$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa File: 17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa (raw, json) Hash identifier: gNGHABQiz7BuQ6a8c/rzJoIfxXjdkQ8uK07284dGIJk= Subject key identifier: C2:A6:34:C8:D0:5D:4F:2F:82:1A:E4:93:EC:FC:24:A6:73:A1:64:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0FE65A985E13A1D46680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0f:e6:5a:98:5e:13:a1:d4:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=69337668-62a6-4e53-b088-2472c23d0d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:37:3a:17:29:5c:28:31:65:5b:64:15:e7: 2f:88:e6:67:3c:dd:00:e1:54:36:af:57:73:3d:7a: 5c:a5:89:3f:16:dc:55:18:f0:10:16:0e:52:27:28: 8c:4d:61:b4:fc:06:5d:26:73:1b:c9:30:b8:29:f8: 5e:d3:d4:72:d6:27:28:74:2a:8a:19:ff:49:e4:b9: d0:42:dc:b6:ff:ba:0f:9b:08:db:74:29:77:05:15: 20:24:59:52:ad:73:06:82:64:18:ea:a1:30:54:ed: 4c:3a:42:81:5a:b3:75:dc:b4:82:e6:35:9d:f4:ce: 6f:19:5d:27:ae:fa:e5:07:a5:11:fa:50:29:eb:3d: f5:67:33:70:de:cd:b7:ad:d4:70:47:8c:17:40:8e: 62:eb:3a:f6:f6:82:dd:2f:06:c3:5b:62:d7:33:fe: 9e:19:f6:79:5c:0f:10:ec:3c:ec:57:32:24:ae:14: 58:56:da:6a:44:99:aa:f7:66:03:7a:1e:0e:e1:7e: 3f:b0:a5:e9:80:5a:50:a0:f7:89:aa:60:29:21:0c: b7:11:18:64:8f:7d:07:36:f7:82:c0:6e:2f:14:94: a2:b1:75:2d:ec:34:6f:79:e7:74:50:4f:20:15:77: 06:67:77:03:54:ac:e5:f3:f2:89:e7:55:7b:03:41: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:34:C8:D0:5D:4F:2F:82:1A:E4:93:EC:FC:24:A6:73:A1:64:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/17d2c343-cd32-3d84-b12a-e23f4443f4fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:25:cf:41:3a:41:1d:fb:70:a2:aa:71:f7:cb:c7:df:9b:9d: b2:af:33:23:28:24:5e:4d:73:be:dc:75:19:dc:8f:e1:20:05: ee:d8:ec:d9:22:2b:05:38:55:30:28:ce:70:3c:04:a1:f0:48: 8b:96:f1:c3:8b:42:6b:36:83:ff:26:ec:80:b8:26:4f:6c:ee: 9a:5b:b3:06:f1:6f:ce:3e:5d:b9:55:54:5c:97:a7:97:f0:81: 69:a1:8b:c7:a5:ba:c7:9c:b3:8c:2a:e3:a2:68:19:10:4c:83: 42:1a:ac:31:d3:16:58:20:86:f3:33:f8:b9:2e:b1:88:f2:7d: ac:84:f9:00:c8:54:7e:b0:af:f9:52:9f:a4:1f:3e:3b:57:63: a6:93:9e:2e:9f:ca:64:f1:e2:1f:07:67:de:ac:c2:fd:e3:0d: 19:90:a5:ac:45:5e:f8:59:0f:ad:a8:48:d6:26:72:37:f8:42: 18:07:ae:34:f2:9d:b8:6f:59:54:c7:f9:de:2d:43:a4:4e:6e: 22:f0:54:3c:15:a2:2b:9d:9f:06:47:dc:3a:98:32:73:dc:d0: f4:70:f7:d3:6d:f3:32:d3:9b:4e:ae:85:4f:6c:da:1c:21:a1: 8c:62:9f:f1:23:79:af:3d:03:04:42:88:30:70:5e:40:20:5b: b4:65:48:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ/mWpheE6HUZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NjkzMzc2NjgtNjJhNi00ZTUzLWIwODgtMjQ3MmMyM2QwZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy983OhcpXCgxZVtkFecviOZnPN0A4VQ2r1dz PXpcpYk/FtxVGPAQFg5SJyiMTWG0/AZdJnMbyTC4Kfhe09Ry1icodCqKGf9J5LnQ Qty2/7oPmwjbdCl3BRUgJFlSrXMGgmQY6qEwVO1MOkKBWrN13LSC5jWd9M5vGV0n rvrlB6UR+lAp6z31ZzNw3s23rdRwR4wXQI5i6zr29oLdLwbDW2LXM/6eGfZ5XA8Q 7DzsVzIkrhRYVtpqRJmq92YDeh4O4X4/sKXpgFpQoPeJqmApIQy3ERhkj30HNveC wG4vFJSisXUt7DRveed0UE8gFXcGZ3cDVKzl8/KJ51V7A0F7qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKmNMjQXU8vghrkk+z8JKZzoWQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTdkMmMzNDMtY2QzMi0z ZDg0LWIxMmEtZTIzZjQ0NDNmNGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJolz0E6QR37cKKqcffLx9+bnbKvMyMoJF5Nc77cdRncj+EgBe7Y7Nki KwU4VTAoznA8BKHwSIuW8cOLQms2g/8m7IC4Jk9s7ppbswbxb84+XblVVFyXp5fw gWmhi8elusecs4wq46JoGRBMg0IarDHTFlgghvMz+LkusYjyfayE+QDIVH6wr/lS n6QfPjtXY6aTni6fymTx4h8HZ96swv3jDRmQpaxFXvhZD62oSNYmcjf4QhgHrjTy nbhvWVTH+d4tQ6RObiLwVDwVoiudnwZH3DqYMnPc0PRw99Nt8zLTm06uhU9s2hwh oYxin/Ejea89AwRCiDBwXkAgW7RlSLI= -----END CERTIFICATE-----Generated at Sat Nov 1 12:36:43 2025 by rpki-client