZJfp/I1kT84H7hXocavUL GOrcPWJ3yggYJGlM85o26ab7K7s12WOVYBdCh7wqltP6t/CVK1/vp1KBdFzrlmJk tdWibomtOnsypr0rTyu3ZRgXOjV7gBV5Q6oAbhbmz3YHUc/cdXvYIf+EK8/k//W0 iRxp5OayD2rxizboLpP3s/1istJ1jvsu18lO4b0kmZsEtpy4hQD8SBvbKRnaB0dZ oG3TP++hyn4P+lGVx1Y0r+DTDb6qSqE= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:14 2025 by rpki-client