$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f13749e1-1cca-32bb-9be0-d280659065a4.roa File: f13749e1-1cca-32bb-9be0-d280659065a4.roa (raw, json) Hash identifier: CVcjVp2aREoXDolNrwKlS1m9Rq8LEupsrOy3NvM2ia4= Subject key identifier: C2:DE:60:ED:1A:06:93:B7:E4:C6:46:87:56:0A:FA:CC:51:76:26:75 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927AC9043E0250FF12AA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f13749e1-1cca-32bb-9be0-d280659065a4.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:c9:04:3e:02:50:ff:12:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f5eb19f9-2d55-4cfc-8735-438d2c19bd17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:12:81:fa:6a:d1:94:5a:17:b0:31:3b:e8: 70:02:2a:85:4f:60:2a:4c:3a:e5:2a:67:54:f3:1b: f3:7a:04:20:46:45:d9:03:b8:86:5f:66:63:6e:2f: a6:8b:b8:ba:56:4f:a2:21:37:0e:d2:0a:c0:40:ed: 53:27:e3:8b:22:8f:2e:83:b5:c2:77:06:11:1b:9b: cf:b4:bd:3a:e2:4b:57:0d:f4:f4:36:62:4c:ca:23: 78:88:bd:8f:0c:94:37:8d:db:21:79:5a:67:8d:98: db:f7:78:12:eb:24:31:34:41:f1:5c:3e:24:a8:3e: f6:65:de:a4:87:73:18:32:e1:82:69:52:b0:52:75: 2f:94:6b:c1:d4:dc:af:45:e1:88:bc:fc:85:3b:10: f8:ae:93:fc:a7:94:32:61:56:c1:d1:f2:9c:35:86: 6c:f1:86:91:61:39:2c:28:75:37:b9:7c:93:cf:27: c5:a6:aa:35:03:19:97:33:25:fb:d8:48:f3:0c:43: f8:14:bf:8c:f5:b5:70:c2:8e:c8:d7:1a:b4:c5:ac: 9e:68:25:ca:bf:4d:4f:72:80:2f:68:bc:4d:55:c4: 58:79:b1:84:c8:99:6e:ba:8d:c9:aa:33:f5:03:d8: c6:a8:09:d6:83:33:86:e3:6f:23:eb:21:c8:8a:91: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:60:ED:1A:06:93:B7:E4:C6:46:87:56:0A:FA:CC:51:76:26:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f13749e1-1cca-32bb-9be0-d280659065a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5a:18:c6:44:90:3d:39:94:3f:ec:40:4b:14:75:1f:61:20: ec:83:98:90:5d:74:7e:e4:d6:09:79:c0:38:1e:9c:cf:df:c3: 4b:04:3e:c8:8a:2e:92:67:b5:52:26:f3:8f:dc:3a:5e:b2:82: d4:e6:5e:71:c1:48:5e:29:eb:be:f2:f3:09:e4:bb:d8:fe:5f: 6a:96:e1:ba:19:3d:ab:ef:b5:6c:f9:79:e7:0b:c7:4b:69:f7: 45:3b:6e:d5:8a:72:87:76:02:01:63:31:bc:5a:17:88:3f:b9: fd:03:12:3a:1a:6c:6d:49:40:39:af:45:8c:74:98:7c:9a:56: 1a:43:da:1e:ba:e1:20:45:d7:a5:4d:2a:7a:b0:c7:93:87:90: 2c:b2:c2:6e:56:92:1f:63:45:75:da:09:8e:a4:03:b3:7c:87: 2a:9d:f0:ec:ea:63:51:97:e7:e5:0d:00:67:24:e5:a8:a5:e2: eb:27:f5:b6:ce:b5:7f:3e:58:0d:50:e6:cb:11:9a:8c:d8:e3: ce:3d:ef:1c:ca:a2:1c:1b:de:9f:42:db:55:9b:d5:81:49:6c: 7a:37:04:91:76:2d:57:8b:de:6a:c9:f2:42:3b:80:30:4a:92: f0:bb:1f:20:98:0f:c7:0b:8f:bc:d7:3f:76:4e:20:a5:0f:6f: fc:c6:51:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknrJBD4CUP8SqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZjVlYjE5ZjktMmQ1NS00Y2ZjLTg3MzUtNDM4ZDJjMTliZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEkSgfpq0ZRaF7AxO+hwAiqFT2AqTDrlKmdU 8xvzegQgRkXZA7iGX2Zjbi+mi7i6Vk+iITcO0grAQO1TJ+OLIo8ug7XCdwYRG5vP tL064ktXDfT0NmJMyiN4iL2PDJQ3jdsheVpnjZjb93gS6yQxNEHxXD4kqD72Zd6k h3MYMuGCaVKwUnUvlGvB1NyvReGIvPyFOxD4rpP8p5QyYVbB0fKcNYZs8YaRYTks KHU3uXyTzyfFpqo1AxmXMyX72EjzDEP4FL+M9bVwwo7I1xq0xayeaCXKv01PcoAv aLxNVcRYebGEyJluuo3JqjP1A9jGqAnWgzOG428j6yHIipHH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLeYO0aBpO35MZGh1YK+sxRdiZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjEzNzQ5ZTEtMWNjYS0z MmJiLTliZTAtZDI4MDY1OTA2NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxaGMZEkD05lD/sQEsUdR9hIOyDmJBddH7k1gl5wDgenM/fw0sEPsiK LpJntVIm84/cOl6ygtTmXnHBSF4p677y8wnku9j+X2qW4boZPavvtWz5eecLx0tp 90U7btWKcod2AgFjMbxaF4g/uf0DEjoabG1JQDmvRYx0mHyaVhpD2h664SBF16VN Knqwx5OHkCyywm5Wkh9jRXXaCY6kA7N8hyqd8OzqY1GX5+UNAGck5ail4usn9bbO tX8+WA1Q5ssRmozY48497xzKohwb3p9C21Wb1YFJbHo3BJF2LVeL3mrJ8kI7gDBK kvC7HyCYD8cLj7zXP3ZOIKUPb/zGUWU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:00 2025 by rpki-client