$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c95464-525d-3abc-8681-6564db264df0.roa File: 59c95464-525d-3abc-8681-6564db264df0.roa (raw, json) Hash identifier: 3q2PZjSaiuureugEvUTYReBr2i+YW0/Q5jIz7FEpgNE= Subject key identifier: F6:4B:48:E5:56:F0:E3:96:78:DD:24:CE:2F:3C:F4:44:F4:9A:4D:10 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927AB8CB50EB23E75C4280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c95464-525d-3abc-8681-6564db264df0.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:b8:cb:50:eb:23:e7:5c:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3496bd7c-a5ba-4bce-a7ba-d6f78b586184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:65:57:25:35:86:9b:35:61:e7:40:27:67: 46:ba:31:34:04:22:c1:fb:ed:6a:9b:b5:9c:08:5d: 48:04:3d:4a:14:71:8c:19:70:a2:5e:ce:2c:9c:24: e1:72:19:a8:bd:5d:3b:78:59:05:c5:6a:bb:83:38: 51:9d:96:70:10:a6:96:7d:40:72:ba:a4:f0:a6:ee: bb:54:40:d9:ed:d2:f0:1a:1e:e6:d0:70:9a:5b:10: f7:55:da:e4:22:1d:27:e9:28:17:6b:a1:d8:75:d5: 17:dd:46:7c:2e:a5:b2:6d:5a:03:03:4f:d4:2f:a8: fe:68:09:4a:1c:d2:cd:bd:2e:f5:43:17:ed:40:df: 74:5b:d9:52:cf:2f:b0:5b:de:51:22:83:d5:d9:45: 7d:95:01:d3:74:a1:f9:b3:48:73:37:48:30:fb:c2: 4c:39:12:cb:f0:f3:e2:ca:c3:6f:c6:e6:c0:7d:fc: 3f:21:ce:b5:b4:cc:82:cc:c4:b9:ba:c0:43:8c:69: e8:e8:c5:99:dd:19:bb:d3:45:05:c4:92:66:27:c7: 11:4b:73:54:4b:f7:e8:cb:f6:3e:b7:2f:c1:4c:04: b6:3a:0d:11:72:29:65:88:e0:b8:5d:42:3c:fd:48: bd:4e:04:7a:45:af:84:0a:4f:4d:56:8c:61:82:68: 71:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:48:E5:56:F0:E3:96:78:DD:24:CE:2F:3C:F4:44:F4:9A:4D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/59c95464-525d-3abc-8681-6564db264df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3e:ea:2f:c2:69:d0:84:cb:f4:e5:0f:c3:93:89:55:6a:5a: b7:10:7a:75:11:97:90:b7:6e:57:91:23:40:a2:e0:3a:e6:62: 70:ff:ea:d0:63:70:f6:5b:a7:16:de:6d:03:fc:69:2a:b0:c8: 90:1a:24:5c:7b:43:59:55:0d:41:1a:73:02:7f:4c:00:59:3c: 0f:09:f6:b7:1c:c2:d2:82:02:dc:70:17:1e:69:d9:dc:43:6c: ee:4d:64:77:30:98:5b:3e:0a:ba:72:45:91:a6:fd:fe:2d:af: 4a:61:e2:e9:e0:cf:2c:48:4a:98:2b:e5:7e:19:fa:69:e5:ac: cb:f6:eb:26:fb:52:d2:f8:31:e2:fd:fd:0a:05:3e:41:52:82: ed:01:90:5d:7e:ff:3e:81:ed:47:5b:57:01:a6:09:6b:c4:de: 92:1f:a7:df:76:49:3e:cc:b9:73:a3:be:03:85:1b:d7:d9:d0: b2:d2:f1:a0:35:5a:b9:02:83:94:b0:f6:4e:7a:fc:7d:1b:13: ab:21:17:69:65:f5:dc:79:a6:f3:7d:5b:84:b0:36:01:01:81: e6:dd:c7:d1:ef:54:15:a8:fc:01:93:49:51:01:70:45:80:b0: 93:8e:72:0c:6f:8e:55:f8:5c:b0:b8:62:34:12:75:ac:46:a9: 2b:f3:0e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknq4y1DrI+dcQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MzQ5NmJkN2MtYTViYS00YmNlLWE3YmEtZDZmNzhiNTg2MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHFlVyU1hps1YedAJ2dGujE0BCLB++1qm7Wc CF1IBD1KFHGMGXCiXs4snCThchmovV07eFkFxWq7gzhRnZZwEKaWfUByuqTwpu67 VEDZ7dLwGh7m0HCaWxD3VdrkIh0n6SgXa6HYddUX3UZ8LqWybVoDA0/UL6j+aAlK HNLNvS71QxftQN90W9lSzy+wW95RIoPV2UV9lQHTdKH5s0hzN0gw+8JMORLL8PPi ysNvxubAffw/Ic61tMyCzMS5usBDjGno6MWZ3Rm700UFxJJmJ8cRS3NUS/foy/Y+ ty/BTAS2Og0RcilliOC4XUI8/Ui9TgR6Ra+ECk9NVoxhgmhxIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZLSOVW8OOWeN0kzi889ET0mk0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTljOTU0NjQtNTI1ZC0z YWJjLTg2ODEtNjU2NGRiMjY0ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg+6i/CadCEy/TlD8OTiVVqWrcQenURl5C3bleRI0Ci4DrmYnD/6tBj cPZbpxbebQP8aSqwyJAaJFx7Q1lVDUEacwJ/TABZPA8J9rccwtKCAtxwFx5p2dxD bO5NZHcwmFs+CrpyRZGm/f4tr0ph4ungzyxISpgr5X4Z+mnlrMv26yb7UtL4MeL9 /QoFPkFSgu0BkF1+/z6B7UdbVwGmCWvE3pIfp992ST7MuXOjvgOFG9fZ0LLS8aA1 WrkCg5Sw9k56/H0bE6shF2ll9dx5pvN9W4SwNgEBgebdx9HvVBWo/AGTSVEBcEWA sJOOcgxvjlX4XLC4YjQSdaxGqSvzDvc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:18:25 2025 by rpki-client