$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa File: dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa (raw, json) Hash identifier: tVyvPNw9Cvccq/FEid5a9lIzbS5dGaDgGYODWTPgOnQ= Subject key identifier: 77:D3:FA:04:A2:5F:19:43:EC:68:F0:2A:00:17:E3:75:DD:94:22:1C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0FAF97E9A1186900EE20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0f:af:97:e9:a1:18:69:00:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=ae1fb14d-bc3d-4ee1-bc3b-c60c1add8706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:4b:42:2d:80:d0:8e:d6:23:76:94:21:39: 7d:10:95:55:2b:4c:6f:fa:a7:f3:92:32:a4:08:a1: b2:0c:f1:24:b0:7b:90:eb:28:cc:4e:ca:86:07:6a: 1d:e2:cb:29:91:40:41:b1:25:62:f6:3b:eb:88:39: f3:3e:82:78:f3:26:ba:3d:bb:f1:ab:60:c7:75:f7: 92:34:13:af:6d:e7:68:8c:d4:f7:71:a5:90:02:13: 2f:b0:bb:50:85:d5:f0:20:12:d0:d6:74:13:52:4a: 07:26:40:7e:03:0f:df:27:19:76:85:9b:0b:1d:e3: d6:42:20:3f:87:ce:21:8c:2b:dd:f9:0a:05:36:1d: 85:80:ab:b1:da:42:2a:26:dc:53:d8:5f:a3:79:7c: 2c:d9:f9:92:ce:33:9d:91:86:6b:a7:5c:23:16:16: 65:1f:db:3f:0f:4d:54:73:56:1a:ff:21:aa:e7:f0: 87:6a:72:25:0d:0a:82:e0:46:c4:a2:0f:86:13:5a: d7:26:5e:28:3f:09:83:85:f8:13:64:e2:0a:3f:56: af:35:5f:a4:23:e6:a5:c8:9a:13:c4:5e:23:8f:90: 08:e4:12:10:42:f7:c2:f5:c0:8f:96:fe:dd:b0:08: 96:55:5a:74:6b:16:62:c5:b5:a6:62:47:fe:54:cc: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D3:FA:04:A2:5F:19:43:EC:68:F0:2A:00:17:E3:75:DD:94:22:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dfba8e5a-0248-33cb-bc7f-f3dd12af24b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:2a:4c:d4:e2:55:ef:5c:f2:67:1e:44:fd:f3:49:1c:54:67: 67:48:00:d6:39:d8:43:c4:95:8f:44:b9:b7:ea:ee:b6:b6:71: db:96:ce:8f:eb:22:6d:74:e6:86:35:57:74:f1:9c:23:2d:a5: cf:b2:e2:8b:f0:a0:5b:c1:25:8b:58:19:0d:cf:4b:28:35:b6: ed:eb:6b:d5:ce:9d:b3:6d:e7:7d:e4:b2:97:3b:d6:d3:44:e3: fb:63:c5:d8:c5:2c:d8:4b:3a:7a:f2:17:3b:7c:17:43:3e:2d: bf:7e:c8:66:58:be:26:e6:83:22:1e:6c:0c:b3:d9:bf:f3:1c: 8d:ef:ee:ad:01:5c:28:71:39:87:8f:71:76:7e:1c:8e:d9:c8: d9:88:2c:c8:a9:a1:cc:01:c0:c7:38:76:ec:71:10:3e:dc:b5: 08:01:1f:21:7f:b5:18:3e:fe:38:b2:ed:b1:51:8a:57:bf:f1: c7:c6:f8:e9:ae:ad:0e:6c:19:b7:bb:ce:07:f1:fb:85:cc:74: a0:f2:68:33:9c:35:dd:17:14:14:9a:a6:42:8c:d2:0e:96:fe: 99:84:4e:04:6f:30:4d:d6:05:c5:0d:f7:4e:30:a2:d1:0b:a3: bb:80:07:ff:a3:9a:0c:04:e9:1d:42:3c:52:15:9c:20:a7:6a: cc:ee:6a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ+vl+mhGGkA7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YWUxZmIxNGQtYmMzZC00ZWUxLWJjM2ItYzYwYzFhZGQ4NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRLQi2A0I7WI3aUITl9EJVVK0xv+qfzkjKk CKGyDPEksHuQ6yjMTsqGB2od4sspkUBBsSVi9jvriDnzPoJ48ya6Pbvxq2DHdfeS NBOvbedojNT3caWQAhMvsLtQhdXwIBLQ1nQTUkoHJkB+Aw/fJxl2hZsLHePWQiA/ h84hjCvd+QoFNh2FgKux2kIqJtxT2F+jeXws2fmSzjOdkYZrp1wjFhZlH9s/D01U c1Ya/yGq5/CHanIlDQqC4EbEog+GE1rXJl4oPwmDhfgTZOIKP1avNV+kI+alyJoT xF4jj5AI5BIQQvfC9cCPlv7dsAiWVVp0axZixbWmYkf+VMwLwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfT+gSiXxlD7GjwKgAX43XdlCIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGZiYThlNWEtMDI0OC0z M2NiLWJjN2YtZjNkZDEyYWYyNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAqTNTiVe9c8mceRP3zSRxUZ2dIANY52EPElY9Eubfq7ra2cduWzo/r Im105oY1V3TxnCMtpc+y4ovwoFvBJYtYGQ3PSyg1tu3ra9XOnbNt533kspc71tNE 4/tjxdjFLNhLOnryFzt8F0M+Lb9+yGZYvibmgyIebAyz2b/zHI3v7q0BXChxOYeP cXZ+HI7ZyNmILMipocwBwMc4duxxED7ctQgBHyF/tRg+/jiy7bFRile/8cfG+Omu rQ5sGbe7zgfx+4XMdKDyaDOcNd0XFBSapkKM0g6W/pmETgRvME3WBcUN904wotEL o7uAB/+jmgwE6R1CPFIVnCCnaszuatY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:11 2025 by rpki-client