$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa File: 107d19f7-1ace-3d52-afa1-f47225a02ca7.roa (raw, json) Hash identifier: CmEcckM2BC939WrGO9DkykYRR3vqFCcHgt1y/bm6nUA= Subject key identifier: 88:7A:E0:C8:C4:C3:1F:5E:71:9E:FA:0C:31:EC:8B:07:CF:02:BD:ED Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19276F234C87B28583F9A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:f2:34:c8:7b:28:58:3f:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=d8ecd12b-c6fe-4f40-a40e-e1dcb4fd45d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:bf:5a:10:db:41:43:76:68:95:97:81:2d: 74:0f:62:5c:f6:1e:48:90:81:6b:c4:4c:d4:a4:a6: 11:fc:27:7c:5a:21:b6:b2:e0:ea:de:de:e0:44:84: fb:99:62:af:55:64:cd:c6:9a:05:b0:5b:7b:73:a7: a9:09:53:a6:14:7b:72:65:13:9e:83:ea:e3:4a:b1: 4b:bc:54:d5:4b:01:ac:84:40:ea:db:18:1b:2c:34: 8f:ab:73:00:b1:a6:d8:1a:d9:53:67:37:85:b3:40: 9c:06:26:d5:38:f1:ff:71:b2:b0:fe:4c:0b:32:df: 5d:10:6c:99:f8:77:67:ff:e4:a4:2f:75:08:62:bd: 72:3d:29:8b:c8:d3:92:59:6d:5f:a8:5c:22:35:a2: 76:b3:ea:9e:77:c6:6c:73:3a:f8:f1:17:76:d7:88: 27:46:c3:d0:02:e3:5f:8c:9c:26:17:b0:d0:c4:a8: 18:12:73:f6:45:78:94:88:ae:0a:d8:fa:68:9b:51: cc:06:4a:ae:86:55:25:a2:f0:9a:7b:a9:87:e9:50: c4:d6:e1:bc:95:e2:bd:4a:b9:80:ac:3e:fd:3d:25: c2:2e:f7:ec:77:83:dc:29:11:33:a6:1c:9e:af:b6: 4a:7b:43:4b:fc:25:92:cc:89:6c:e3:cd:23:a0:b5: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7A:E0:C8:C4:C3:1F:5E:71:9E:FA:0C:31:EC:8B:07:CF:02:BD:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/107d19f7-1ace-3d52-afa1-f47225a02ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1e:de:9d:ce:7e:01:c5:70:f7:0b:73:b8:56:48:88:c3:7c: 21:41:f8:70:a8:73:6e:bf:5d:d2:8e:81:05:0e:05:81:04:f2: ab:6e:6e:e0:66:26:ab:25:06:06:de:db:c9:1d:1f:5a:78:fa: 30:0c:6e:04:23:4c:50:a3:2c:7e:74:a8:d2:8e:25:0a:cb:1e: 8c:57:18:05:c9:80:93:c4:59:a3:7c:38:02:1f:78:21:ba:81: d3:94:18:48:5f:7e:d3:39:3f:dc:e9:f4:42:f4:1c:4b:88:ca: 62:60:a2:1a:71:fa:78:22:ac:2d:36:b7:26:0e:76:c0:05:12: 1e:28:c3:ac:ee:94:ab:a4:3f:c2:38:ad:3f:3f:ef:90:6d:f2: 2a:05:4c:45:33:96:2f:f9:76:68:9b:40:36:77:c2:d5:6c:7c: c2:a2:ec:f8:af:a5:85:71:4f:a5:a7:9d:53:93:7e:ab:67:bf: 6c:ab:e0:04:ee:2e:3b:6d:76:3e:a0:bd:04:0f:14:7a:40:e7: 14:75:a9:83:5d:a0:e8:35:67:61:db:06:5f:5e:e3:fd:0c:e9: 98:ec:82:b0:46:7b:76:92:95:6c:3b:0a:11:f5:37:39:1e:34: a3:c1:9d:5f:0f:51:66:2c:86:11:7e:42:e9:37:90:cd:4c:91: ed:52:03:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknbyNMh7KFg/moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZDhlY2QxMmItYzZmZS00ZjQwLWE0MGUtZTFkY2I0ZmQ0NWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8q/WhDbQUN2aJWXgS10D2Jc9h5IkIFrxEzU pKYR/Cd8WiG2suDq3t7gRIT7mWKvVWTNxpoFsFt7c6epCVOmFHtyZROeg+rjSrFL vFTVSwGshEDq2xgbLDSPq3MAsabYGtlTZzeFs0CcBibVOPH/cbKw/kwLMt9dEGyZ +Hdn/+SkL3UIYr1yPSmLyNOSWW1fqFwiNaJ2s+qed8Zsczr48Rd214gnRsPQAuNf jJwmF7DQxKgYEnP2RXiUiK4K2Ppom1HMBkquhlUlovCae6mH6VDE1uG8leK9SrmA rD79PSXCLvfsd4PcKREzphyer7ZKe0NL/CWSzIls480joLUSmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIh64MjEwx9ecZ76DDHsiwfPAr3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTA3ZDE5ZjctMWFjZS0z ZDUyLWFmYTEtZjQ3MjI1YTAyY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0e3p3OfgHFcPcLc7hWSIjDfCFB+HCoc26/XdKOgQUOBYEE8qtubuBm JqslBgbe28kdH1p4+jAMbgQjTFCjLH50qNKOJQrLHoxXGAXJgJPEWaN8OAIfeCG6 gdOUGEhfftM5P9zp9EL0HEuIymJgohpx+ngirC02tyYOdsAFEh4ow6zulKukP8I4 rT8/75Bt8ioFTEUzli/5dmibQDZ3wtVsfMKi7PivpYVxT6WnnVOTfqtnv2yr4ATu Ljttdj6gvQQPFHpA5xR1qYNdoOg1Z2HbBl9e4/0M6ZjsgrBGe3aSlWw7ChH1Nzke NKPBnV8PUWYshhF+Quk3kM1Mke1SA58= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:48 2025 by rpki-client