$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c880581-9ed2-33c3-b3ba-3757d2e49fde.roa File: 4c880581-9ed2-33c3-b3ba-3757d2e49fde.roa (raw, json) Hash identifier: FhcCwVUGsRA6SNhIKqHXa5ghTKYmGL+HV664t/AmHQc= Subject key identifier: 55:61:BF:CB:6B:7A:C6:1F:D2:A7:7C:17:25:DA:BD:3B:54:21:A0:51 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192693E41AF3F6861D9EDC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c880581-9ed2-33c3-b3ba-3757d2e49fde.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:69:3e:41:af:3f:68:61:d9:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=5452b283-a350-4413-bc79-a3a618df2803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:6a:d0:a4:b1:15:81:39:00:e2:d6:5b:63: d8:b0:c8:58:98:57:12:bf:ce:4c:f8:4a:a7:83:38: 74:42:2e:41:67:36:1b:92:cf:96:bf:81:d9:98:ca: 33:70:f1:98:ee:a9:11:07:d8:06:57:27:a5:cf:cf: a4:33:a7:c6:25:1e:21:a6:e7:dd:3c:5b:33:db:dd: 63:09:f0:a3:0f:07:44:00:f2:46:1c:17:df:fe:89: c7:70:22:af:da:8e:41:33:59:6b:e1:1e:c7:c5:53: fa:22:98:19:5a:33:84:a9:95:c5:03:86:14:28:33: 3e:63:e7:3a:9a:70:5d:e5:73:59:04:f7:6b:d6:88: f1:d6:1a:03:5c:8e:6f:26:5d:24:b8:fe:d0:f2:0b: 7b:c0:f3:c2:1d:f8:1a:f9:35:4d:0a:7c:5b:73:80: df:3d:52:ca:42:0f:8f:15:14:d7:34:f2:3c:5e:6c: 3e:ea:4f:9c:7c:8e:2a:24:1b:c4:8f:ea:a1:04:ba: d1:af:c9:1c:93:36:ea:64:a9:92:34:7d:e0:8f:90: ed:33:5f:cf:e8:01:e8:28:05:9d:ea:e2:ed:6a:4f: f9:63:dc:c4:20:d9:73:7a:aa:dd:97:33:8f:55:07: 3f:41:04:d6:ab:a4:c9:6a:cb:b9:dc:22:9b:ba:7c: a6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:61:BF:CB:6B:7A:C6:1F:D2:A7:7C:17:25:DA:BD:3B:54:21:A0:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4c880581-9ed2-33c3-b3ba-3757d2e49fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0b:95:a1:4b:76:46:2d:fd:7f:0b:8e:dd:ce:57:55:69:88: 1f:25:6a:9d:81:ca:24:49:a6:00:42:be:21:d6:b1:49:5a:86: 1d:df:68:d9:6d:73:f9:b3:7d:79:17:51:cd:d7:51:82:63:1b: 33:d7:86:47:da:e6:58:44:05:27:b0:9c:b7:03:61:9b:52:61: a5:69:05:8e:be:65:5e:67:b5:83:c7:ed:77:70:e9:d7:3e:b4: 97:6a:8c:df:ef:bf:7a:9a:ff:f6:0b:e8:38:97:5b:8a:45:26: d3:37:54:96:8a:27:18:39:7f:66:50:74:a9:d6:8a:de:23:a3: 4a:6c:36:16:31:4f:7e:6f:13:8a:e1:59:24:eb:be:bf:82:7b: 02:53:26:46:f4:65:f8:05:59:45:8d:4e:60:67:e7:e4:5d:95: 02:75:1c:81:fa:c9:5d:7c:88:1c:f1:66:6f:fb:89:40:55:b2: b4:02:d7:ae:71:ae:08:a9:c8:fc:e0:05:00:78:4c:38:fb:86: f7:8f:ec:9c:ee:24:30:04:38:93:c0:7c:ac:6c:67:25:a4:bd: b5:7e:4f:64:b1:8f:91:b7:d6:ee:9d:8f:b7:5e:bd:2d:60:cd: 4c:e8:cb:2a:0f:42:48:91:38:35:fb:eb:39:7d:f2:fd:80:df: b3:8f:e6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmk+Qa8/aGHZ7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NTQ1MmIyODMtYTM1MC00NDEzLWJjNzktYTNhNjE4ZGYyODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9q0KSxFYE5AOLWW2PYsMhYmFcSv85M+Eqn gzh0Qi5BZzYbks+Wv4HZmMozcPGY7qkRB9gGVyelz8+kM6fGJR4hpufdPFsz291j CfCjDwdEAPJGHBff/onHcCKv2o5BM1lr4R7HxVP6IpgZWjOEqZXFA4YUKDM+Y+c6 mnBd5XNZBPdr1ojx1hoDXI5vJl0kuP7Q8gt7wPPCHfga+TVNCnxbc4DfPVLKQg+P FRTXNPI8Xmw+6k+cfI4qJBvEj+qhBLrRr8kckzbqZKmSNH3gj5DtM1/P6AHoKAWd 6uLtak/5Y9zEINlzeqrdlzOPVQc/QQTWq6TJasu53CKbunym7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVhv8tresYf0qd8FyXavTtUIaBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGM4ODA1ODEtOWVkMi0z M2MzLWIzYmEtMzc1N2QyZTQ5ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYLlaFLdkYt/X8Ljt3OV1VpiB8lap2ByiRJpgBCviHWsUlahh3faNlt c/mzfXkXUc3XUYJjGzPXhkfa5lhEBSewnLcDYZtSYaVpBY6+ZV5ntYPH7Xdw6dc+ tJdqjN/vv3qa//YL6DiXW4pFJtM3VJaKJxg5f2ZQdKnWit4jo0psNhYxT35vE4rh WSTrvr+CewJTJkb0ZfgFWUWNTmBn5+RdlQJ1HIH6yV18iBzxZm/7iUBVsrQC165x rgipyPzgBQB4TDj7hveP7JzuJDAEOJPAfKxsZyWkvbV+T2Sxj5G31u6dj7devS1g zUzoyyoPQkiRODX76zl98v2A37OP5ig= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:25 2025 by rpki-client