$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa File: 036fb866-bf27-3892-8963-f6aa87a9f2a3.roa (raw, json) Hash identifier: mcTI49iIEHhML0bGU2vrlgEacHY1cH3mMC9Er5DOX14= Subject key identifier: D3:52:D8:D0:5D:37:56:82:68:2E:19:B8:43:D4:FE:FA:F1:0F:26:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD0346C40AF05C074BFB00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:03:46:c4:0a:f0:5c:07:4b:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d454806f-18f2-487a-b8fe-b1cfd4ce2c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:54:4c:16:41:ea:ba:fb:31:f1:95:64:92: 18:96:5c:63:2d:1a:af:21:27:bd:7c:1c:fc:7f:12: 27:d9:0b:36:79:e9:92:50:ea:cb:df:24:9a:f7:0c: 80:ca:c1:5f:23:93:b0:38:2d:26:3d:3d:d3:ce:6f: 82:4b:85:cf:4d:1c:e5:26:84:ac:11:67:2c:61:bc: 58:df:76:ed:bd:49:8f:85:64:b9:4e:e2:55:ba:07: 09:88:a6:aa:e1:fc:fa:80:1e:95:9c:1c:dd:2f:8e: 46:93:56:6e:a3:db:4e:75:c6:f6:49:0a:c8:af:4e: e6:b8:28:8c:d0:51:89:22:ec:a0:10:2f:ca:6c:96: 4c:d1:f5:f2:82:bf:40:e1:d5:cd:b1:84:d1:64:a7: 74:52:c7:2e:b5:79:8f:93:22:ba:ff:ea:48:b7:a4: 03:d7:b7:e6:4f:f7:ed:7e:09:45:3a:f9:50:eb:8d: c3:f9:d2:19:32:c4:fc:80:b3:ec:f2:7f:47:ba:2a: d2:c2:db:0d:ec:4d:a1:24:0d:23:ed:73:62:87:d2: 75:0f:95:a3:4c:1c:3a:5a:4d:7d:60:67:4c:74:5a: c7:ee:ef:fc:98:8b:77:99:3e:7a:00:6b:7b:00:b5: 9a:2c:ea:0f:ee:6e:7e:63:b6:a7:50:5f:57:6d:46: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:D8:D0:5D:37:56:82:68:2E:19:B8:43:D4:FE:FA:F1:0F:26:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/036fb866-bf27-3892-8963-f6aa87a9f2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:3e:70:cf:ad:c6:4d:85:33:57:36:4e:a2:7d:1f:d8:58:1c: 75:16:8f:5d:dd:36:7a:77:41:0e:f3:96:bd:d6:9f:1e:9d:49: 8b:aa:df:04:85:a8:aa:2c:c6:c1:e7:3e:1e:a4:5a:dd:0d:a8: d1:03:bf:40:2e:34:31:b3:af:e6:98:00:f9:e6:77:92:7e:8a: 7d:6e:f8:97:90:7e:91:4d:cd:f5:1e:95:2f:f6:80:53:74:8d: 94:9e:d0:3d:e2:1e:5b:70:a0:e6:cf:b3:53:ed:a0:1d:15:50: e6:4c:c4:b3:39:5a:d2:12:86:06:de:5e:b3:b1:5d:84:9a:2d: ea:69:b7:1b:45:0f:67:6c:2b:6a:89:87:d1:d0:e6:cd:e6:5e: d5:29:95:fe:48:c3:72:01:a0:78:3e:59:43:2b:b0:d7:6c:f6: 2a:d2:77:90:fd:f8:38:b9:58:33:37:9c:cc:c0:f3:79:c0:26: 13:38:5c:5e:4c:a8:49:79:7d:67:3a:f1:cc:15:73:19:2c:61: e4:ed:04:23:5b:d1:f5:ce:24:d6:be:bb:04:54:9f:3f:fa:cf: 9f:e3:60:65:64:79:01:59:73:71:0a:ec:05:be:38:96:e5:57: 71:a7:8a:28:88:fe:4c:4a:cd:f3:36:4c:58:73:06:3c:62:4a: fa:ee:96:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQNGxArwXAdL+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ1NDgwNmYtMThmMi00ODdhLWI4ZmUtYjFjZmQ0Y2UyYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/VUTBZB6rr7MfGVZJIYllxjLRqvISe9fBz8 fxIn2Qs2eemSUOrL3ySa9wyAysFfI5OwOC0mPT3Tzm+CS4XPTRzlJoSsEWcsYbxY 33btvUmPhWS5TuJVugcJiKaq4fz6gB6VnBzdL45Gk1Zuo9tOdcb2SQrIr07muCiM 0FGJIuygEC/KbJZM0fXygr9A4dXNsYTRZKd0UscutXmPkyK6/+pIt6QD17fmT/ft fglFOvlQ643D+dIZMsT8gLPs8n9HuirSwtsN7E2hJA0j7XNih9J1D5WjTBw6Wk19 YGdMdFrH7u/8mIt3mT56AGt7ALWaLOoP7m5+Y7anUF9XbUZUJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNS2NBdN1aCaC4ZuEPU/vrxDyY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDM2ZmI4NjYtYmYyNy0z ODkyLTg5NjMtZjZhYTg3YTlmMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKY+cM+txk2FM1c2TqJ9H9hYHHUWj13dNnp3QQ7zlr3Wnx6dSYuq3wSF qKosxsHnPh6kWt0NqNEDv0AuNDGzr+aYAPnmd5J+in1u+JeQfpFNzfUelS/2gFN0 jZSe0D3iHltwoObPs1PtoB0VUOZMxLM5WtIShgbeXrOxXYSaLepptxtFD2dsK2qJ h9HQ5s3mXtUplf5Iw3IBoHg+WUMrsNds9irSd5D9+Di5WDM3nMzA83nAJhM4XF5M qEl5fWc68cwVcxksYeTtBCNb0fXOJNa+uwRUnz/6z5/jYGVkeQFZc3EK7AW+OJbl V3GniiiI/kxKzfM2TFhzBjxiSvrulqQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:04 2025 by rpki-client