$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa File: 33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa (raw, json) Hash identifier: 8tid7WU1hwxDKDaofyjEnGRMnjVLTcDJKzr6M/0mnNE= Subject key identifier: 4B:14:A7:30:1D:6B:1E:4C:02:4E:01:64:E2:49:75:E4:7B:20:98:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0ED2FB7CE4B961958200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0e:d2:fb:7c:e4:b9:61:95:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=909e2c35-88c6-4926-adfb-660d4b24b455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:48:85:8a:1b:10:d6:28:3b:12:46:dd:b6: 50:42:c4:92:9e:d1:72:7e:e1:61:df:4f:9e:66:e2: 26:1e:a9:d5:4c:10:6b:ab:55:4f:10:64:98:9c:f7: 48:15:bb:a9:a6:0e:22:14:5a:fb:25:36:8f:f5:d1: c7:cd:91:f8:e9:ec:c4:4a:cb:61:7e:cd:93:d4:39: 9e:7b:9e:16:11:d0:5f:47:1c:fa:5a:c0:5d:b2:3f: 65:06:04:6a:b3:37:76:89:cb:ad:52:ab:da:c6:71: 9f:78:d7:4b:6a:d5:c8:a6:86:87:51:6c:2d:44:2f: 3d:20:59:be:6d:8f:65:b3:d9:55:2c:55:a1:40:10: 14:9f:01:f4:50:f0:eb:79:d4:f4:2c:bb:58:3b:72: e0:f6:2f:01:2b:43:ac:65:29:1f:f0:2f:cb:1d:97: a1:38:58:d4:27:b2:4e:0c:52:f2:12:b8:9c:d0:3b: 36:e1:93:b2:0b:d7:c0:b6:67:31:4c:58:31:aa:bd: c0:a5:e2:78:83:44:14:bb:41:b4:1f:77:ee:d9:23: fa:3b:3d:f5:c3:e4:57:98:89:5b:f2:5e:ad:58:39: da:9d:61:8d:81:b8:04:7e:ba:93:a9:7e:61:33:95: 01:00:46:fd:1f:a0:b2:96:29:54:46:55:9e:c4:da: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:14:A7:30:1D:6B:1E:4C:02:4E:01:64:E2:49:75:E4:7B:20:98:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/33cdcae0-bd47-3d40-8771-2028bd3d2ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:b9:33:c5:04:c0:d6:93:85:10:cd:0b:70:f0:95:3c:df:56: b5:6e:c2:83:27:af:46:81:8b:75:33:8b:0d:28:0d:db:fb:88: fc:61:f9:f4:50:a3:b6:6b:27:ea:7d:7e:51:3a:1b:1e:f8:09: aa:36:ed:4f:24:69:3b:cc:dc:49:5f:c0:06:1c:5c:8b:6d:61: 0c:e0:6d:a5:47:fc:48:e4:4e:8f:12:67:c9:06:a5:26:fc:9a: e4:74:74:93:89:71:a3:b0:18:50:fd:e2:0e:1b:6a:3e:3d:9f: e3:d3:f7:e3:5e:d9:5b:e7:af:d0:a0:43:73:9f:4d:ce:6d:44: 9f:67:0f:4f:77:90:ed:ec:81:c9:40:de:06:2a:00:90:54:f9: f3:c5:7f:9d:89:32:21:df:af:44:3d:39:19:c7:12:c9:1f:d1: 0f:ed:e0:66:8f:d9:5d:e1:fd:98:54:5b:fe:e8:47:a1:68:76: 60:ce:5e:51:5c:60:35:c6:ab:f3:de:52:48:04:65:a5:8a:28: f8:95:a8:88:5e:d0:d9:c7:9e:e3:96:89:c9:cd:3f:a8:5a:3f: 14:5f:94:85:47:ca:92:8e:88:8c:78:16:07:a5:d9:7a:7e:b1: fb:ec:04:3d:2f:9c:c9:d2:65:50:74:58:a7:e2:65:d7:17:4d: b6:ff:e8:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ7S+3zkuWGVggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OTA5ZTJjMzUtODhjNi00OTI2LWFkZmItNjYwZDRiMjRiNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj55IhYobENYoOxJG3bZQQsSSntFyfuFh30+e ZuImHqnVTBBrq1VPEGSYnPdIFbuppg4iFFr7JTaP9dHHzZH46ezESsthfs2T1Dme e54WEdBfRxz6WsBdsj9lBgRqszd2icutUqvaxnGfeNdLatXIpoaHUWwtRC89IFm+ bY9ls9lVLFWhQBAUnwH0UPDredT0LLtYO3Lg9i8BK0OsZSkf8C/LHZehOFjUJ7JO DFLyEric0Ds24ZOyC9fAtmcxTFgxqr3ApeJ4g0QUu0G0H3fu2SP6Oz31w+RXmIlb 8l6tWDnanWGNgbgEfrqTqX5hM5UBAEb9H6CylilURlWexNqZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsUpzAdax5MAk4BZOJJdeR7IJhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzNjZGNhZTAtYmQ0Ny0z ZDQwLTg3NzEtMjAyOGJkM2QyYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEK5M8UEwNaThRDNC3DwlTzfVrVuwoMnr0aBi3Uziw0oDdv7iPxh+fRQ o7ZrJ+p9flE6Gx74Cao27U8kaTvM3ElfwAYcXIttYQzgbaVH/EjkTo8SZ8kGpSb8 muR0dJOJcaOwGFD94g4baj49n+PT9+Ne2Vvnr9CgQ3OfTc5tRJ9nD093kO3sgclA 3gYqAJBU+fPFf52JMiHfr0Q9ORnHEskf0Q/t4GaP2V3h/ZhUW/7oR6FodmDOXlFc YDXGq/PeUkgEZaWKKPiVqIhe0NnHnuOWicnNP6haPxRflIVHypKOiIx4Fgel2Xp+ sfvsBD0vnMnSZVB0WKfiZdcXTbb/6NU= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:07 2025 by rpki-client