$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46e3aabc-3604-3b17-be11-1af5dbb752b9.roa File: 46e3aabc-3604-3b17-be11-1af5dbb752b9.roa (raw, json) Hash identifier: dRgNTJmUr2Tz4WxLp6UBpy+k9AS1J8efQoeXnUQnDL4= Subject key identifier: AF:61:80:C6:57:37:38:5B:F1:86:EA:84:32:31:D1:A4:B6:66:4A:30 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19278FA9FB15452825D7D00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46e3aabc-3604-3b17-be11-1af5dbb752b9.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:fa:9f:b1:54:52:82:5d:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=e6a32a83-4e66-4d51-bb67-906a514ea4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b1:00:1a:51:b4:65:ba:80:3a:b6:8b:be:b6: 1d:9b:98:70:99:2c:5e:cb:83:4d:bf:a8:40:e6:32: cc:b8:6b:3a:fe:a0:23:9f:8f:50:f5:9f:ea:06:48: a0:32:e4:12:3c:bf:44:e4:af:de:30:25:41:b0:02: 1a:7b:86:d0:f2:3c:d6:1d:f5:eb:9b:46:76:55:f7: 82:a7:ab:71:b8:1a:59:d1:3a:dd:4d:de:51:bf:bc: 88:48:8c:92:71:a1:b2:bc:cb:50:88:d7:b1:7c:b4: de:e5:19:3c:1b:5c:de:e3:3e:33:05:14:ae:aa:ed: 55:f1:b0:d6:b1:be:16:cf:cd:a6:37:88:fe:68:e6: a5:bf:39:5c:af:63:4b:6d:18:ca:4f:94:c6:98:50: 76:de:6f:22:59:5e:d8:66:3a:22:b9:56:b6:94:27: 4b:03:e7:6f:ea:c5:2c:06:83:d3:cf:61:4d:d2:0b: 37:5f:e2:96:36:aa:97:81:29:b7:37:ad:b0:d7:c4: 77:6c:71:e1:09:bf:21:ae:be:a0:62:aa:f0:a5:77: 67:65:cc:d3:47:13:02:f5:53:e9:39:a7:b7:d2:5e: 61:4e:6a:1d:a8:cd:1f:29:81:96:c4:85:6f:2d:7b: 39:dd:d7:29:fb:99:7f:e3:79:b2:dc:5f:6f:d3:79: 77:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:80:C6:57:37:38:5B:F1:86:EA:84:32:31:D1:A4:B6:66:4A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/46e3aabc-3604-3b17-be11-1af5dbb752b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:bc:b6:12:00:15:ef:56:16:ad:95:ee:a4:66:9f:f8:dc:e5: 01:3c:51:a5:e4:40:0e:c5:b1:56:2a:89:80:fb:b6:83:cb:37: aa:c1:84:5e:4b:e8:95:20:4e:70:ae:37:a7:27:04:38:85:d9: f1:5f:be:b4:bf:4a:f1:7c:05:55:98:25:76:4d:9a:f2:05:97: 8f:83:19:53:3b:40:63:18:22:bb:29:8f:50:91:b3:59:32:3d: 9b:15:66:45:db:5e:d4:99:e0:3f:00:1b:99:cf:02:dd:e7:14: 08:89:60:92:4a:af:df:66:23:e4:29:14:52:ac:22:0c:4f:0e: 6b:a1:da:b3:2c:75:74:3d:e3:d0:92:dc:98:be:91:be:d8:9e: a6:35:d1:f4:74:f4:15:bf:18:c6:ae:88:dc:96:1d:e1:42:09: 39:22:5b:d1:c7:96:cd:b1:c6:73:41:87:f0:de:17:6f:6d:41: d7:38:dc:e9:64:21:88:de:4e:68:59:d1:7e:58:22:c8:73:38: 87:25:60:2b:71:62:af:f4:5f:6f:fc:1c:ca:e6:a3:96:48:47: 7b:99:a1:3e:25:d9:a9:0a:9c:d2:07:b1:8b:05:c2:fe:2c:01: 56:39:28:54:1b:aa:4f:86:9a:ee:7c:9b:a0:f0:c4:eb:db:f7: 30:3c:88:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknj6n7FUUoJdfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZTZhMzJhODMtNGU2Ni00ZDUxLWJiNjctOTA2YTUxNGVhNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrEAGlG0ZbqAOraLvrYdm5hwmSxey4NNv6hA 5jLMuGs6/qAjn49Q9Z/qBkigMuQSPL9E5K/eMCVBsAIae4bQ8jzWHfXrm0Z2VfeC p6txuBpZ0TrdTd5Rv7yISIyScaGyvMtQiNexfLTe5Rk8G1ze4z4zBRSuqu1V8bDW sb4Wz82mN4j+aOalvzlcr2NLbRjKT5TGmFB23m8iWV7YZjoiuVa2lCdLA+dv6sUs BoPTz2FN0gs3X+KWNqqXgSm3N62w18R3bHHhCb8hrr6gYqrwpXdnZczTRxMC9VPp Oae30l5hTmodqM0fKYGWxIVvLXs53dcp+5l/43my3F9v03l3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9hgMZXNzhb8YbqhDIx0aS2ZkowMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDZlM2FhYmMtMzYwNC0z YjE3LWJlMTEtMWFmNWRiYjc1MmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKK8thIAFe9WFq2V7qRmn/jc5QE8UaXkQA7FsVYqiYD7toPLN6rBhF5L 6JUgTnCuN6cnBDiF2fFfvrS/SvF8BVWYJXZNmvIFl4+DGVM7QGMYIrspj1CRs1ky PZsVZkXbXtSZ4D8AG5nPAt3nFAiJYJJKr99mI+QpFFKsIgxPDmuh2rMsdXQ949CS 3Ji+kb7YnqY10fR09BW/GMauiNyWHeFCCTkiW9HHls2xxnNBh/DeF29tQdc43Olk IYjeTmhZ0X5YIshzOIclYCtxYq/0X2/8HMrmo5ZIR3uZoT4l2akKnNIHsYsFwv4s AVY5KFQbqk+Gmu58m6DwxOvb9zA8iMM= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:15 2025 by rpki-client