$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea5fd5e6-d336-351e-ba49-915e66d31a5e.roa File: ea5fd5e6-d336-351e-ba49-915e66d31a5e.roa (raw, json) Hash identifier: aWsZEe7l+G0OQCrQuFrXJ1iIdftIqn/vgYgFQIpCorA= Subject key identifier: E6:A3:86:AA:49:97:23:9B:96:F6:53:39:B6:19:60:E7:F8:5C:4D:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926F485819E74218F6D400 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea5fd5e6-d336-351e-ba49-915e66d31a5e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6f:48:58:19:e7:42:18:f6:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d43fb7a7-96f2-483b-81df-a65215213db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:87:aa:cb:87:fc:7d:bb:f0:29:74:1b:cc: 90:7a:3c:04:0b:76:3f:d1:38:58:06:24:e6:d1:a1: 86:a4:ca:4c:d4:48:f6:a4:b2:91:48:af:61:92:a2: f4:34:d9:47:d9:44:11:a5:4b:c6:98:6c:5f:2c:c7: d1:51:33:e9:db:ea:60:79:f6:8e:25:8b:84:58:98: 5f:c2:34:a6:a6:95:5b:95:18:ef:81:b4:fb:09:bc: 26:fe:50:1a:8c:52:58:c1:21:f3:49:7c:00:61:b3: 42:a6:9c:e1:4c:d0:ea:a2:15:ce:ac:b8:db:a3:1f: 1a:ef:e7:5b:34:7f:44:ec:04:ac:22:7b:5c:88:8d: 03:42:9c:3e:5c:38:0c:51:05:ab:9c:f0:84:1e:25: 7f:61:13:74:98:ff:78:12:43:18:14:2f:5c:2b:84: 34:95:9e:e0:1f:43:90:91:72:06:18:50:dd:23:38: 8b:79:6a:da:93:cf:40:f1:fe:1f:01:f3:23:74:d2: 5b:37:ef:86:a9:4b:11:c4:ff:df:5d:ac:78:01:c2: d9:49:85:08:b5:c5:e4:c1:7d:b6:a2:44:4a:43:56: 55:64:22:eb:7e:02:cf:47:07:9a:23:b4:38:01:c0: 9b:3b:ba:a0:44:b1:b1:f4:7a:7b:b9:72:97:d4:25: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A3:86:AA:49:97:23:9B:96:F6:53:39:B6:19:60:E7:F8:5C:4D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ea5fd5e6-d336-351e-ba49-915e66d31a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:a7:6c:5c:0d:d0:f2:13:96:8f:a4:eb:9a:62:a9:56:27:6c: 48:84:16:84:09:d9:ab:a4:dc:d3:70:58:49:2d:30:1f:cf:a7: 6f:3b:4e:c0:75:0e:b3:34:f0:83:2e:c7:34:56:5c:d9:00:8e: 2c:0a:57:b4:8b:b2:12:49:3a:ce:71:ad:85:79:bb:da:d8:05: 0c:73:0d:8b:16:45:03:9b:ca:f3:8f:3d:74:a0:31:d7:a0:60: 36:a7:97:2b:2b:87:9d:14:97:4b:74:e5:87:af:e4:55:f1:44: a5:35:05:ad:30:ef:79:f1:20:8c:89:c6:2d:8b:6d:dc:f6:1c: bb:69:ff:9e:a8:de:19:70:e6:00:ce:21:85:bb:f6:18:a6:db: 45:99:d1:33:3b:7d:1f:33:e1:a9:f7:47:ca:71:b5:8e:79:36: c4:42:78:6c:8a:7c:d7:dc:f1:84:ce:cf:1b:c6:fd:a1:7d:06: 24:22:4a:8a:e1:47:22:04:55:22:e9:3c:80:00:09:ec:42:cd: 74:f6:10:0b:d8:c6:5c:f3:42:2c:4e:68:18:f0:9b:fd:09:8d: a7:79:ac:70:62:96:ac:eb:8c:21:2d:7a:e4:f4:d5:46:80:5f: 9c:81:0f:8d:4e:6d:fb:0f:4b:d7:ce:39:d7:b1:8c:c6:5f:42: 63:fc:62:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkm9IWBnnQhj21AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDQzZmI3YTctOTZmMi00ODNiLTgxZGYtYTY1MjE1MjEzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtluHqsuH/H278Cl0G8yQejwEC3Y/0ThYBiTm 0aGGpMpM1Ej2pLKRSK9hkqL0NNlH2UQRpUvGmGxfLMfRUTPp2+pgefaOJYuEWJhf wjSmppVblRjvgbT7Cbwm/lAajFJYwSHzSXwAYbNCppzhTNDqohXOrLjbox8a7+db NH9E7ASsIntciI0DQpw+XDgMUQWrnPCEHiV/YRN0mP94EkMYFC9cK4Q0lZ7gH0OQ kXIGGFDdIziLeWrak89A8f4fAfMjdNJbN++GqUsRxP/fXax4AcLZSYUItcXkwX22 okRKQ1ZVZCLrfgLPRweaI7Q4AcCbO7qgRLGx9Hp7uXKX1CVLsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOajhqpJlyOblvZTObYZYOf4XE09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWE1ZmQ1ZTYtZDMzNi0z NTFlLWJhNDktOTE1ZTY2ZDMxYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALanbFwN0PITlo+k65piqVYnbEiEFoQJ2auk3NNwWEktMB/Pp287TsB1 DrM08IMuxzRWXNkAjiwKV7SLshJJOs5xrYV5u9rYBQxzDYsWRQObyvOPPXSgMdeg YDanlysrh50Ul0t05Yev5FXxRKU1Ba0w73nxIIyJxi2Lbdz2HLtp/56o3hlw5gDO IYW79him20WZ0TM7fR8z4an3R8pxtY55NsRCeGyKfNfc8YTOzxvG/aF9BiQiSorh RyIEVSLpPIAACexCzXT2EAvYxlzzQixOaBjwm/0Jjad5rHBilqzrjCEteuT01UaA X5yBD41ObfsPS9fOOdexjMZfQmP8Ykg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:40 2025 by rpki-client