$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa File: 023c2728-c60b-35c6-bebd-293d9fa56f1a.roa (raw, json) Hash identifier: 37nvMLBPkaMIJZpxpTchA+u14ojcpCNOFYUAM9UiMwk= Subject key identifier: B8:9A:4C:C8:B7:7A:5C:F9:8D:54:D0:CA:45:40:E7:AE:A4:B8:18:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926A66D357BEAA31A28D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6a:66:d3:57:be:aa:31:a2:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=19b7a2b8-15d5-43df-8b13-72cb350e9acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:aa:cd:f1:88:eb:b6:64:a1:b8:ad:9a:7f: c3:c0:13:63:ab:dc:b8:b2:d3:a9:cb:c6:d0:68:3d: ef:b0:29:f9:6e:46:33:e4:38:92:ee:9a:56:87:9b: 23:90:29:36:81:15:b0:d7:48:9c:0e:86:06:19:f6: 84:b2:ea:4c:50:9e:26:f0:47:91:aa:91:26:80:01: 76:b7:d7:85:15:33:fc:51:a2:55:82:57:63:df:62: d5:5d:82:81:0e:99:bc:94:99:31:c2:fe:73:b2:e5: fb:fd:c4:31:02:42:df:72:55:8d:61:4c:05:ab:6a: 34:78:91:24:18:3a:bd:39:47:f2:67:4c:e8:13:4d: 05:3f:07:4c:31:4d:61:63:d7:c3:23:89:81:3e:bf: 71:fa:15:72:68:46:52:25:1c:5a:b4:05:bd:25:15: 15:e7:33:80:16:3a:ad:40:ae:fe:7a:61:c7:15:11: a8:e7:f2:d8:d9:0a:f8:3c:87:a2:41:5b:29:d1:0d: ad:8f:cb:98:a8:6e:8e:73:07:9e:ee:a5:2d:44:00: 02:ed:79:61:fa:99:d8:49:fd:81:3f:23:89:91:de: d9:69:86:19:81:6d:77:52:5b:f5:72:11:8d:04:3e: 5c:2d:c4:4f:1c:78:ef:81:4e:be:49:8c:b8:8a:49: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:4C:C8:B7:7A:5C:F9:8D:54:D0:CA:45:40:E7:AE:A4:B8:18:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/023c2728-c60b-35c6-bebd-293d9fa56f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f0:69:30:01:a8:ba:8b:c2:b1:d2:f1:ae:fc:aa:19:27:a9: 5d:d8:a4:49:9f:95:e7:93:29:ca:13:0b:68:0c:17:a3:30:5b: e0:29:f2:48:bf:c0:79:1a:12:f1:25:51:03:12:97:b4:57:7f: e8:7e:38:9a:f8:16:00:b4:81:0d:90:83:d5:ee:9d:f4:f6:da: 61:94:24:ef:6c:02:43:a0:3d:c8:f3:d9:f9:61:ae:0b:cf:c8: 39:5d:55:e5:9c:f2:e7:21:f2:b6:f6:a3:25:f7:ca:77:8b:18: 22:1b:3e:08:d2:e1:8a:f1:5c:ef:2b:27:3f:55:6a:f4:68:b4: fe:5e:9c:99:63:3f:b6:52:9e:5f:ad:d4:90:2d:37:71:1b:3e: 99:95:33:a7:33:d8:07:20:33:ee:c5:3a:d0:0b:0d:71:33:19: 84:fc:dc:64:f2:32:b1:1f:17:ae:2c:ce:da:fe:1e:84:42:45: 3a:06:d8:9c:ca:8b:69:8c:38:9b:28:cf:c1:8c:f3:b3:e9:18: 44:6e:1a:d2:c8:4f:7b:2f:ca:2b:2c:af:c1:c3:06:da:7e:45: 06:1d:6f:68:9c:05:fc:fa:26:26:c0:68:f1:7e:0d:1a:de:1b: c2:11:e1:b6:09:68:c2:63:49:4d:a1:47:59:a5:2d:61:c7:14: a1:48:ac:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmpm01e+qjGijQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTliN2EyYjgtMTVkNS00M2RmLThiMTMtNzJjYjM1MGU5YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPGqzfGI67Zkobitmn/DwBNjq9y4stOpy8bQ aD3vsCn5bkYz5DiS7ppWh5sjkCk2gRWw10icDoYGGfaEsupMUJ4m8EeRqpEmgAF2 t9eFFTP8UaJVgldj32LVXYKBDpm8lJkxwv5zsuX7/cQxAkLfclWNYUwFq2o0eJEk GDq9OUfyZ0zoE00FPwdMMU1hY9fDI4mBPr9x+hVyaEZSJRxatAW9JRUV5zOAFjqt QK7+emHHFRGo5/LY2Qr4PIeiQVsp0Q2tj8uYqG6Ocwee7qUtRAAC7Xlh+pnYSf2B PyOJkd7ZaYYZgW13Ulv1chGNBD5cLcRPHHjvgU6+SYy4ikm5VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiaTMi3elz5jVTQykVA566kuBiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDIzYzI3MjgtYzYwYi0z NWM2LWJlYmQtMjkzZDlmYTU2ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXwaTABqLqLwrHS8a78qhknqV3YpEmfleeTKcoTC2gMF6MwW+Ap8ki/ wHkaEvElUQMSl7RXf+h+OJr4FgC0gQ2Qg9XunfT22mGUJO9sAkOgPcjz2flhrgvP yDldVeWc8uch8rb2oyX3yneLGCIbPgjS4YrxXO8rJz9VavRotP5enJljP7ZSnl+t 1JAtN3EbPpmVM6cz2AcgM+7FOtALDXEzGYT83GTyMrEfF64sztr+HoRCRToG2JzK i2mMOJsoz8GM87PpGERuGtLIT3svyissr8HDBtp+RQYdb2icBfz6JibAaPF+DRre G8IR4bYJaMJjSU2hR1mlLWHHFKFIrAc= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:31 2025 by rpki-client