$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa File: 25105677-3f17-3688-b9c3-a674947cb1e3.roa (raw, json) Hash identifier: CsmeX/NCllNoufkTQTuNQYBaVr/JcKBgh3dgTQ0livU= Subject key identifier: 71:CC:0E:20:74:34:6B:01:53:6D:E5:FC:25:25:9D:45:7D:6D:5E:23 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192697EC3C8CF24BCAC78C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:69:7e:c3:c8:cf:24:bc:ac:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=a5b38563-3fdc-4c58-aedf-26687aab5aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:86:8d:b0:47:a2:f3:6a:b5:f6:2f:37:84: d0:40:b8:a3:26:b3:f5:c0:88:56:2f:7f:7e:d8:0e: 9d:d6:1a:62:b1:ea:88:9b:f2:f1:a1:7d:0b:54:37: 44:cd:76:f7:e2:38:11:23:62:ea:94:27:2a:00:84: cd:18:6a:51:05:d7:94:a2:12:bf:b2:61:2b:94:a9: 41:cb:ff:e6:78:80:34:a2:9c:81:ee:6a:69:65:74: e7:54:84:e2:14:d8:aa:5d:63:09:ad:a3:ba:24:03: 42:3b:83:05:43:a3:d2:df:85:8c:95:46:51:b0:52: 88:39:f0:f1:35:cd:01:26:79:93:b9:10:72:03:5e: 63:98:d9:69:ef:14:a3:ee:d5:34:cd:84:f6:b1:57: 9d:91:13:4b:45:ce:eb:3c:d9:dc:4c:cf:0b:bc:19: c3:59:7b:d4:84:9f:0c:cb:57:b1:48:64:2d:27:65: 04:7e:3a:e2:a5:be:9e:46:27:10:c4:f6:84:b8:dc: 9b:b3:06:3e:99:e6:38:be:4e:48:fc:85:aa:8c:ed: cb:57:57:39:a5:06:bf:41:31:d1:a7:f9:93:7d:b2: f4:0e:5f:e3:ec:96:7a:2f:4c:31:ed:77:d7:df:58: 4b:91:80:08:f5:82:b4:2e:e7:61:95:c2:b9:19:ba: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CC:0E:20:74:34:6B:01:53:6D:E5:FC:25:25:9D:45:7D:6D:5E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/25105677-3f17-3688-b9c3-a674947cb1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:bc:96:c8:2c:e6:d2:e2:9c:b8:6b:03:ee:67:fc:dd:4b:84: 02:36:59:ae:f9:e3:6d:31:52:02:65:b1:94:11:55:e7:36:ba: 7c:f1:a6:a3:eb:48:11:27:c6:50:ce:d1:ac:56:7e:29:78:3a: 01:17:c6:e6:0b:b5:91:0a:8b:69:ff:97:95:61:9f:8e:57:3e: a5:5e:d1:e1:43:e0:c1:d0:cf:65:a5:04:6f:20:56:2d:6d:17: 33:ba:ec:12:da:9f:27:17:d6:e1:6f:35:cd:ef:db:47:92:c3: 1c:b1:12:23:03:25:8e:1d:ef:25:45:85:ee:cb:12:3c:86:54: 4d:35:87:24:c2:b2:66:47:53:01:d1:50:7a:4e:3e:5a:26:43: 16:f5:00:dc:bf:3b:17:73:d7:e7:8d:0c:a2:88:76:fc:94:53: ae:d2:45:2e:6b:82:6f:ad:09:7e:3c:ca:0d:34:dd:fb:de:bd: 75:e3:10:aa:6e:88:c7:68:3a:7e:88:c2:11:c3:7b:54:d2:4c: 2b:c6:5f:76:93:41:bd:8d:bd:c9:ae:90:da:20:fe:1c:61:18: 4c:04:af:f5:14:f2:45:b3:73:ce:fa:45:06:8b:4a:41:da:1d: 71:59:a7:23:bb:1a:69:67:84:53:95:ef:be:94:48:c3:79:43: eb:9c:67:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkml+w8jPJLyseMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YTViMzg1NjMtM2ZkYy00YzU4LWFlZGYtMjY2ODdhYWI1YWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqqGjbBHovNqtfYvN4TQQLijJrP1wIhWL39+ 2A6d1hpiseqIm/LxoX0LVDdEzXb34jgRI2LqlCcqAITNGGpRBdeUohK/smErlKlB y//meIA0opyB7mppZXTnVITiFNiqXWMJraO6JANCO4MFQ6PS34WMlUZRsFKIOfDx Nc0BJnmTuRByA15jmNlp7xSj7tU0zYT2sVedkRNLRc7rPNncTM8LvBnDWXvUhJ8M y1exSGQtJ2UEfjripb6eRicQxPaEuNybswY+meY4vk5I/IWqjO3LV1c5pQa/QTHR p/mTfbL0Dl/j7JZ6L0wx7XfX31hLkYAI9YK0LudhlcK5GbomUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHMDiB0NGsBU23l/CUlnUV9bV4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjUxMDU2NzctM2YxNy0z Njg4LWI5YzMtYTY3NDk0N2NiMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa8lsgs5tLinLhrA+5n/N1LhAI2Wa75420xUgJlsZQRVec2unzxpqPr SBEnxlDO0axWfil4OgEXxuYLtZEKi2n/l5Vhn45XPqVe0eFD4MHQz2WlBG8gVi1t FzO67BLanycX1uFvNc3v20eSwxyxEiMDJY4d7yVFhe7LEjyGVE01hyTCsmZHUwHR UHpOPlomQxb1ANy/Oxdz1+eNDKKIdvyUU67SRS5rgm+tCX48yg003fvevXXjEKpu iMdoOn6IwhHDe1TSTCvGX3aTQb2NvcmukNog/hxhGEwEr/UU8kWzc876RQaLSkHa HXFZpyO7GmlnhFOV776USMN5Q+ucZ70= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:46 2025 by rpki-client