$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa File: 19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa (raw, json) Hash identifier: 9rnW/XJ935w+8sfyX6kmAE0ZVMXjd/L+SROnqwO46j0= Subject key identifier: A9:27:90:0C:C2:00:5C:C8:2F:14:54:C6:05:BA:6F:E0:86:CB:1F:2C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCFF1FB3F5DB1D810F8300 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ff:1f:b3:f5:db:1d:81:0f:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=d1f3a55b-e25d-46af-9423-e2248f091315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b9:51:3c:a8:c1:ff:eb:f7:28:fe:d2:d5:21: db:65:7c:50:66:bf:8b:42:e1:81:81:48:57:4b:7b: ec:8e:72:e5:77:40:61:04:eb:79:c3:d5:5c:eb:bf: 2e:2a:ba:cb:86:2d:2f:f0:72:5f:1f:1d:8b:b5:97: b4:7e:de:36:ad:47:44:ee:c9:5e:9a:a2:77:91:47: 9e:c5:9d:c6:f1:a7:16:7a:e4:1a:39:77:7a:46:75: fa:2d:2f:46:2c:12:bf:ca:28:1a:94:7f:a4:a9:8f: 1f:c5:04:e5:06:5e:18:9f:0c:42:d3:96:f0:4e:8a: 53:3d:17:f5:d2:ad:9f:0e:5a:33:3e:4a:d2:d1:67: f0:9f:23:6a:de:57:80:28:0e:56:7c:f1:fa:7b:f5: ba:5b:d5:a8:b5:d5:97:30:6b:31:af:07:e4:1a:5f: 44:5d:c2:09:c8:7b:29:3c:36:7f:9f:c0:05:45:d8: c2:a7:d3:df:96:56:9f:de:ec:18:f9:ba:f2:d3:ff: c8:e8:8a:d8:09:4e:a4:0f:1c:8e:79:4f:a7:38:72: a3:86:57:fb:18:04:5b:3f:ff:b9:a7:8b:b3:38:6e: 82:7c:14:57:12:59:89:3f:b4:67:5b:e1:e2:19:49: f7:48:b1:72:0b:7a:be:ab:02:bd:bf:33:d2:a7:fe: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:90:0C:C2:00:5C:C8:2F:14:54:C6:05:BA:6F:E0:86:CB:1F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19ce9a70-35bb-30a9-8772-0baf54fb9c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:30:ac:de:fa:26:38:1a:4d:4d:72:3f:44:ec:0d:e5:81:2f: fe:ba:63:68:5e:84:ba:bf:79:a7:2d:48:33:2a:25:fd:71:ad: e4:93:f4:d9:9e:da:af:84:98:14:01:f4:03:02:80:a4:8b:1d: 37:7b:24:4d:ce:62:c0:2f:9e:54:e1:ad:ff:5c:b4:e8:76:49: 70:90:c4:ac:fc:8b:da:75:73:5a:bb:2c:b8:ce:f9:65:7b:ae: b1:d7:08:c0:0d:3a:76:9d:31:82:61:9d:78:ff:03:68:12:e9: b5:eb:d6:ca:67:ec:35:c0:b0:0b:9e:a2:d7:13:2c:97:f7:a3: 7f:9a:e8:6a:8a:21:d5:ff:7c:a5:92:79:50:3f:b2:e2:c1:79: 16:0b:5c:49:18:17:bf:04:e8:12:95:23:1c:fb:c5:14:d9:ff: 4d:ca:ad:bc:4f:d9:34:a8:0a:be:de:e9:ca:4c:eb:4a:10:d2: 8f:79:14:fd:0e:dd:c1:c2:2d:87:0d:f6:95:80:56:4a:3c:3a: 5c:29:80:2c:55:99:34:47:65:f5:d6:7a:31:a4:5b:08:6d:e2: b0:91:04:e4:68:4c:14:98:f5:13:58:ee:ab:bd:8c:14:fb:b2: 06:36:7f:cd:6e:19:31:fa:bd:bd:00:2e:f5:90:e0:32:0d:74: a5:0d:78:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzP8fs/XbHYEPgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZDFmM2E1NWItZTI1ZC00NmFmLTk0MjMtZTIyNDhmMDkxMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjblRPKjB/+v3KP7S1SHbZXxQZr+LQuGBgUhX S3vsjnLld0BhBOt5w9Vc678uKrrLhi0v8HJfHx2LtZe0ft42rUdE7slemqJ3kUee xZ3G8acWeuQaOXd6RnX6LS9GLBK/yigalH+kqY8fxQTlBl4YnwxC05bwTopTPRf1 0q2fDlozPkrS0WfwnyNq3leAKA5WfPH6e/W6W9WotdWXMGsxrwfkGl9EXcIJyHsp PDZ/n8AFRdjCp9Pfllaf3uwY+bry0//I6IrYCU6kDxyOeU+nOHKjhlf7GARbP/+5 p4uzOG6CfBRXElmJP7RnW+HiGUn3SLFyC3q+qwK9vzPSp/4bGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKknkAzCAFzILxRUxgW6b+CGyx8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTljZTlhNzAtMzViYi0z MGE5LTg3NzItMGJhZjU0ZmI5YzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFowrN76JjgaTU1yP0TsDeWBL/66Y2hehLq/eactSDMqJf1xreST9Nme 2q+EmBQB9AMCgKSLHTd7JE3OYsAvnlThrf9ctOh2SXCQxKz8i9p1c1q7LLjO+WV7 rrHXCMANOnadMYJhnXj/A2gS6bXr1spn7DXAsAueotcTLJf3o3+a6GqKIdX/fKWS eVA/suLBeRYLXEkYF78E6BKVIxz7xRTZ/03KrbxP2TSoCr7e6cpM60oQ0o95FP0O 3cHCLYcN9pWAVko8OlwpgCxVmTRHZfXWejGkWwht4rCRBORoTBSY9RNY7qu9jBT7 sgY2f81uGTH6vb0ALvWQ4DINdKUNeEg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:29 2025 by rpki-client