$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa File: f4a230db-031d-3490-b152-d40b5424ae7e.roa (raw, json) Hash identifier: PxNoDKq5XqubNzl/vm0u0Ptfp4RNVckutaLvGVVmwAs= Subject key identifier: 0F:DF:35:2D:E6:F8:48:79:DB:D6:A3:06:C9:39:C2:4D:F0:FB:4A:20 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926CED86320F293CDA8EC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6c:ed:86:32:0f:29:3c:da:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d896fc97-c5b1-4a07-b6ce-4b65cb0bf8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:09:26:86:ce:54:73:7f:91:1f:43:49:d5:84: 65:b7:cf:1a:ac:c6:2a:6f:95:1c:83:75:52:41:d2: a3:b4:3d:39:c7:67:73:03:87:23:aa:c7:ad:22:9c: af:b1:3d:3c:de:fd:a8:e6:a6:42:f5:5a:39:87:ed: 3c:38:6e:c9:ac:25:da:dd:88:77:21:4d:e0:0b:d0: bf:c5:8d:56:3a:40:4d:a2:2b:55:0b:87:3d:00:a9: 7b:74:86:12:4c:e6:f6:e5:26:c7:0f:ed:af:11:dc: 8c:0e:6b:be:87:80:9a:7d:3a:ca:37:cd:44:9f:bd: 50:e2:59:e7:76:05:2d:ac:ae:f6:f7:1f:40:34:5d: ee:5d:40:5b:cd:b8:29:be:32:b1:0b:dd:6b:5f:40: e9:9a:f7:8d:f7:13:01:ee:97:0c:24:17:be:2a:55: 59:b7:5d:ea:60:a4:1c:61:a4:33:e6:83:94:84:6d: 4c:bd:d0:61:aa:60:05:7c:9c:27:3e:4b:f8:18:4c: 89:89:c6:e0:a5:ab:07:74:20:ae:cb:dd:e4:ed:3f: f9:99:f8:12:3b:52:4b:35:bf:e2:2b:ee:1c:8b:de: 52:72:39:a4:78:2a:6c:91:38:84:4c:55:c4:89:c1: 95:fc:1b:46:36:5e:7f:c6:7c:65:71:f8:a5:96:10: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DF:35:2D:E6:F8:48:79:DB:D6:A3:06:C9:39:C2:4D:F0:FB:4A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f4a230db-031d-3490-b152-d40b5424ae7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:87:16:8a:61:c0:99:76:ea:c1:64:f2:88:be:ca:5a:18:a1: ac:bc:9a:83:4d:26:da:f8:c5:f2:56:e7:89:79:4a:68:a4:8b: 8e:15:f0:b5:01:e0:64:fd:0e:85:70:1d:41:df:13:63:f9:fc: 35:cf:d9:9f:83:7d:b8:2a:f4:ad:84:86:cb:64:d8:f5:68:8c: d2:70:39:f5:56:13:04:73:e5:0a:a4:b2:e5:cd:b3:4a:5c:76: a4:c8:a1:03:d2:27:f6:e8:54:ba:08:0f:ed:40:17:27:78:8f: 63:00:73:4c:2f:e6:2c:88:31:81:49:c5:42:48:f2:3b:ea:99: 45:6d:bb:1b:6c:43:91:be:a8:1f:b2:04:17:26:c3:c0:ac:f0: 95:6d:47:51:56:6a:38:4b:85:d6:3e:67:c0:74:25:46:e6:3c: ef:a1:e9:6b:4d:45:40:eb:a3:e0:6d:c2:b9:b8:d1:1e:9d:b6: eb:b1:83:ba:60:e8:5b:e1:b5:73:7f:f9:35:92:0d:b2:85:eb: 8e:79:bd:b7:e5:69:69:68:7d:15:b6:e4:c7:d4:e2:92:39:63: 6a:8c:31:9b:bb:3b:58:44:c9:4a:65:03:34:29:00:c3:25:ff: 95:2c:44:6a:da:f2:00:44:47:de:f7:32:90:8b:25:d2:8f:60: 03:41:21:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmzthjIPKTzajsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDg5NmZjOTctYzViMS00YTA3LWI2Y2UtNGI2NWNiMGJmOGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswkmhs5Uc3+RH0NJ1YRlt88arMYqb5Ucg3VS QdKjtD05x2dzA4cjqsetIpyvsT083v2o5qZC9Vo5h+08OG7JrCXa3Yh3IU3gC9C/ xY1WOkBNoitVC4c9AKl7dIYSTOb25SbHD+2vEdyMDmu+h4CafTrKN81En71Q4lnn dgUtrK729x9ANF3uXUBbzbgpvjKxC91rX0DpmveN9xMB7pcMJBe+KlVZt13qYKQc YaQz5oOUhG1MvdBhqmAFfJwnPkv4GEyJicbgpasHdCCuy93k7T/5mfgSO1JLNb/i K+4ci95ScjmkeCpskTiETFXEicGV/BtGNl5/xnxlcfillhD49QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/fNS3m+Eh529ajBsk5wk3w+0ogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjRhMjMwZGItMDMxZC0z NDkwLWIxNTItZDQwYjU0MjRhZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+HFophwJl26sFk8oi+yloYoay8moNNJtr4xfJW54l5Smiki44V8LUB 4GT9DoVwHUHfE2P5/DXP2Z+Dfbgq9K2Ehstk2PVojNJwOfVWEwRz5QqksuXNs0pc dqTIoQPSJ/boVLoID+1AFyd4j2MAc0wv5iyIMYFJxUJI8jvqmUVtuxtsQ5G+qB+y BBcmw8Cs8JVtR1FWajhLhdY+Z8B0JUbmPO+h6WtNRUDro+Btwrm40R6dtuuxg7pg 6FvhtXN/+TWSDbKF6455vbflaWlofRW25MfU4pI5Y2qMMZu7O1hEyUplAzQpAMMl /5UsRGra8gBER973MpCLJdKPYANBIYA= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:37 2025 by rpki-client