$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1599939e-ef9b-37ce-a036-39eeb4f49d58.roa File: 1599939e-ef9b-37ce-a036-39eeb4f49d58.roa (raw, json) Hash identifier: +r4oqAjDjniV+nXh5F/w3APEOE/aQK9PLFzj0TgCJYY= Subject key identifier: BB:DB:2D:73:86:49:EF:4D:77:55:4D:5D:12:49:FF:89:B9:AB:42:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0A17625B785FDDFA6E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1599939e-ef9b-37ce-a036-39eeb4f49d58.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0a:17:62:5b:78:5f:dd:fa:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=f8c7270a-82ca-409e-833f-0653206e0f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:35:25:f1:6f:d7:8f:53:de:78:5c:41:65:35: 10:02:a2:88:3d:31:b3:8a:ca:1a:65:fc:48:30:5f: f9:6b:42:53:a8:77:3e:48:7b:c0:61:89:d9:94:70: 50:1e:cc:28:7c:cf:e8:6b:55:fa:5d:11:eb:c7:30: a4:17:0f:6a:ac:3d:83:9b:46:58:8a:94:b7:7c:d3: bf:67:62:b8:d7:08:3f:9c:df:ea:5a:7e:7c:5e:f3: f3:b4:10:30:ca:d5:b9:a0:5e:02:f1:e4:52:84:80: b1:94:69:b3:2b:da:dc:70:67:cc:16:21:28:6a:b1: 0f:33:a6:60:2e:81:3d:b6:04:b9:90:a0:a4:67:4f: 9e:bd:68:e7:61:e8:71:1c:db:b4:90:5b:db:57:bf: 63:3a:c3:7c:55:19:87:1e:e8:e2:df:4e:e7:51:23: 7a:53:b4:9b:24:03:0a:d8:2d:2e:85:51:4b:32:62: c6:91:2e:69:5d:21:37:93:73:63:d8:3e:af:29:d3: 97:8a:06:95:3a:75:a3:f9:3f:f9:c8:72:6e:97:82: 61:9a:58:ea:b8:75:04:58:f2:d9:e1:c9:89:38:16: 91:a8:a2:ef:5a:c6:fb:d7:d3:74:d9:bc:cd:7e:a0: 72:78:1e:bd:e6:77:4a:89:08:e5:0e:96:0d:a7:16: ee:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DB:2D:73:86:49:EF:4D:77:55:4D:5D:12:49:FF:89:B9:AB:42:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1599939e-ef9b-37ce-a036-39eeb4f49d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:33:dd:80:c5:a7:6f:a1:c9:26:16:40:7e:29:dc:7f:9a:d3: 14:9d:85:38:03:8c:e3:ad:a1:69:d5:0c:fb:ce:ee:5c:e2:fb: b9:4b:24:28:46:eb:54:27:b0:7a:44:1f:f9:6a:da:37:f3:08: 55:56:8d:24:c2:44:33:63:1b:30:bf:72:a2:37:e2:2d:ed:ae: c3:b6:64:00:57:24:4b:37:78:ac:80:6e:86:06:fb:6a:3e:c3: 6a:20:e8:c0:9a:35:cf:23:87:bb:40:0b:bc:d9:a8:25:6f:19: d8:fc:9b:08:13:52:bb:9b:35:75:e8:09:ba:53:e9:9e:67:57: ae:0e:35:09:0b:d3:64:b2:11:da:35:48:a4:a8:06:d0:9d:5b: 25:dc:5c:a4:88:d5:53:fc:93:f8:9d:23:fe:cd:27:1e:03:d7: 85:32:75:e9:93:ef:02:15:77:ba:ac:86:a3:1f:91:c2:e3:a3: c6:31:21:cc:09:5a:28:83:75:b8:3b:1f:38:a0:58:fe:be:d9: 2f:11:80:d1:3a:77:79:2f:92:7c:9d:21:1a:54:57:e9:f4:04: 4c:b5:e8:ba:80:42:12:ac:a1:25:ce:05:78:6c:cc:34:32:ae: 85:3f:86:41:5d:47:4a:b7:c2:f0:8b:f3:bd:04:ed:0b:6d:a1: 11:ab:be:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQoXYlt4X936bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZjhjNzI3MGEtODJjYS00MDllLTgzM2YtMDY1MzIwNmUwZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjUl8W/Xj1PeeFxBZTUQAqKIPTGzisoaZfxI MF/5a0JTqHc+SHvAYYnZlHBQHswofM/oa1X6XRHrxzCkFw9qrD2Dm0ZYipS3fNO/ Z2K41wg/nN/qWn58XvPztBAwytW5oF4C8eRShICxlGmzK9rccGfMFiEoarEPM6Zg LoE9tgS5kKCkZ0+evWjnYehxHNu0kFvbV79jOsN8VRmHHuji307nUSN6U7SbJAMK 2C0uhVFLMmLGkS5pXSE3k3Nj2D6vKdOXigaVOnWj+T/5yHJul4JhmljquHUEWPLZ 4cmJOBaRqKLvWsb719N02bzNfqByeB695ndKiQjlDpYNpxbuEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvbLXOGSe9Nd1VNXRJJ/4m5q0IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTU5OTkzOWUtZWY5Yi0z N2NlLWEwMzYtMzllZWI0ZjQ5ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgz3YDFp2+hySYWQH4p3H+a0xSdhTgDjOOtoWnVDPvO7lzi+7lLJChG 61QnsHpEH/lq2jfzCFVWjSTCRDNjGzC/cqI34i3trsO2ZABXJEs3eKyAboYG+2o+ w2og6MCaNc8jh7tAC7zZqCVvGdj8mwgTUrubNXXoCbpT6Z5nV64ONQkL02SyEdo1 SKSoBtCdWyXcXKSI1VP8k/idI/7NJx4D14UydemT7wIVd7qshqMfkcLjo8YxIcwJ WiiDdbg7HzigWP6+2S8RgNE6d3kvknydIRpUV+n0BEy16LqAQhKsoSXOBXhszDQy roU/hkFdR0q3wvCL870E7QttoRGrvto= -----END CERTIFICATE-----Generated at Sat Nov 1 12:35:03 2025 by rpki-client