$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa File: 481cb2a2-f993-3240-b148-77d704915144.roa (raw, json) Hash identifier: YDO7CE0RQhMxw0wwRMvXGtNOqHZtgpp0tSZqsJwd04M= Subject key identifier: 07:36:7C:AA:9C:13:E2:9A:46:5D:24:F5:B6:6C:2A:F2:8A:36:08:90 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926856C5B06840D86DDA90 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:68:56:c5:b0:68:40:d8:6d:da:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=a304d66d-0de9-4336-bd8e-9c5b4a4a0437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:7b:35:c6:ba:0c:68:28:51:d0:bc:60:4f: 02:80:c4:07:bd:ca:ec:45:b1:35:75:ea:4c:25:8d: b8:fc:ef:a5:1c:f9:dc:b1:e5:ba:d8:56:bf:94:aa: ea:18:a4:d0:7c:74:a8:a8:f4:89:24:1a:31:30:e1: 2a:bb:3f:37:e6:29:9f:53:8c:38:dc:cf:8a:7e:b6: c7:be:b8:48:b9:6b:40:ca:2c:7b:7e:e4:50:29:e1: ba:a3:74:79:6a:e2:de:0f:da:b8:9f:4a:39:f2:fa: ef:fc:31:12:d4:3a:23:0c:0f:5a:dc:03:d3:00:8f: ff:bf:68:c8:d4:79:99:68:71:1c:7a:6a:97:4a:45: 6b:70:27:3c:90:95:91:3a:f9:3c:ea:9f:eb:5e:23: ce:85:89:35:ec:91:c8:6b:8f:4f:48:7f:e8:3c:52: 33:31:5c:50:7e:16:f2:7e:76:67:c1:dc:c0:7c:36: 9a:b7:f5:45:f3:26:ff:4e:29:55:a3:7a:76:69:a5: 99:80:74:14:eb:c1:62:92:e7:28:50:f7:0d:c3:29: eb:41:9c:48:e1:ff:04:c4:87:c8:e3:d4:66:ee:eb: 8c:fc:44:30:f2:2d:cf:84:1c:9e:e8:5f:13:ea:f3: b2:89:84:ff:a1:df:f7:e1:2c:73:0d:bc:c8:5d:a8: 21:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:36:7C:AA:9C:13:E2:9A:46:5D:24:F5:B6:6C:2A:F2:8A:36:08:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/481cb2a2-f993-3240-b148-77d704915144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d7:ce:7d:17:ab:18:27:67:64:04:e8:1d:7f:f8:38:d7:59: 66:5f:b4:e8:e7:fc:dc:07:4f:6b:1d:ca:ff:9e:c9:06:f3:cb: 27:e0:b5:e0:1d:ac:aa:01:94:3a:40:09:4b:72:8f:c6:71:7f: 37:16:ad:f9:94:0a:58:00:18:36:9b:ba:d0:90:62:5d:d2:36: b9:12:e8:cc:ee:ea:15:a1:3a:9c:69:56:c5:7a:53:1c:23:cb: 26:4d:bf:60:83:96:49:fb:2d:e4:20:d6:1c:6b:49:2c:67:a2: 43:b6:f6:36:d7:75:d1:08:e4:3e:b6:1c:ab:1c:7e:15:f8:10: ef:25:af:db:7e:d6:8b:42:53:3a:cb:f9:d0:22:6f:84:d5:29: 25:34:72:7c:c2:77:5a:86:6d:4b:a2:86:47:a8:d8:00:dd:55: a5:19:91:11:34:30:07:aa:a3:6d:e0:1c:80:66:65:1e:34:84: f1:57:72:b7:21:a2:b1:9d:3b:8f:1d:9e:64:05:8e:97:d7:c7: a1:d6:fd:91:a8:75:91:d7:69:49:55:f8:7b:e6:05:46:e0:a2: 58:09:43:98:84:c3:8c:1e:ac:e6:59:82:84:b2:0a:2c:b9:e1: 4e:4f:53:f4:35:e6:b2:48:b0:af:b7:b5:bc:fb:0f:08:be:b0: 79:81:a5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmhWxbBoQNht2pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YTMwNGQ2NmQtMGRlOS00MzM2LWJkOGUtOWM1YjRhNGEwNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Z7Nca6DGgoUdC8YE8CgMQHvcrsRbE1depM JY24/O+lHPncseW62Fa/lKrqGKTQfHSoqPSJJBoxMOEquz835imfU4w43M+KfrbH vrhIuWtAyix7fuRQKeG6o3R5auLeD9q4n0o58vrv/DES1DojDA9a3APTAI//v2jI 1HmZaHEcemqXSkVrcCc8kJWROvk86p/rXiPOhYk17JHIa49PSH/oPFIzMVxQfhby fnZnwdzAfDaat/VF8yb/TilVo3p2aaWZgHQU68FikucoUPcNwynrQZxI4f8ExIfI 49Rm7uuM/EQw8i3PhBye6F8T6vOyiYT/od/34SxzDbzIXagh+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc2fKqcE+KaRl0k9bZsKvKKNgiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDgxY2IyYTItZjk5My0z MjQwLWIxNDgtNzdkNzA0OTE1MTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHXzn0XqxgnZ2QE6B1/+DjXWWZftOjn/NwHT2sdyv+eyQbzyyfgteAd rKoBlDpACUtyj8ZxfzcWrfmUClgAGDabutCQYl3SNrkS6Mzu6hWhOpxpVsV6Uxwj yyZNv2CDlkn7LeQg1hxrSSxnokO29jbXddEI5D62HKscfhX4EO8lr9t+1otCUzrL +dAib4TVKSU0cnzCd1qGbUuihkeo2ADdVaUZkRE0MAeqo23gHIBmZR40hPFXcrch orGdO48dnmQFjpfXx6HW/ZGodZHXaUlV+HvmBUbgolgJQ5iEw4werOZZgoSyCiy5 4U5PU/Q15rJIsK+3tbz7Dwi+sHmBpaQ= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:46 2025 by rpki-client