$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa File: 410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa (raw, json) Hash identifier: IHm922kvRRvAfl2dRuwtIpEeSOJA5p3s9+8bcppFNII= Subject key identifier: 2A:4B:04:83:B5:91:A0:E3:1B:00:94:D2:EE:7C:F6:DD:66:AD:6D:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927A70259CA4D446DEA180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:70:25:9c:a4:d4:46:de:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=15f1ab30-3a91-41bf-bba5-f4ba578f2970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:61:1f:12:6f:0a:e5:2c:92:5c:af:47:fe: 55:8e:ac:89:a6:3c:85:d7:23:5e:91:b9:a5:a4:85: e0:b5:e7:9c:cf:fc:a7:22:a2:e1:db:9b:2d:4c:34: b1:7f:3d:dd:2e:15:09:a5:fa:7b:39:f7:85:b5:c9: 09:dc:56:2c:02:f3:00:d6:d5:70:2f:05:55:b0:8f: 53:ad:4e:b7:c8:42:75:47:da:8f:80:01:25:a8:ed: 19:d8:5f:7b:71:af:b4:f5:0c:50:14:3d:ed:29:64: c5:f2:0f:52:55:c9:b3:7c:df:cc:14:05:e4:c7:64: 0b:42:d4:58:c5:ab:f4:d1:fc:89:e0:a9:a8:40:6c: 1c:3f:c7:64:94:61:6d:5a:f8:c4:ba:5c:08:d5:01: c3:65:81:6c:4d:11:6f:c5:8a:04:55:6f:7a:35:76: 09:b1:1e:34:33:0e:27:93:10:a4:8d:9a:8a:0e:02: 1c:25:5c:1f:97:0c:71:c4:32:f6:64:65:d9:dd:b3: 1b:e8:9d:9e:6c:07:2f:d8:78:d2:d4:99:45:8a:7d: da:46:80:f4:da:c7:71:55:74:4c:75:b8:85:db:0f: 24:cf:fc:f8:06:14:00:ec:9e:0d:d8:79:01:ad:a8: ef:12:e6:3c:57:85:5c:30:22:53:d9:28:6b:08:7b: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4B:04:83:B5:91:A0:E3:1B:00:94:D2:EE:7C:F6:DD:66:AD:6D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/410ab385-2cbf-3cef-bb53-5cc9ce282a74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a6:98:cb:1e:43:86:44:93:71:d0:fa:5a:9c:35:84:4d:db: 91:7c:9e:51:91:05:a1:cc:19:b1:fa:b0:13:35:52:a4:ce:30: 8c:8c:d5:84:b1:ff:7f:53:66:14:3d:1c:57:fe:7a:64:93:fd: 12:02:a9:d9:f5:2f:22:9c:86:ab:ca:7c:e8:2c:ff:3b:17:08: f2:28:64:21:2f:1f:60:05:23:10:3e:c3:a0:bf:2f:c9:c4:e9: 50:a5:48:53:24:97:b4:42:51:a2:83:c8:11:df:e5:44:15:d8: fe:ba:dc:59:62:7a:36:8f:b1:2f:0d:c5:15:79:a3:d4:f6:05: 31:88:1a:12:cf:8d:6a:0e:10:c5:f1:57:4e:81:e5:c0:58:d4: 10:6e:a9:de:73:46:fe:4d:24:aa:a3:45:54:ac:c9:b9:93:51: e1:bc:f5:fa:71:d4:33:d6:b3:91:54:20:61:cd:a7:39:f3:2b: f7:06:57:d8:86:0b:4e:9b:ed:8e:cc:a9:11:79:7d:19:57:dd: bc:88:4a:fc:5a:9d:98:ed:67:1f:42:7d:5d:cc:73:af:30:94: d5:75:33:5c:d0:75:a6:ac:f1:7e:da:ed:5a:2a:72:b4:9a:78: 1b:1e:e1:62:b0:fa:e2:f2:44:aa:eb:98:9c:22:c6:b1:1e:93: 4a:13:98:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknpwJZyk1EbeoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTVmMWFiMzAtM2E5MS00MWJmLWJiYTUtZjRiYTU3OGYyOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkxhHxJvCuUsklyvR/5VjqyJpjyF1yNekbml pIXgteecz/ynIqLh25stTDSxfz3dLhUJpfp7OfeFtckJ3FYsAvMA1tVwLwVVsI9T rU63yEJ1R9qPgAElqO0Z2F97ca+09QxQFD3tKWTF8g9SVcmzfN/MFAXkx2QLQtRY xav00fyJ4KmoQGwcP8dklGFtWvjEulwI1QHDZYFsTRFvxYoEVW96NXYJsR40Mw4n kxCkjZqKDgIcJVwflwxxxDL2ZGXZ3bMb6J2ebAcv2HjS1JlFin3aRoD02sdxVXRM dbiF2w8kz/z4BhQA7J4N2HkBrajvEuY8V4VcMCJT2ShrCHv+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpLBIO1kaDjGwCU0u589t1mrW2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDEwYWIzODUtMmNiZi0z Y2VmLWJiNTMtNWNjOWNlMjgyYTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOmmMseQ4ZEk3HQ+lqcNYRN25F8nlGRBaHMGbH6sBM1UqTOMIyM1YSx /39TZhQ9HFf+emST/RICqdn1LyKchqvKfOgs/zsXCPIoZCEvH2AFIxA+w6C/L8nE 6VClSFMkl7RCUaKDyBHf5UQV2P663FliejaPsS8NxRV5o9T2BTGIGhLPjWoOEMXx V06B5cBY1BBuqd5zRv5NJKqjRVSsybmTUeG89fpx1DPWs5FUIGHNpznzK/cGV9iG C06b7Y7MqRF5fRlX3byISvxanZjtZx9CfV3Mc68wlNV1M1zQdaas8X7a7VoqcrSa eBse4WKw+uLyRKrrmJwixrEek0oTmK8= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:37 2025 by rpki-client