$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa File: 09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa (raw, json) Hash identifier: nTikaX2DXgli/DLYEAeaOrkg/D+qh8rkbw0qUQXy668= Subject key identifier: 68:C7:39:FB:32:D3:26:B6:57:26:FE:B3:F4:A5:6B:27:B9:81:E4:7D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926C1F8C2C3DE465244D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6c:1f:8c:2c:3d:e4:65:24:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3f9a2741-cbfa-4bc2-8ac1-56effd47df12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f9:be:4c:fe:96:fa:ec:63:de:8f:29:0e:25: 2f:9c:1b:36:cc:c7:49:72:3a:6e:25:d9:48:9a:82: 72:8a:ca:2d:5b:33:30:de:43:2b:23:ec:c5:92:46: 6a:39:5e:64:6b:42:37:0e:fd:ec:85:a6:70:64:43: 52:2a:6c:c5:e4:77:1a:7f:31:5f:22:d1:86:26:2b: e9:bd:38:ae:3c:02:11:3a:b7:7f:52:38:07:e5:a4: 21:81:3c:5c:d5:1f:5e:54:cf:21:ac:47:8e:f0:b8: 43:5d:7d:ae:08:96:a4:d5:a4:df:43:e4:f2:5b:6d: 8c:b4:6e:b6:57:7f:28:b5:a0:27:76:02:d4:bb:a8: 1e:3c:1a:87:6a:bf:59:40:57:6b:37:07:9a:91:b8: 9a:99:73:64:3b:d9:f0:b0:86:be:72:84:56:64:85: b2:45:6c:4d:fc:62:b2:b0:40:f0:93:a8:96:25:0f: 81:47:c6:d0:79:a0:55:df:f7:0d:3b:17:c6:63:83: 98:70:5d:24:95:c9:22:83:0f:7c:19:17:5d:b5:41: cf:b7:23:39:0c:44:6e:fe:be:16:39:cf:01:89:bd: be:d6:6f:4d:5e:3d:32:39:7b:68:9c:6b:5b:dc:af: 5e:b8:ba:af:26:c5:02:3c:02:59:87:b5:de:71:46: a1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C7:39:FB:32:D3:26:B6:57:26:FE:B3:F4:A5:6B:27:B9:81:E4:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09b40ee3-ef3f-33a0-87a1-010a6b9d12a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:71:b4:9d:5b:19:a7:78:6e:71:bb:1d:50:88:bb:0d:63:45: fa:7d:4c:2b:45:a1:84:14:fa:e5:31:58:7e:36:03:15:90:f5: b5:25:3a:58:36:b5:af:08:b7:f9:c8:ee:9c:02:e7:cb:fe:d0: 09:0a:5d:1e:bf:bd:50:6f:48:fc:49:ce:a0:c6:53:58:c1:62: fa:74:47:20:9c:9c:88:1c:99:42:7d:da:89:f4:9b:a4:46:fb: 0a:d2:1a:bd:05:4f:6c:dc:35:c2:12:25:ec:b2:6e:9e:0f:ce: 7d:65:8e:5e:b5:87:a2:e7:78:75:66:96:7e:9e:e4:90:9e:db: cd:90:8e:45:11:45:43:90:f4:29:ca:af:8c:6b:9e:e8:30:c3: 66:f5:d7:3a:c0:85:4e:a7:2c:14:33:1f:df:4f:84:a2:14:61: 22:a2:41:4c:2a:b2:d9:93:0c:3f:84:16:a2:18:8a:d0:34:7f: 56:1d:63:cc:77:78:78:39:9a:c9:e2:e2:4c:c7:20:ab:bd:b9: 17:a3:59:79:7a:d8:23:ce:d6:18:5b:0d:b6:0f:3e:6e:a5:7f: d4:d5:08:1d:6f:b4:17:88:b7:56:b4:b0:f0:e0:83:94:9a:15: 0d:0d:5c:bb:82:74:4e:e2:a4:74:4d:b5:22:a0:80:a6:cd:9f: 7f:39:d7:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmwfjCw95GUkTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk M2Y5YTI3NDEtY2JmYS00YmMyLThhYzEtNTZlZmZkNDdkZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Pm+TP6W+uxj3o8pDiUvnBs2zMdJcjpuJdlI moJyisotWzMw3kMrI+zFkkZqOV5ka0I3Dv3shaZwZENSKmzF5HcafzFfItGGJivp vTiuPAIROrd/UjgH5aQhgTxc1R9eVM8hrEeO8LhDXX2uCJak1aTfQ+TyW22MtG62 V38otaAndgLUu6gePBqHar9ZQFdrNweakbiamXNkO9nwsIa+coRWZIWyRWxN/GKy sEDwk6iWJQ+BR8bQeaBV3/cNOxfGY4OYcF0klckigw98GRddtUHPtyM5DERu/r4W Oc8Bib2+1m9NXj0yOXtonGtb3K9euLqvJsUCPAJZh7XecUahywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjHOfsy0ya2Vyb+s/Slaye5geR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliNDBlZTMtZWYzZi0z M2EwLTg3YTEtMDEwYTZiOWQxMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChxtJ1bGad4bnG7HVCIuw1jRfp9TCtFoYQU+uUxWH42AxWQ9bUlOlg2 ta8It/nI7pwC58v+0AkKXR6/vVBvSPxJzqDGU1jBYvp0RyCcnIgcmUJ92on0m6RG +wrSGr0FT2zcNcISJeyybp4Pzn1ljl61h6LneHVmln6e5JCe282QjkURRUOQ9CnK r4xrnugww2b11zrAhU6nLBQzH99PhKIUYSKiQUwqstmTDD+EFqIYitA0f1YdY8x3 eHg5msni4kzHIKu9uRejWXl62CPO1hhbDbYPPm6lf9TVCB1vtBeIt1a0sPDgg5Sa FQ0NXLuCdE7ipHRNtSKggKbNn38519A= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:03 2025 by rpki-client