$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa File: 21338047-3012-3225-91d9-db12e2acd02c.roa (raw, json) Hash identifier: N9Fn+Q3Kig3s/QKx7E2UKxsJC/774BeIPz1ySLfntSk= Subject key identifier: 6F:94:B9:F8:E2:12:5A:E0:CC:0D:14:31:EE:D8:1B:DE:25:5F:30:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD072A0A0F23146B9D40C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:07:2a:0a:0f:23:14:6b:9d:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=6a8b0afe-8464-4b1c-b018-54c18a6a8617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:1f:63:a9:1f:da:1e:ad:b0:1e:8d:f5:2e: c9:70:7d:41:a5:d6:d1:a0:b2:cc:03:b6:a5:c2:31: 78:c2:32:87:ac:8c:5e:54:59:64:e8:d0:a3:25:40: f2:2d:22:24:a6:fc:58:7e:81:54:f7:4c:49:76:aa: 82:20:5f:21:bb:1f:52:30:89:ce:db:6d:ca:70:11: 36:fe:24:03:e7:f1:01:b4:8c:75:9d:c8:af:19:17: 93:c6:f1:fb:6e:69:ac:55:39:9b:5c:8b:d1:c5:96: ff:d0:fe:8f:c1:bd:6d:b2:bd:9e:a3:61:c5:a0:dc: 6b:6f:13:98:1e:93:61:b9:77:18:c3:99:8c:68:de: cc:cc:80:70:8b:28:bf:af:83:27:ee:fd:0f:58:08: 9f:2e:c6:e2:b8:84:0b:e0:1a:d0:99:b3:81:34:69: 0a:42:ed:21:39:ca:0c:cc:35:8e:3f:63:78:3a:34: 32:8a:a4:97:93:18:81:10:aa:38:db:de:a9:a9:24: 78:32:45:96:07:b9:99:91:4c:95:99:43:65:78:ed: c7:a7:35:e4:b6:4d:67:a8:30:94:10:7c:d5:ba:a5: 46:17:f4:4a:35:ac:03:cf:5a:72:93:3f:d8:86:f3: 17:66:79:9a:db:1c:97:28:74:6b:41:83:99:25:92: fc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:B9:F8:E2:12:5A:E0:CC:0D:14:31:EE:D8:1B:DE:25:5F:30:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/21338047-3012-3225-91d9-db12e2acd02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3a:f9:c1:17:da:47:11:f3:1d:91:9f:bc:8d:44:58:53:b6: 96:bf:f1:03:57:21:01:37:10:7f:d1:1d:6e:07:39:89:6f:5a: e3:de:cd:2e:80:95:ed:60:7c:86:0b:c9:0a:2c:19:f6:e7:67: 18:8b:3f:95:d6:19:ef:71:f7:77:66:f2:1b:18:9d:84:61:14: 94:36:cf:8d:e5:98:a2:31:4f:0f:a9:12:85:99:d3:8c:58:35: b3:8f:7a:72:4c:11:2d:4e:64:6b:1e:89:cf:ff:1a:ca:4e:0c: df:e6:bf:4c:a6:4f:01:df:d3:c6:3d:c6:98:b9:35:50:0e:5b: ed:5b:57:57:53:a1:da:b5:d0:02:67:cc:de:6a:f5:25:a4:d4: 24:95:66:1f:ae:46:15:04:97:71:33:37:2f:39:ad:41:8d:e9: f3:1d:78:71:bb:b0:a5:ff:2e:bf:bf:50:96:96:7f:92:17:06: 77:62:ea:73:24:7e:72:33:fc:ae:fa:9a:e4:98:f3:ea:33:31: 6f:02:71:1b:19:77:c3:57:92:a3:03:3a:53:38:c7:7e:d3:70: 6e:4b:0a:8c:55:ad:b2:50:2b:13:77:50:8e:b2:65:43:45:f7: be:e2:f9:3b:55:aa:a0:2d:6c:ba:9d:ca:41:27:06:cb:42:ff: 87:ec:6a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQcqCg8jFGudQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NmE4YjBhZmUtODQ2NC00YjFjLWIwMTgtNTRjMThhNmE4NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6UfY6kf2h6tsB6N9S7JcH1BpdbRoLLMA7al wjF4wjKHrIxeVFlk6NCjJUDyLSIkpvxYfoFU90xJdqqCIF8hux9SMInO223KcBE2 /iQD5/EBtIx1ncivGReTxvH7bmmsVTmbXIvRxZb/0P6Pwb1tsr2eo2HFoNxrbxOY HpNhuXcYw5mMaN7MzIBwiyi/r4Mn7v0PWAifLsbiuIQL4BrQmbOBNGkKQu0hOcoM zDWOP2N4OjQyiqSXkxiBEKo4296pqSR4MkWWB7mZkUyVmUNleO3HpzXktk1nqDCU EHzVuqVGF/RKNawDz1pykz/YhvMXZnma2xyXKHRrQYOZJZL8lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+UufjiElrgzA0UMe7YG94lXzDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjEzMzgwNDctMzAxMi0z MjI1LTkxZDktZGIxMmUyYWNkMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc6+cEX2kcR8x2Rn7yNRFhTtpa/8QNXIQE3EH/RHW4HOYlvWuPezS6A le1gfIYLyQosGfbnZxiLP5XWGe9x93dm8hsYnYRhFJQ2z43lmKIxTw+pEoWZ04xY NbOPenJMES1OZGseic//GspODN/mv0ymTwHf08Y9xpi5NVAOW+1bV1dTodq10AJn zN5q9SWk1CSVZh+uRhUEl3EzNy85rUGN6fMdeHG7sKX/Lr+/UJaWf5IXBndi6nMk fnIz/K76muSY8+ozMW8CcRsZd8NXkqMDOlM4x37TcG5LCoxVrbJQKxN3UI6yZUNF 977i+TtVqqAtbLqdykEnBstC/4fsahk= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:32 2025 by rpki-client