$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa File: 00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa (raw, json) Hash identifier: WDxE/+n/HDP1IfwYzcZbIAzq+cTRSZjIfm9hqjmSwjI= Subject key identifier: 40:65:F3:52:81:23:6A:8D:C0:6E:4A:D3:C3:60:3B:75:BD:75:03:58 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0E87105DB69DDA9B93C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0e:87:10:5d:b6:9d:da:9b:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=8f4e646e-7815-4a5e-864c-c96265c10ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:a0:e1:3d:17:be:f8:66:e8:d0:1a:fe:c7: ee:66:d2:dd:a2:7e:bc:87:06:c1:8d:13:46:e2:d1: 47:03:e4:f6:d5:23:b3:c1:51:ec:27:77:1b:c7:aa: 31:bf:43:76:8a:51:ce:fd:91:9a:db:83:df:2c:7b: 19:b5:de:8c:f0:9e:da:5a:d7:04:c6:46:59:e3:5e: a7:20:af:8c:14:5f:f6:42:d7:52:56:e4:7d:e2:30: d7:18:2f:c5:60:09:10:59:6c:af:2c:99:2f:87:04: 3a:cc:ca:39:09:f7:ec:23:b3:57:8a:4b:cc:24:ff: 34:f8:18:96:71:63:8c:2e:37:25:9f:ba:99:25:14: c5:12:14:d6:66:db:f3:f3:1a:df:db:f6:d5:19:d0: ec:37:b1:51:0e:47:51:dd:65:e7:3a:af:8f:95:ca: 9c:19:c3:9d:bc:55:48:28:cb:c4:d6:a8:74:48:2e: 65:e3:d7:08:24:3b:19:27:96:12:81:2f:d3:f8:29: 7f:24:b1:8f:10:c6:9c:e8:54:3d:6a:a8:bd:99:5b: b7:cb:f0:27:63:b8:8f:67:5d:d2:e2:b0:d4:0b:f1: fc:23:45:8e:9f:fc:2c:b5:37:e7:7a:12:50:b4:c1: d7:88:f0:40:0f:e1:78:4d:4e:09:fc:2d:c1:62:a4: d2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:F3:52:81:23:6A:8D:C0:6E:4A:D3:C3:60:3B:75:BD:75:03:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/00890627-36dd-3a00-8bdf-7bdb97b8e0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f6:66:2d:85:70:f8:9b:82:a2:fa:5b:3f:27:42:85:82:4a: a6:6a:8e:92:5e:e9:28:02:c5:2c:45:39:2a:c9:d2:7b:fd:6c: 77:44:6c:59:54:0b:69:9f:1b:e4:fc:3c:24:ab:36:ca:2c:ac: 8b:b8:40:d5:af:f1:90:b0:93:9b:23:98:a4:86:28:4f:12:0e: 96:36:fd:33:ea:66:19:50:1a:94:c2:1d:83:d7:2e:f9:b6:34: 30:32:eb:df:5f:8f:32:05:f6:52:34:e0:17:fd:52:c0:9d:8d: 77:d8:ed:33:3d:ce:cd:e7:93:b4:64:b6:8f:8d:e8:41:1c:7f: 58:0a:03:65:7f:4e:f2:5d:fa:a2:08:75:b7:d0:1c:3a:8b:98: 3c:58:47:78:3e:e5:5a:80:ae:92:d1:1f:28:10:05:96:2b:27: cd:03:f9:ac:cf:8b:d7:15:fd:37:13:e3:4f:3b:9a:78:b3:6e: 5b:de:64:9c:4a:c4:f9:10:bd:da:60:33:74:67:4b:db:0b:77: 96:b7:c7:51:f8:b5:f1:ee:0f:1f:6b:9e:0f:f7:d0:cb:42:db: 7c:c4:f8:ad:f6:ef:dd:70:58:19:c2:c5:8a:ef:47:e9:28:98: 43:36:eb:14:60:36:b1:2e:46:84:81:12:e3:99:ce:b6:09:54: c0:e2:e2:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ6HEF22ndqbk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OGY0ZTY0NmUtNzgxNS00YTVlLTg2NGMtYzk2MjY1YzEwZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4Sg4T0Xvvhm6NAa/sfuZtLdon68hwbBjRNG 4tFHA+T21SOzwVHsJ3cbx6oxv0N2ilHO/ZGa24PfLHsZtd6M8J7aWtcExkZZ416n IK+MFF/2QtdSVuR94jDXGC/FYAkQWWyvLJkvhwQ6zMo5CffsI7NXikvMJP80+BiW cWOMLjcln7qZJRTFEhTWZtvz8xrf2/bVGdDsN7FRDkdR3WXnOq+PlcqcGcOdvFVI KMvE1qh0SC5l49cIJDsZJ5YSgS/T+Cl/JLGPEMac6FQ9aqi9mVu3y/AnY7iPZ13S 4rDUC/H8I0WOn/wstTfnehJQtMHXiPBAD+F4TU4J/C3BYqTS3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBl81KBI2qNwG5K08NgO3W9dQNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDA4OTA2MjctMzZkZC0z YTAwLThiZGYtN2JkYjk3YjhlMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID2Zi2FcPibgqL6Wz8nQoWCSqZqjpJe6SgCxSxFOSrJ0nv9bHdEbFlU C2mfG+T8PCSrNsosrIu4QNWv8ZCwk5sjmKSGKE8SDpY2/TPqZhlQGpTCHYPXLvm2 NDAy699fjzIF9lI04Bf9UsCdjXfY7TM9zs3nk7Rkto+N6EEcf1gKA2V/TvJd+qII dbfQHDqLmDxYR3g+5VqArpLRHygQBZYrJ80D+azPi9cV/TcT4087mnizblveZJxK xPkQvdpgM3RnS9sLd5a3x1H4tfHuDx9rng/30MtC23zE+K32791wWBnCxYrvR+ko mEM26xRgNrEuRoSBEuOZzrYJVMDi4oI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:47 2025 by rpki-client