$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d5594a-4196-3bd4-9dd3-9809e5d43411.roa File: 16d5594a-4196-3bd4-9dd3-9809e5d43411.roa (raw, json) Hash identifier: v4C0N65bstUN3PtMtj7EKp1YLxcBxNyg4bYMwJTWQZs= Subject key identifier: CE:A2:96:AF:9E:8E:57:21:30:3F:3B:D1:A7:73:0D:02:C5:A6:6E:CB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19277EB94CFE7314BE91380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d5594a-4196-3bd4-9dd3-9809e5d43411.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:77:eb:94:cf:e7:31:4b:e9:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=89a810f2-b2fe-46cb-b3a2-d06aa7ce6d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:d9:ce:31:30:c3:3e:84:34:53:99:84:33: ab:51:65:f7:59:1b:c9:1a:31:cf:90:28:51:07:04: 78:a2:d4:86:c8:05:35:cc:74:10:65:4a:72:e1:f2: 9e:bb:36:3d:d0:64:9c:35:90:25:ea:29:c0:f9:dc: 58:e6:17:16:6e:c3:7e:8c:ba:3a:7d:e6:ff:26:b6: ec:eb:b3:dc:63:61:e6:20:ab:4f:81:1a:cf:ad:0f: 77:fc:e2:aa:52:30:1f:69:df:31:90:18:fe:39:90: ea:52:a6:94:68:bb:96:d9:99:2a:83:1d:24:37:1d: 25:cb:bb:b9:af:24:5a:89:16:84:12:8e:61:83:f4: 65:81:8e:2c:65:f8:05:11:72:ea:51:7c:14:ce:36: 6a:f6:1a:6f:f4:a5:56:df:1c:bb:b5:63:f1:01:45: c6:4c:6f:68:bb:63:9e:99:98:ce:b8:de:2b:b6:5a: ea:c9:cc:8b:92:57:49:95:1c:4e:14:06:76:0c:f9: 14:68:e8:3b:7b:d8:42:18:ff:b3:4f:bd:95:a1:ac: 09:c7:3b:de:5f:96:cb:59:e0:76:a7:24:e6:dc:8d: d3:f8:3b:7d:73:f7:35:fe:de:a3:cd:bd:4e:ef:72: c5:0c:ab:d8:bf:0f:7e:c9:fb:dc:72:48:3d:1e:6b: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A2:96:AF:9E:8E:57:21:30:3F:3B:D1:A7:73:0D:02:C5:A6:6E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/16d5594a-4196-3bd4-9dd3-9809e5d43411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9c:af:e3:ae:8f:74:61:7c:16:aa:ed:a6:67:5e:77:53:6f: 48:5f:fc:d2:42:30:5d:a0:fa:db:a0:17:66:e6:11:40:a7:37: 74:be:1a:1b:08:06:32:2d:69:ec:98:d5:eb:b0:68:48:98:36: 12:0f:dd:2a:38:c8:4a:a7:25:d4:30:b8:98:2a:4a:eb:e8:a7: c3:c2:94:05:6b:28:85:74:42:8d:9d:76:40:2f:1c:ec:ea:fd: 61:4d:55:75:d5:41:59:09:6e:6c:1a:aa:46:b3:e7:fc:d0:c0: d0:5d:95:92:42:14:f2:7d:95:2e:5f:a3:f4:d0:64:52:73:ba: d7:0b:f2:22:69:14:08:ae:11:f1:da:94:a3:29:e2:6c:3c:9e: 11:8d:8b:14:e5:96:03:d3:e0:71:62:a0:bd:93:13:da:8d:87: ee:a7:95:b7:96:f1:9a:dd:c0:a1:b2:88:fb:04:a7:cb:8b:97: d2:64:6b:aa:b7:b3:af:5b:15:18:b1:6c:97:29:c6:e4:ca:30: fc:1a:92:8e:d6:34:e1:60:b2:ba:49:86:89:59:2e:6a:dc:9e: aa:7e:7a:e4:d6:c0:cf:1f:0b:ad:03:3e:7d:80:cd:07:bd:2f: 7f:20:e5:c7:da:0e:fb:3f:0c:b5:8b:9e:c6:4d:ff:37:68:f6: 1c:43:aa:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknfrlM/nMUvpE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ODlhODEwZjItYjJmZS00NmNiLWIzYTItZDA2YWE3Y2U2ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXZzjEwwz6ENFOZhDOrUWX3WRvJGjHPkChR BwR4otSGyAU1zHQQZUpy4fKeuzY90GScNZAl6inA+dxY5hcWbsN+jLo6feb/Jrbs 67PcY2HmIKtPgRrPrQ93/OKqUjAfad8xkBj+OZDqUqaUaLuW2Zkqgx0kNx0ly7u5 ryRaiRaEEo5hg/RlgY4sZfgFEXLqUXwUzjZq9hpv9KVW3xy7tWPxAUXGTG9ou2Oe mZjOuN4rtlrqycyLkldJlRxOFAZ2DPkUaOg7e9hCGP+zT72VoawJxzveX5bLWeB2 pyTm3I3T+Dt9c/c1/t6jzb1O73LFDKvYvw9+yfvcckg9Hmv2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6ilq+ejlchMD870adzDQLFpm7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTZkNTU5NGEtNDE5Ni0z YmQ0LTlkZDMtOTgwOWU1ZDQzNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEayMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+cr+Ouj3RhfBaq7aZnXndTb0hf/NJCMF2g+tugF2bmEUCnN3S+GhsI BjItaeyY1euwaEiYNhIP3So4yEqnJdQwuJgqSuvop8PClAVrKIV0Qo2ddkAvHOzq /WFNVXXVQVkJbmwaqkaz5/zQwNBdlZJCFPJ9lS5fo/TQZFJzutcL8iJpFAiuEfHa lKMp4mw8nhGNixTllgPT4HFioL2TE9qNh+6nlbeW8ZrdwKGyiPsEp8uLl9Jka6q3 s69bFRixbJcpxuTKMPwako7WNOFgsrpJholZLmrcnqp+euTWwM8fC60DPn2AzQe9 L38g5cfaDvs/DLWLnsZN/zdo9hxDqgk= -----END CERTIFICATE-----Generated at Sun Nov 2 04:25:58 2025 by rpki-client