$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa File: 4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa (raw, json) Hash identifier: lfIIdI/5x8bDC0T4fAivb4k/yX21zOPaqRdyjZO3Rho= Subject key identifier: 99:7D:BF:86:F8:82:40:39:88:C4:A1:AF:96:75:F7:76:AF:63:29:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932779EFAF1359DB306B1C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:77:9e:fa:f1:35:9d:b3:06:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=a55e723d-85c5-4401-9ac1-14cbbb40a9d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:fe:1f:40:2b:f9:87:96:17:12:0a:23:97: 8a:84:ee:b1:11:84:00:43:6e:12:92:a1:ad:2a:47: 33:8c:85:3d:98:4e:8c:8b:77:74:2d:aa:6d:da:f4: 2e:1c:7f:49:82:cc:bf:35:64:1b:a6:79:c3:77:ae: 75:f7:e5:44:b3:2b:f2:62:1f:b6:ec:fd:95:d0:a2: 3e:6c:59:d2:fd:ad:d4:33:a9:fc:bd:01:55:bd:23: cc:35:54:92:9a:62:83:ce:0f:8d:71:9c:87:0e:b0: 4d:73:ee:a4:9e:b4:44:6d:77:40:b0:f5:70:78:aa: 77:f9:8c:3d:ad:3e:1a:89:0a:7d:f1:cb:7c:04:78: e6:3a:a5:43:b2:07:0c:98:7f:df:e2:33:b8:31:3c: 7a:c6:ad:e7:e7:07:af:6f:8d:cf:92:cd:9e:4e:6f: 3c:df:f0:17:3f:c6:a3:29:c4:d8:31:e9:36:e5:4a: f7:eb:25:c7:3e:de:fa:4c:72:df:90:81:37:a0:3d: 9e:6a:5a:ac:77:a3:d2:96:50:2d:03:d6:83:d0:60: f4:e2:3c:05:10:69:3b:a7:53:2f:25:cc:31:df:2f: d0:60:a9:40:0e:51:3c:50:7a:8c:5a:d7:86:d7:e0: 6c:8e:67:37:d0:39:54:b1:05:bd:7c:59:a7:70:5f: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7D:BF:86:F8:82:40:39:88:C4:A1:AF:96:75:F7:76:AF:63:29:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4f0aaf67-ae8d-335c-a0a5-f0380a201c60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:36:27:0a:a8:f0:3e:42:2d:5d:f5:00:6f:e1:4c:66:69:9a: 31:f8:f9:cc:1b:27:51:0f:0a:69:8e:d3:39:3a:53:e1:6d:02: 98:78:b0:ad:e6:0a:0f:e4:f9:8c:f8:6c:a1:0b:66:38:06:9a: cc:38:90:16:23:98:4e:b6:2d:e9:1f:2f:42:3f:90:88:a7:26: 57:e8:13:4f:9e:f2:4c:8e:2d:d6:b4:1b:44:8e:e0:c6:65:d9: 0d:a6:c6:c3:ff:9f:23:03:ec:3b:14:b7:1f:bc:1a:b2:96:37: 3e:b5:a2:33:07:71:41:49:56:ac:37:3b:e9:b2:d8:24:ed:c5: 9c:a4:13:74:9e:9e:a7:b9:dd:fa:7c:89:50:63:9d:c6:5f:2e: c7:b2:09:a7:c3:62:f7:0a:fe:66:c2:9f:87:23:63:05:69:c0: 5b:6c:fe:ef:54:d6:c9:3a:db:66:4d:be:f7:f7:04:95:fc:94: 9e:c7:ca:f7:df:e6:73:be:bd:8b:81:29:46:16:66:6a:b2:1b: eb:eb:ab:c6:07:7b:2b:75:70:7d:e3:06:12:c2:81:76:c9:fc: e1:1a:fe:48:f4:93:30:08:40:ac:10:2c:98:99:6f:6e:45:c3: 91:4b:5c:3d:b6:c9:05:99:34:5d:bd:a8:01:ed:a5:24:a9:27: 83:b5:67:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMnee+vE1nbMGscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YTU1ZTcyM2QtODVjNS00NDAxLTlhYzEtMTRjYmJiNDBhOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeP+H0Ar+YeWFxIKI5eKhO6xEYQAQ24SkqGt KkczjIU9mE6Mi3d0Lapt2vQuHH9Jgsy/NWQbpnnDd6519+VEsyvyYh+27P2V0KI+ bFnS/a3UM6n8vQFVvSPMNVSSmmKDzg+NcZyHDrBNc+6knrREbXdAsPVweKp3+Yw9 rT4aiQp98ct8BHjmOqVDsgcMmH/f4jO4MTx6xq3n5wevb43Pks2eTm883/AXP8aj KcTYMek25Ur36yXHPt76THLfkIE3oD2ealqsd6PSllAtA9aD0GD04jwFEGk7p1Mv Jcwx3y/QYKlADlE8UHqMWteG1+Bsjmc30DlUsQW9fFmncF+JuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl9v4b4gkA5iMShr5Z193avYykiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGYwYWFmNjctYWU4ZC0z MzVjLWEwYTUtZjAzODBhMjAxYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHM2Jwqo8D5CLV31AG/hTGZpmjH4+cwbJ1EPCmmO0zk6U+FtAph4sK3m Cg/k+Yz4bKELZjgGmsw4kBYjmE62LekfL0I/kIinJlfoE0+e8kyOLda0G0SO4MZl 2Q2mxsP/nyMD7DsUtx+8GrKWNz61ojMHcUFJVqw3O+my2CTtxZykE3Senqe53fp8 iVBjncZfLseyCafDYvcK/mbCn4cjYwVpwFts/u9U1sk622ZNvvf3BJX8lJ7Hyvff 5nO+vYuBKUYWZmqyG+vrq8YHeyt1cH3jBhLCgXbJ/OEa/kj0kzAIQKwQLJiZb25F w5FLXD22yQWZNF29qAHtpSSpJ4O1Z5U= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:54 2025 by rpki-client