$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa File: 14b4a81f-12ce-3099-a30b-95511b33ef42.roa (raw, json) Hash identifier: uYa5iUPMrc7PgfRStxLCoShRVVbxYczl0nGQFmLY0hY= Subject key identifier: 3C:F2:22:36:4A:8B:FB:7A:3C:42:75:5A:1B:C1:ED:6F:F4:88:14:B1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19276E0D7D07D18C9A901C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:76:e0:d7:d0:7d:18:c9:a9:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=8a50c262-0b78-4708-8631-dbca57ab1dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ae:e3:08:7e:b5:01:4a:0d:c3:d4:aa:3f:7b: 70:51:98:b1:1f:bc:8d:18:9c:0a:22:97:e6:67:aa: 3e:be:ab:5e:a0:72:38:da:dd:77:44:8d:3a:74:30: 19:c7:3c:ae:3e:24:eb:40:3c:40:83:12:bc:5b:e1: 91:a3:cf:fd:93:68:a4:00:a4:ad:16:82:7c:8b:04: 37:c0:9e:1c:7d:9e:5a:f6:af:5b:dd:a9:74:db:9f: 3c:2c:db:7d:06:69:c2:dc:76:6b:65:85:a1:78:e7: 03:a1:ec:3c:44:55:87:f7:0d:55:9b:61:6a:c1:24: ab:6f:56:56:15:dc:6a:59:56:0e:2c:52:06:f9:dd: 99:05:11:bf:7a:c5:f1:bf:29:31:fb:d5:8f:0b:16: 43:ad:c3:cb:96:7f:45:0e:6e:75:99:79:33:8a:db: 67:b1:02:b6:10:f9:12:36:88:15:63:41:47:3c:76: b1:33:e7:50:c9:f4:89:ab:69:45:74:8e:dd:60:60: 82:78:10:79:6b:f7:05:d2:8e:85:ae:e8:7c:54:b3: 58:87:de:60:db:7f:1e:b1:cb:7d:2a:63:56:23:14: 3a:75:e5:66:34:1a:49:de:70:50:45:12:1e:a8:a9: 79:47:e0:d0:78:dc:c1:c2:ef:62:73:40:16:95:8b: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F2:22:36:4A:8B:FB:7A:3C:42:75:5A:1B:C1:ED:6F:F4:88:14:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/14b4a81f-12ce-3099-a30b-95511b33ef42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ae:60:57:35:e2:74:45:50:38:55:d7:f7:69:64:56:36:38: 3b:ed:97:dd:4a:b2:02:19:e0:85:da:2f:be:39:e3:5f:6f:20: 47:ad:64:85:46:98:8d:5e:07:ca:cd:53:ef:29:96:03:3f:73: b0:be:55:d5:cc:88:0b:fe:4e:2d:d6:a4:60:ed:44:20:9c:bc: 24:7c:6b:de:de:4c:33:be:04:67:4f:5f:d4:1e:0a:f4:26:3e: fc:70:1b:29:bd:e5:2e:26:ea:6f:39:c8:1a:99:b7:0b:75:3b: 7d:7a:fe:16:f0:6c:54:02:f9:29:ac:6e:56:4d:c2:95:86:33: dd:08:a1:e0:43:de:8d:5f:f4:ab:ef:c8:19:4c:75:e9:a0:1c: 48:49:dd:03:00:ac:72:7f:cb:30:62:6c:e2:ab:ab:d2:40:f8: 88:49:48:89:8e:71:ea:b2:b0:36:52:6e:82:dc:4f:d9:63:e4: 8c:77:fc:e4:29:1e:c7:36:40:58:09:03:f5:bd:ce:49:5d:73: f8:58:23:37:58:36:d3:ef:41:76:8d:f5:1b:bb:0d:cc:b5:16: c1:c1:4f:5c:79:95:d8:cf:15:bd:cb:04:e2:9a:6f:83:41:9b: a6:4e:7a:d3:6d:d0:6e:db:5e:db:70:18:fc:86:48:b4:93:8f: 74:aa:2c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknbg19B9GMmpAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OGE1MGMyNjItMGI3OC00NzA4LTg2MzEtZGJjYTU3YWIxZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj67jCH61AUoNw9SqP3twUZixH7yNGJwKIpfm Z6o+vqteoHI42t13RI06dDAZxzyuPiTrQDxAgxK8W+GRo8/9k2ikAKStFoJ8iwQ3 wJ4cfZ5a9q9b3al02588LNt9BmnC3HZrZYWheOcDoew8RFWH9w1Vm2FqwSSrb1ZW FdxqWVYOLFIG+d2ZBRG/esXxvykx+9WPCxZDrcPLln9FDm51mXkzittnsQK2EPkS NogVY0FHPHaxM+dQyfSJq2lFdI7dYGCCeBB5a/cF0o6Fruh8VLNYh95g238esct9 KmNWIxQ6deVmNBpJ3nBQRRIeqKl5R+DQeNzBwu9ic0AWlYsDYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzyIjZKi/t6PEJ1WhvB7W/0iBSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTRiNGE4MWYtMTJjZS0z MDk5LWEzMGItOTU1MTFiMzNlZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWuYFc14nRFUDhV1/dpZFY2ODvtl91KsgIZ4IXaL745419vIEetZIVG mI1eB8rNU+8plgM/c7C+VdXMiAv+Ti3WpGDtRCCcvCR8a97eTDO+BGdPX9QeCvQm PvxwGym95S4m6m85yBqZtwt1O316/hbwbFQC+SmsblZNwpWGM90IoeBD3o1f9Kvv yBlMdemgHEhJ3QMArHJ/yzBibOKrq9JA+IhJSImOceqysDZSboLcT9lj5Ix3/OQp Hsc2QFgJA/W9zkldc/hYIzdYNtPvQXaN9Ru7Dcy1FsHBT1x5ldjPFb3LBOKab4NB m6ZOetNt0G7bXttwGPyGSLSTj3SqLFo= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:10 2025 by rpki-client