$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa File: 40674d13-34cd-3c86-af0c-6dca7c56efd7.roa (raw, json) Hash identifier: ACKiI5COqOnl4Gkn2vAZTIwjSArmXZ0gP3MANM5yh1k= Subject key identifier: AA:09:3A:DC:97:BF:0D:EB:15:83:03:CC:4E:B4:BD:A6:C8:26:A6:D7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0E98FD93ECC1186C5A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0e:98:fd:93:ec:c1:18:6c:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=18fb2822-ac4b-4a23-981f-829934b4a03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:94:ff:b8:d1:19:99:ab:18:70:77:d7:fb: 5b:af:9e:f3:22:36:2a:ec:11:7c:31:cb:24:14:e5: e7:8c:57:6e:f9:70:0e:63:19:b6:1f:d6:fd:b0:68: 66:a9:ed:e9:8e:1d:06:5d:a8:49:08:7a:b8:a1:3e: e1:34:8d:3d:57:bd:98:2d:89:3b:f9:ed:03:87:01: 2c:a8:d6:0e:ba:f0:6a:4a:de:0c:dd:fc:4d:63:02: d1:23:58:6f:74:e3:d0:31:02:8a:8b:b2:88:c6:7a: ae:1f:e4:07:66:a4:84:9f:cd:90:70:8e:6a:bf:20: 6b:60:ee:e4:5a:95:36:f5:a6:fa:ea:b7:a9:b1:84: 56:63:de:e0:9c:92:8b:be:43:4b:19:eb:b1:1b:d9: de:de:5a:5f:ae:04:69:37:12:aa:ac:b8:f3:6e:4e: 2a:1e:4b:a3:04:ca:99:8b:2a:4e:71:37:d3:bd:68: 46:0e:93:a8:20:cb:41:f7:2d:b4:d3:22:d8:31:44: 49:c2:a7:ec:03:ce:8a:b7:36:c7:85:f5:dc:22:23: eb:06:24:d9:04:2c:e3:46:00:28:96:81:4b:80:25: b9:8a:38:7a:8e:f5:42:06:82:ab:84:fe:e2:d0:2f: a1:5c:0c:27:e4:4d:84:c9:b3:b3:9a:2d:45:b2:b7: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:09:3A:DC:97:BF:0D:EB:15:83:03:CC:4E:B4:BD:A6:C8:26:A6:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40674d13-34cd-3c86-af0c-6dca7c56efd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8d:59:f7:66:85:65:0c:e7:e1:90:90:d9:21:e0:2f:03:db: 10:48:0a:2b:0f:16:44:b9:dd:a6:a0:9c:da:f4:e3:91:14:09: d7:0e:6c:1a:d7:44:0e:9d:7e:a7:79:49:32:b5:92:74:4f:68: 86:21:51:97:f6:60:0d:f5:a2:5d:55:f9:6f:62:2e:06:c5:a3: d4:47:64:1e:2c:47:2d:ad:20:dd:51:51:23:a4:5e:e6:90:12: 87:90:c8:63:19:14:3d:db:50:c2:cf:1d:4d:3b:b0:da:d7:fe: b6:ad:b2:c9:2f:56:a4:42:17:17:e6:33:08:a2:ac:c1:13:03: ac:12:3b:b8:69:c1:6f:15:af:8a:99:b6:ae:0a:13:1c:61:50: cb:55:6c:00:5a:42:7f:4f:6c:14:bc:6f:1e:69:23:18:56:8a: 1b:3b:ad:48:44:e8:5c:3a:92:28:a6:63:2e:08:85:c8:10:75: c9:81:42:8b:3a:05:d6:b0:40:cf:78:92:b2:bf:a5:75:50:e0: 21:71:52:2b:51:96:46:97:31:68:39:14:55:25:72:d9:33:e0: 4d:af:b9:2e:e2:1e:d2:21:5c:c0:92:33:db:2e:e3:c0:0b:fe: 0b:74:94:da:a3:62:62:6b:98:1a:ac:95:f5:49:32:10:00:0f: 99:7e:55:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ6Y/ZPswRhsWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MThmYjI4MjItYWM0Yi00YTIzLTk4MWYtODI5OTM0YjRhMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjqU/7jRGZmrGHB31/tbr57zIjYq7BF8Mcsk FOXnjFdu+XAOYxm2H9b9sGhmqe3pjh0GXahJCHq4oT7hNI09V72YLYk7+e0DhwEs qNYOuvBqSt4M3fxNYwLRI1hvdOPQMQKKi7KIxnquH+QHZqSEn82QcI5qvyBrYO7k WpU29ab66repsYRWY97gnJKLvkNLGeuxG9ne3lpfrgRpNxKqrLjzbk4qHkujBMqZ iypOcTfTvWhGDpOoIMtB9y200yLYMURJwqfsA86KtzbHhfXcIiPrBiTZBCzjRgAo loFLgCW5ijh6jvVCBoKrhP7i0C+hXAwn5E2EybOzmi1FsrekewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoJOtyXvw3rFYMDzE60vabIJqbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDA2NzRkMTMtMzRjZC0z Yzg2LWFmMGMtNmRjYTdjNTZlZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWNWfdmhWUM5+GQkNkh4C8D2xBICisPFkS53aagnNr045EUCdcObBrX RA6dfqd5STK1knRPaIYhUZf2YA31ol1V+W9iLgbFo9RHZB4sRy2tIN1RUSOkXuaQ EoeQyGMZFD3bUMLPHU07sNrX/ratsskvVqRCFxfmMwiirMETA6wSO7hpwW8Vr4qZ tq4KExxhUMtVbABaQn9PbBS8bx5pIxhWihs7rUhE6Fw6kiimYy4IhcgQdcmBQos6 BdawQM94krK/pXVQ4CFxUitRlkaXMWg5FFUlctkz4E2vuS7iHtIhXMCSM9su48AL /gt0lNqjYmJrmBqslfVJMhAAD5l+VT4= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:57 2025 by rpki-client