$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa File: 2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa (raw, json) Hash identifier: U3ytpyyw7MEfX/3RnQuq5rhD2hPvCwHt6LsfFuKTWDQ= Subject key identifier: 06:6B:3B:FA:05:D8:9E:BF:ED:7B:E6:B2:51:9F:13:3E:C6:45:A2:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D107C7F4F6970F67F6600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:10:7c:7f:4f:69:70:f6:7f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=5514f6b6-2c8a-4a4d-a7a8-5af5b71e54fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:a1:25:0f:86:97:67:0a:fe:22:20:41:b5: 3f:62:bb:41:64:10:5c:00:71:5c:bb:28:79:49:d8: 8b:31:57:0e:4e:6d:ac:a0:da:2d:fb:33:68:ac:29: 47:b9:38:a8:45:43:2e:cd:de:50:67:b3:a3:1a:93: fa:73:ef:02:e1:8b:e3:66:60:c7:9c:cd:b6:e0:7e: 4f:2d:56:07:71:4b:f6:a5:8a:3c:c1:c7:5f:87:ac: e9:05:e5:a2:8b:aa:c8:10:1c:e0:77:6e:46:8d:35: 9c:7f:ba:ff:0e:40:10:4d:85:d6:fb:52:08:c2:0f: 2c:2c:67:db:8c:0f:ca:8e:26:02:c1:a1:46:fe:8b: e6:f3:f7:36:6f:38:ac:f2:76:5d:ef:4f:ab:38:2a: 83:00:ef:ce:18:62:d0:05:29:df:02:7c:3c:ec:6f: 48:11:f6:7e:e2:80:e2:c1:e2:12:8f:9e:f0:e7:8d: a9:a2:34:8f:b1:f1:51:8f:9e:e1:80:b0:dc:a5:25: 2c:ef:f6:a3:ab:e6:4d:ec:30:46:04:ea:aa:8e:8c: 60:f3:87:8f:a5:ce:48:e8:c2:db:1e:9e:93:61:7d: 4a:35:91:3f:a2:e8:5e:34:64:d9:59:7d:c3:41:88: 92:0c:66:7b:aa:3b:1f:15:ad:27:73:6b:5d:5c:2f: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6B:3B:FA:05:D8:9E:BF:ED:7B:E6:B2:51:9F:13:3E:C6:45:A2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2220ec3c-56f8-35f2-aafe-8ccbc45b0eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:3c:e4:51:2c:5f:bf:2d:16:62:ce:2a:7c:26:c7:bb:bb:86: 33:96:48:8a:2f:2c:6e:bb:c3:02:e1:18:27:f6:76:5e:34:ad: f6:fa:30:06:90:b2:61:c9:a9:e2:e0:6e:b3:33:01:5d:e7:ad: c6:d3:bc:73:72:9e:9d:ea:00:60:66:69:6a:68:a4:9a:0d:9c: ee:b2:70:9a:99:14:f6:69:a0:c9:d9:4a:58:7d:17:c9:e4:ae: 05:40:f9:f1:aa:51:45:db:d7:91:3c:f3:1f:dc:42:ff:a1:f6: f1:60:98:5f:73:23:6a:bf:e9:1d:3e:1a:31:f4:2b:2e:30:a1: 72:bd:0f:c4:ab:db:f0:6d:04:83:44:51:3f:f2:c9:5c:40:05: 49:89:c5:e9:85:5a:3f:bc:4a:7f:8d:49:e6:14:7c:3d:61:88: 79:d1:4f:3c:2d:80:9e:06:d7:65:08:b4:bf:7f:a0:83:ed:62: a8:c1:b8:d4:95:73:ac:90:bc:fa:8a:fc:dc:2c:ba:13:2e:5e: e2:71:2d:51:4e:1a:d2:43:92:5b:e2:d6:86:c6:da:d4:7d:5b: 17:72:f1:b1:aa:d2:1d:ec:14:4d:e0:88:6f:b9:8a:db:f1:4a: 3f:0d:2e:94:0d:7f:91:6f:5d:6d:f9:98:34:6a:c5:73:ba:51: 00:20:31:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRB8f09pcPZ/ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NTUxNGY2YjYtMmM4YS00YTRkLWE3YTgtNWFmNWI3MWU1NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbuhJQ+Gl2cK/iIgQbU/YrtBZBBcAHFcuyh5 SdiLMVcOTm2soNot+zNorClHuTioRUMuzd5QZ7OjGpP6c+8C4YvjZmDHnM224H5P LVYHcUv2pYo8wcdfh6zpBeWii6rIEBzgd25GjTWcf7r/DkAQTYXW+1IIwg8sLGfb jA/KjiYCwaFG/ovm8/c2bzis8nZd70+rOCqDAO/OGGLQBSnfAnw87G9IEfZ+4oDi weISj57w542pojSPsfFRj57hgLDcpSUs7/ajq+ZN7DBGBOqqjoxg84ePpc5I6MLb Hp6TYX1KNZE/ouheNGTZWX3DQYiSDGZ7qjsfFa0nc2tdXC8/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZrO/oF2J6/7XvmslGfEz7GRaLEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjIyMGVjM2MtNTZmOC0z NWYyLWFhZmUtOGNjYmM0NWIwZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJE85FEsX78tFmLOKnwmx7u7hjOWSIovLG67wwLhGCf2dl40rfb6MAaQ smHJqeLgbrMzAV3nrcbTvHNynp3qAGBmaWpopJoNnO6ycJqZFPZpoMnZSlh9F8nk rgVA+fGqUUXb15E88x/cQv+h9vFgmF9zI2q/6R0+GjH0Ky4woXK9D8Sr2/BtBINE UT/yyVxABUmJxemFWj+8Sn+NSeYUfD1hiHnRTzwtgJ4G12UItL9/oIPtYqjBuNSV c6yQvPqK/NwsuhMuXuJxLVFOGtJDklvi1obG2tR9Wxdy8bGq0h3sFE3giG+5itvx Sj8NLpQNf5FvXW35mDRqxXO6UQAgMeg= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:49 2025 by rpki-client