$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa File: 3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa (raw, json) Hash identifier: zz/h9VmWbmKm1ulFQ6IOM1QXaWNi0qpC86+zVwMqtr0= Subject key identifier: E8:BB:DE:49:F9:56:EB:E1:86:78:60:FC:40:6B:9C:51:0B:05:C5:45 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926BBC53702B6868CB9480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6b:bc:53:70:2b:68:68:cb:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3ad5b670-bc7c-45fc-8ebc-39e7ae6fdd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ab:f2:c7:73:b2:83:38:88:48:c5:05:b4:22: 1a:95:d1:bb:f5:90:ba:7a:ee:ce:d3:20:13:31:55: 06:5b:bb:c5:76:a1:f4:df:46:49:54:c4:5b:16:72: 3c:b0:4e:e3:d7:3d:4c:31:84:ab:60:f4:69:c0:95: a3:eb:af:f4:34:4b:ea:a8:56:41:48:c6:f6:e6:95: 8a:d0:07:76:95:2b:63:88:35:e0:23:68:a9:b6:cb: ee:53:75:db:d3:f4:81:ba:d5:d4:5e:75:04:c5:e3: 9f:f8:e2:8c:bf:6b:73:e1:a8:83:d9:3f:38:06:82: be:43:10:8e:b2:d8:8c:1b:b0:c6:a3:de:a3:c0:95: 74:52:7f:5f:65:5b:cf:ba:88:f2:85:f0:c1:3d:5d: 9b:56:70:4f:66:c0:1e:6c:b2:a1:3b:68:0b:9a:4c: 28:5d:f7:c6:ff:2b:83:98:a8:98:fc:12:2a:5e:7f: e2:f2:3e:80:fb:5c:fe:4e:36:f0:f8:4c:7e:ee:b6: 38:2d:7e:52:29:e0:ab:51:0e:c1:8a:25:94:81:48: d6:1f:ef:d5:0d:f7:a9:37:bd:0e:be:e2:58:8d:02: 75:8f:f5:4b:7e:76:3c:28:f2:bb:cf:16:e0:e9:61: 4d:94:48:15:d8:5a:03:01:7d:ae:53:c2:a4:68:8b: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BB:DE:49:F9:56:EB:E1:86:78:60:FC:40:6B:9C:51:0B:05:C5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3e3a3a86-0bc2-3922-af5f-5d6e5fd98603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:77:e6:f5:33:73:49:f9:0e:ba:cf:30:21:e6:cb:70:14:e2: b3:77:d9:9b:28:ca:86:8d:42:07:49:83:77:f7:e4:b0:ba:1c: ac:ee:e8:ad:0b:ff:be:86:a7:bd:c7:d6:fd:d3:1b:5d:98:d1: f4:90:43:28:ab:8d:41:34:12:d7:c2:63:2b:8d:d6:69:a9:f6: 54:72:43:84:99:ae:b1:ca:5e:2a:6a:57:71:ee:c1:9c:40:50: b5:b2:32:a2:8f:f5:dd:7b:11:3d:85:bb:46:5b:70:93:36:b1: 5a:c3:19:c0:ce:bf:3a:44:6a:b8:20:cf:65:fb:7f:ba:b2:71: cd:ec:2c:4f:cf:81:09:48:ab:3c:1c:0c:40:e3:e0:61:97:fb: 0f:9b:e6:c7:2d:db:f3:58:6d:31:96:1a:82:17:08:ff:38:c9: 4f:f3:55:90:8e:4f:0c:e8:46:e9:0d:c9:2d:d9:9f:0b:80:8e: fd:55:83:c8:19:cb:d2:4e:23:08:2b:47:39:ba:6d:00:c9:73: e7:9e:d9:e1:dd:2a:c5:ad:42:8d:4d:4d:b3:27:76:55:89:22: e0:54:29:da:a0:e8:1d:2f:8c:86:2c:c8:df:b0:19:31:a7:e4: 03:52:80:e5:b7:7a:dc:eb:25:fa:69:5b:dd:3d:bb:20:49:75: d5:4c:33:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmu8U3AraGjLlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk M2FkNWI2NzAtYmM3Yy00NWZjLThlYmMtMzllN2FlNmZkZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKvyx3OygziISMUFtCIaldG79ZC6eu7O0yAT MVUGW7vFdqH030ZJVMRbFnI8sE7j1z1MMYSrYPRpwJWj66/0NEvqqFZBSMb25pWK 0Ad2lStjiDXgI2iptsvuU3Xb0/SButXUXnUExeOf+OKMv2tz4aiD2T84BoK+QxCO stiMG7DGo96jwJV0Un9fZVvPuojyhfDBPV2bVnBPZsAebLKhO2gLmkwoXffG/yuD mKiY/BIqXn/i8j6A+1z+Tjbw+Ex+7rY4LX5SKeCrUQ7BiiWUgUjWH+/VDfepN70O vuJYjQJ1j/VLfnY8KPK7zxbg6WFNlEgV2FoDAX2uU8KkaIuzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi73kn5Vuvhhnhg/EBrnFELBcVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2UzYTNhODYtMGJjMi0z OTIyLWFmNWYtNWQ2ZTVmZDk4NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB35vUzc0n5DrrPMCHmy3AU4rN32ZsoyoaNQgdJg3f35LC6HKzu6K0L /76Gp73H1v3TG12Y0fSQQyirjUE0EtfCYyuN1mmp9lRyQ4SZrrHKXipqV3HuwZxA ULWyMqKP9d17ET2Fu0ZbcJM2sVrDGcDOvzpEarggz2X7f7qycc3sLE/PgQlIqzwc DEDj4GGX+w+b5sct2/NYbTGWGoIXCP84yU/zVZCOTwzoRukNyS3ZnwuAjv1Vg8gZ y9JOIwgrRzm6bQDJc+ee2eHdKsWtQo1NTbMndlWJIuBUKdqg6B0vjIYsyN+wGTGn 5ANSgOW3etzrJfppW909uyBJddVMM4U= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:07 2025 by rpki-client