$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa File: 0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa (raw, json) Hash identifier: +ZkyiYhqrSolbCrzznbxrhK5BJW7Wa62LUhegApGTSA= Subject key identifier: 21:37:F1:BF:D3:2E:FD:1C:7B:2A:BD:5E:F2:55:71:67:B8:5A:C9:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D106BB0BF15036FD32358 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:10:6b:b0:bf:15:03:6f:d3:23:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=a88d6825-c4e1-46a2-9d80-9fbdb24d32de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:a7:9a:09:0d:8f:22:c9:1a:35:78:4a:5c: 61:cb:30:c8:6d:a0:f0:02:9c:cc:bc:f5:42:ac:c3: 96:57:0e:da:ac:48:5c:60:9a:f1:66:7d:d8:31:36: b3:2b:e0:07:24:c9:be:8a:9a:e6:7a:9e:3c:16:d6: 4b:a9:07:26:08:3f:0e:4e:4f:bd:a8:16:54:01:50: 07:a0:a8:da:39:2e:46:23:64:d6:cb:7a:d9:9c:5d: ec:0c:c8:8b:e0:2c:93:41:ef:d9:a8:32:60:bf:31: c3:70:79:cb:13:a8:e1:84:57:89:83:e3:a3:18:76: 2b:10:bd:08:4d:9d:57:86:b4:0a:d4:67:70:38:76: 59:ce:43:4b:0d:a7:e3:85:87:ad:f7:39:e6:2d:a9: d0:e3:c1:d3:ea:ca:27:ce:09:1c:30:fd:17:da:46: e5:61:f4:57:e9:53:93:41:ee:cb:27:a4:68:c0:a0: 70:d2:0c:e1:30:cd:53:65:ce:26:77:b2:d3:9c:00: 54:79:f2:24:01:88:18:03:dc:7b:30:d6:ce:77:eb: 63:b0:33:d9:c8:3c:78:7c:61:fe:cf:9b:62:dc:1a: 06:af:bf:dc:df:7e:f0:7f:c9:cd:3a:27:34:47:bc: e2:63:48:a0:f3:c4:f1:38:fc:9e:d1:10:14:52:8a: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:F1:BF:D3:2E:FD:1C:7B:2A:BD:5E:F2:55:71:67:B8:5A:C9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e69942c-5e68-39b2-84a7-ddaab90d22eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:15:6e:de:d9:ba:1a:d7:46:ef:d5:3f:62:9d:4b:ca:47:2f: cf:42:d1:bd:9d:ee:53:c5:91:3e:79:ca:71:71:cc:16:d8:98: 74:02:ff:ac:2d:f6:58:4b:a2:26:34:18:d6:3d:85:ff:6b:35: c3:7d:60:9d:d7:e3:6b:79:d4:6d:46:5e:f5:b1:c6:82:d1:5c: 87:bc:d9:bf:ca:de:52:e1:4a:2c:e3:a2:6a:19:e1:94:8a:49: d2:cb:7d:73:b3:1c:c3:8d:3d:d3:1a:52:1a:6f:9e:75:bc:8c: e8:31:e1:d5:32:59:47:ea:6e:ec:a4:29:8c:45:58:fe:7b:6d: 95:26:f1:c9:a5:9c:7a:d8:29:05:c4:d9:5c:e0:02:2b:e5:f7: 17:2c:6f:c2:90:0e:26:72:85:69:de:0b:1f:bd:fb:60:a0:9b: f9:0a:f5:84:30:05:fd:ed:e9:0b:68:9e:e6:ab:f1:b9:7f:ad: 29:8b:33:04:69:8f:3a:d1:38:de:1f:cc:de:9c:a9:97:1a:51: 1e:1b:cf:85:1e:9d:16:3e:fc:88:37:a9:b6:33:17:6d:88:08: 36:fa:bc:58:87:45:c9:18:44:50:97:e3:16:d0:33:03:73:27: 39:98:a2:a7:ce:fa:3d:31:5a:54:4b:62:f1:8f:b0:32:d2:d2: 2c:b4:b5:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRBrsL8VA2/TI1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YTg4ZDY4MjUtYzRlMS00NmEyLTlkODAtOWZiZGIyNGQzMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8+nmgkNjyLJGjV4SlxhyzDIbaDwApzMvPVC rMOWVw7arEhcYJrxZn3YMTazK+AHJMm+iprmep48FtZLqQcmCD8OTk+9qBZUAVAH oKjaOS5GI2TWy3rZnF3sDMiL4CyTQe/ZqDJgvzHDcHnLE6jhhFeJg+OjGHYrEL0I TZ1XhrQK1GdwOHZZzkNLDafjhYet9znmLanQ48HT6sonzgkcMP0X2kblYfRX6VOT Qe7LJ6RowKBw0gzhMM1TZc4md7LTnABUefIkAYgYA9x7MNbOd+tjsDPZyDx4fGH+ z5ti3BoGr7/c337wf8nNOic0R7ziY0ig88TxOPye0RAUUooE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE38b/TLv0ceyq9XvJVcWe4WskdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGU2OTk0MmMtNWU2OC0z OWIyLTg0YTctZGRhYWI5MGQyMmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMVbt7ZuhrXRu/VP2KdS8pHL89C0b2d7lPFkT55ynFxzBbYmHQC/6wt 9lhLoiY0GNY9hf9rNcN9YJ3X42t51G1GXvWxxoLRXIe82b/K3lLhSizjomoZ4ZSK SdLLfXOzHMONPdMaUhpvnnW8jOgx4dUyWUfqbuykKYxFWP57bZUm8cmlnHrYKQXE 2VzgAivl9xcsb8KQDiZyhWneCx+9+2Cgm/kK9YQwBf3t6Qtonuar8bl/rSmLMwRp jzrRON4fzN6cqZcaUR4bz4UenRY+/Ig3qbYzF22ICDb6vFiHRckYRFCX4xbQMwNz JzmYoqfO+j0xWlRLYvGPsDLS0iy0tbg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:40 2025 by rpki-client