$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f71209f2-d162-3545-af6d-308536913b89.roa File: f71209f2-d162-3545-af6d-308536913b89.roa (raw, json) Hash identifier: ltf80Ow5HHlhkkSrXGh0mzATiepdBo2xAWBF2/dgo6A= Subject key identifier: 51:EE:9F:CF:9E:92:FC:C3:EC:3F:19:67:E4:89:F3:E7:E5:FE:37:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA667C76B0C8FBBAFA4074180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f71209f2-d162-3545-af6d-308536913b89.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.71.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:c7:6b:0c:8f:bb:af:a4:07:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=815cb705-8aa1-417b-8a2d-2575fc826bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a8:a2:4f:25:8a:a6:d0:31:ed:2b:13:26:fc: f9:44:e2:ef:65:e7:3b:a2:1b:fc:23:e7:e4:bd:94: ec:aa:be:79:6b:1a:37:b9:f4:ff:67:a4:83:13:74: ca:17:75:45:5b:d2:6d:ee:7a:0e:40:4a:ea:d7:4e: de:47:4b:56:f1:d6:70:79:fc:41:7f:28:fc:ea:4e: c7:91:e5:73:73:f6:7c:10:91:22:17:e8:b2:18:d0: f7:7f:9e:b9:26:1f:56:37:63:2e:bc:f2:a9:fb:ae: db:17:8c:b7:9a:e1:8a:94:97:3e:a1:3f:fd:2f:b8: 30:a7:ee:6e:f3:1f:fb:6d:3f:c0:e8:bc:16:aa:48: b0:95:a5:2e:7d:21:6c:25:11:2e:6d:5d:58:dd:a4: b3:64:6a:19:dd:6e:78:99:f5:b1:84:fc:e7:28:53: 71:1c:de:38:d3:ba:6a:d9:50:c9:16:13:b0:e0:37: a9:d7:27:1e:9c:9e:b1:9f:29:1b:c1:0e:9f:2a:54: 32:5a:2f:f9:27:2e:6f:fe:b1:8a:d9:6d:30:6e:ec: d9:2e:8a:41:a3:8d:98:6e:18:f7:7e:47:05:33:96: 48:8e:98:9d:a5:cb:93:f6:5a:0a:c0:ca:66:b5:f8: f8:c2:2a:02:0d:e8:63:64:b1:1e:74:9f:c1:59:74: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:9F:CF:9E:92:FC:C3:EC:3F:19:67:E4:89:F3:E7:E5:FE:37:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f71209f2-d162-3545-af6d-308536913b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.71.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e9:dd:d3:af:b9:35:9f:5d:6d:a8:79:2a:cc:48:f1:67:55: 1f:4f:dc:52:af:98:32:72:c1:17:da:8d:4b:39:83:80:39:cd: de:2d:8d:71:1d:d3:1d:4b:10:ba:d0:43:e8:fe:5c:24:17:77: c3:eb:70:72:a0:65:0c:34:26:c0:0a:be:74:58:31:62:c5:9a: af:f3:9a:e5:38:76:3f:da:78:30:74:ad:a8:97:9e:67:cb:6a: 46:ef:96:6a:b2:53:f0:4b:de:cf:55:81:e5:52:34:54:67:fe: b9:2b:2e:bc:7e:16:d7:b2:64:13:e6:dc:56:44:93:4d:a7:63: 1e:b3:56:e6:25:bf:13:6b:a3:cf:6b:f7:ad:4d:c5:0b:6c:87: 88:58:e8:d3:ca:e7:70:7d:f6:fc:df:60:15:7d:20:5b:12:1a: b3:72:6c:8c:6c:b1:94:90:be:c9:7e:f8:8d:bb:43:e4:9d:a9: 86:73:97:99:4d:e2:8b:6d:ec:17:73:0d:4e:00:06:70:6c:52: 37:44:67:12:f6:90:0b:91:74:2c:d8:ab:bd:95:1c:a3:78:aa: 08:95:bd:76:df:e9:f1:4a:06:0e:b3:1b:ff:0c:05:7a:f0:62: ec:69:6c:01:1f:42:99:d3:91:1f:ed:a4:32:73:a2:c2:ce:49: c4:dc:56:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8drDI+7r6QHQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ODE1Y2I3MDUtOGFhMS00MTdiLThhMmQtMjU3NWZjODI2YmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKiiTyWKptAx7SsTJvz5ROLvZec7ohv8I+fk vZTsqr55axo3ufT/Z6SDE3TKF3VFW9Jt7noOQErq107eR0tW8dZwefxBfyj86k7H keVzc/Z8EJEiF+iyGND3f565Jh9WN2MuvPKp+67bF4y3muGKlJc+oT/9L7gwp+5u 8x/7bT/A6LwWqkiwlaUufSFsJREubV1Y3aSzZGoZ3W54mfWxhPznKFNxHN4407pq 2VDJFhOw4Dep1ycenJ6xnykbwQ6fKlQyWi/5Jy5v/rGK2W0wbuzZLopBo42Ybhj3 fkcFM5ZIjpidpcuT9loKwMpmtfj4wioCDehjZLEedJ/BWXSIcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHun8+ekvzD7D8ZZ+SJ8+fl/jeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjcxMjA5ZjItZDE2Mi0z NTQ1LWFmNmQtMzA4NTM2OTEzYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3p3dOvuTWfXW2oeSrMSPFnVR9P3FKvmDJywRfajUs5g4A5zd4tjXEd 0x1LELrQQ+j+XCQXd8PrcHKgZQw0JsAKvnRYMWLFmq/zmuU4dj/aeDB0raiXnmfL akbvlmqyU/BL3s9VgeVSNFRn/rkrLrx+FteyZBPm3FZEk02nYx6zVuYlvxNro89r 961NxQtsh4hY6NPK53B99vzfYBV9IFsSGrNybIxssZSQvsl++I27Q+SdqYZzl5lN 4ott7BdzDU4ABnBsUjdEZxL2kAuRdCzYq72VHKN4qgiVvXbf6fFKBg6zG/8MBXrw YuxpbAEfQpnTkR/tpDJzosLOScTcVuU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:25 2025 by rpki-client