$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49343fd9-95e5-3bc7-adbf-e92089317401.roa File: 49343fd9-95e5-3bc7-adbf-e92089317401.roa (raw, json) Hash identifier: jgduFC8al5uzVkoADPWtilGc1rkChb/1QAHN5xz3lE4= Subject key identifier: 8D:91:F7:DD:91:9C:84:E8:79:DF:BA:27:9E:80:21:BC:E3:A5:A8:79 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927A029E2459AB24805420 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49343fd9-95e5-3bc7-adbf-e92089317401.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:02:9e:24:59:ab:24:80:54:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=ff56de1f-2ad1-4623-95fd-bcaf767a33e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:19:6a:da:92:2b:75:8c:ed:54:10:ff:c2: a8:14:78:c9:06:9e:e2:90:18:60:1f:99:80:b1:f9: 0a:ed:8b:05:4e:7d:8a:f7:1b:84:5f:32:eb:f1:04: 0c:68:01:54:3a:b6:3d:b4:06:62:82:e6:97:77:7f: 37:cf:de:9f:2e:2a:e6:26:e4:97:d1:8a:99:45:bc: e8:4c:78:ba:69:40:b2:4c:b1:d1:ed:0b:97:02:cd: 8b:0b:e3:5c:72:72:d5:55:d1:d9:07:a1:74:7d:de: e5:2c:ad:c5:04:13:16:99:53:e3:31:29:0b:da:40: 10:c2:8e:09:72:fd:fc:44:6a:32:5e:0f:a2:ce:86: 67:c4:1a:38:53:8d:86:42:3b:9b:e2:13:0a:9d:58: 44:3b:ba:5c:c3:08:ad:f4:02:72:00:b5:d4:64:e5: 53:80:04:0c:ec:3f:ee:5f:8d:50:11:56:8e:2f:df: 50:a5:a6:a9:81:47:b7:47:29:cf:2f:88:25:0b:2e: 7b:3e:fe:07:05:56:a1:a6:d7:7f:10:36:4a:71:45: 29:e3:d0:a0:09:79:df:d4:81:53:e9:0d:82:4d:a3: 05:88:e9:2d:d0:ea:dc:87:8f:0a:2c:32:d8:2c:17: 96:f1:ea:10:68:2c:d3:43:3f:37:bc:bd:58:3f:e3: f9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:F7:DD:91:9C:84:E8:79:DF:BA:27:9E:80:21:BC:E3:A5:A8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/49343fd9-95e5-3bc7-adbf-e92089317401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:42:a3:19:74:90:53:73:cd:7c:67:3a:a2:ee:39:97:a1:4b: 19:d2:2d:78:c7:82:81:b7:51:9e:58:2d:a7:04:a3:ba:7b:27: be:4d:4d:20:d9:76:63:e5:28:85:8d:eb:ab:19:2d:da:9b:c9: 0c:ac:80:53:fe:2a:7b:76:a8:44:80:a0:5d:6f:99:0e:30:fb: c7:62:bc:ce:56:e9:7f:73:b2:41:f0:fe:5a:18:91:cc:81:b5: b5:95:0e:ed:3a:ee:5b:96:58:85:78:f4:33:37:a0:b2:db:8d: e9:41:9f:86:eb:22:d2:0c:c0:80:89:6a:be:c4:af:95:f0:cb: 45:cd:15:6d:1d:b4:4c:f8:fa:07:51:8d:80:9c:d2:04:4b:e6: d6:a4:0a:3b:89:02:ef:87:ed:cd:bc:b9:c5:7a:e5:f6:c2:ac: 9d:64:ef:40:c0:e8:f8:f5:1c:5e:7f:23:e7:de:5a:33:79:d8: e4:91:d7:5b:d9:89:32:8d:87:69:75:0a:b7:d9:fc:73:e8:10: e2:e7:98:c1:90:b5:d6:d0:49:0e:c4:36:13:77:d6:29:9c:d3: 00:92:37:cc:3e:95:ae:ad:be:ac:67:fb:b1:21:03:a0:5e:67: 5c:69:ec:de:cd:f6:88:b5:0c:a2:01:2e:c7:67:82:9a:55:9e: 20:88:a5:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknoCniRZqySAVCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZmY1NmRlMWYtMmFkMS00NjIzLTk1ZmQtYmNhZjc2N2EzM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUwZatqSK3WM7VQQ/8KoFHjJBp7ikBhgH5mA sfkK7YsFTn2K9xuEXzLr8QQMaAFUOrY9tAZiguaXd383z96fLirmJuSX0YqZRbzo THi6aUCyTLHR7QuXAs2LC+NccnLVVdHZB6F0fd7lLK3FBBMWmVPjMSkL2kAQwo4J cv38RGoyXg+izoZnxBo4U42GQjub4hMKnVhEO7pcwwit9AJyALXUZOVTgAQM7D/u X41QEVaOL99QpaapgUe3RynPL4glCy57Pv4HBVahptd/EDZKcUUp49CgCXnf1IFT 6Q2CTaMFiOkt0Orch48KLDLYLBeW8eoQaCzTQz83vL1YP+P5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2R992RnIToed+6J56AIbzjpah5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNDkzNDNmZDktOTVlNS0z YmM3LWFkYmYtZTkyMDg5MzE3NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNCoxl0kFNzzXxnOqLuOZehSxnSLXjHgoG3UZ5YLacEo7p7J75NTSDZ dmPlKIWN66sZLdqbyQysgFP+Knt2qESAoF1vmQ4w+8divM5W6X9zskHw/loYkcyB tbWVDu067luWWIV49DM3oLLbjelBn4brItIMwICJar7Er5Xwy0XNFW0dtEz4+gdR jYCc0gRL5takCjuJAu+H7c28ucV65fbCrJ1k70DA6Pj1HF5/I+feWjN52OSR11vZ iTKNh2l1CrfZ/HPoEOLnmMGQtdbQSQ7ENhN31imc0wCSN8w+la6tvqxn+7EhA6Be Z1xp7N7N9oi1DKIBLsdngppVniCIpQ0= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:51 2025 by rpki-client