$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4a8b63-0986-337f-8ba2-df66a2fe6d6c.roa File: 5c4a8b63-0986-337f-8ba2-df66a2fe6d6c.roa (raw, json) Hash identifier: AfO1pW1CY2CLm7k3l2k23Hg4o2FhAT8SlYuZg8xFgDQ= Subject key identifier: 20:3F:1E:51:12:3C:AE:D2:1B:28:74:F9:F2:32:09:04:42:62:DF:8A Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19279B744C30E7C19FB6E80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4a8b63-0986-337f-8ba2-df66a2fe6d6c.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:79:b7:44:c3:0e:7c:19:fb:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9d9e5779-91ba-4e6d-a2a2-8d92e9e1b9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:89:a3:48:2c:bb:ff:c4:bf:ba:a6:48:53: 20:d0:df:c3:98:6f:6e:c9:fa:c0:c1:d6:42:e8:91: 37:fd:6b:5b:56:14:1f:75:64:97:c4:a5:3d:75:54: 31:32:e8:93:9d:2f:71:e1:8b:ab:98:04:ac:20:cd: bf:6a:46:1f:40:5e:1b:df:6b:1c:bc:c2:24:8e:8d: 60:59:9e:bc:4f:19:32:94:8a:e2:dc:f7:bd:06:84: 6c:70:89:d7:0c:ca:4c:ea:41:b8:66:1d:50:f9:7e: 19:f4:ae:ea:e9:17:d4:62:ab:bc:3d:d6:bb:a4:96: 67:90:15:69:c2:2d:f6:d4:42:c1:b5:02:cb:35:89: 8e:ee:36:98:0d:d3:b9:e1:f2:35:6f:67:b3:8f:9c: cd:ca:c2:65:d8:5d:5a:01:b9:16:be:08:8b:c6:60: 41:dd:f0:78:ab:bb:ab:58:d3:08:5d:f8:e2:a2:13: 3e:dd:1c:bf:f6:3d:f4:de:c0:2f:15:b1:31:14:31: f2:2d:a7:d7:e2:a6:83:7e:23:13:c7:7c:b1:85:cd: 3c:66:64:94:a0:a8:4c:77:4f:18:18:0c:12:fd:d2: c5:d8:5c:61:6b:08:74:34:3e:25:f7:9e:e9:88:fc: 93:80:6a:fd:19:f8:ec:2e:71:cb:d7:67:4f:e0:3b: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3F:1E:51:12:3C:AE:D2:1B:28:74:F9:F2:32:09:04:42:62:DF:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c4a8b63-0986-337f-8ba2-df66a2fe6d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9b:ad:b4:a4:cd:d0:14:d0:f8:02:e7:fd:57:01:aa:72:36: e8:60:0d:a1:7f:74:0f:99:b5:93:4b:df:7d:8c:e2:09:7e:6d: 00:5d:23:a2:eb:82:77:fc:37:e1:7b:fb:81:bb:be:a3:41:1f: 6e:37:bc:ae:69:51:bc:5d:23:d7:f7:6c:d1:bc:a1:0f:b5:d8: ef:6d:0b:d5:9c:8e:c3:5f:b2:e4:5b:90:d4:41:38:b9:96:34: ed:aa:1d:e5:d5:51:83:1a:7f:92:b5:9c:ab:59:60:6e:39:74: 48:41:ec:d1:ba:b4:f6:65:a1:88:60:66:5f:b2:fc:d0:c6:4e: 6a:dc:85:9d:d6:a9:ab:ec:bc:fb:99:6d:fc:66:e7:ed:34:f7: a4:cb:2c:24:ce:6e:03:dd:c7:fe:1d:ff:b5:c2:e8:57:de:81: d4:ad:e1:2d:be:ec:88:34:47:b0:67:96:23:dd:b7:09:e5:ef: 71:87:59:34:2b:33:1f:4b:5d:0c:9b:ea:a1:ba:71:b4:2d:1a: 78:5b:52:46:c9:37:d5:7e:8b:bc:ce:8e:b0:5e:23:8b:c0:01: 0c:38:9d:38:dd:e0:82:dd:5d:7d:b8:c3:29:f1:a1:92:29:18: 07:97:de:50:37:07:ae:bc:ab:a9:ba:b8:ff:b4:a1:dd:e4:70: 58:f6:44:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknm3RMMOfBn7boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OWQ5ZTU3NzktOTFiYS00ZTZkLWEyYTItOGQ5MmU5ZTFiOWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWuJo0gsu//Ev7qmSFMg0N/DmG9uyfrAwdZC 6JE3/WtbVhQfdWSXxKU9dVQxMuiTnS9x4YurmASsIM2/akYfQF4b32scvMIkjo1g WZ68TxkylIri3Pe9BoRscInXDMpM6kG4Zh1Q+X4Z9K7q6RfUYqu8Pda7pJZnkBVp wi321ELBtQLLNYmO7jaYDdO54fI1b2ezj5zNysJl2F1aAbkWvgiLxmBB3fB4q7ur WNMIXfjiohM+3Ry/9j303sAvFbExFDHyLafX4qaDfiMTx3yxhc08ZmSUoKhMd08Y GAwS/dLF2Fxhawh0ND4l957piPyTgGr9GfjsLnHL12dP4DvfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA/HlESPK7SGyh0+fIyCQRCYt+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWM0YThiNjMtMDk4Ni0z MzdmLThiYTItZGY2NmEyZmU2ZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKbrbSkzdAU0PgC5/1XAapyNuhgDaF/dA+ZtZNL332M4gl+bQBdI6Lr gnf8N+F7+4G7vqNBH243vK5pUbxdI9f3bNG8oQ+12O9tC9WcjsNfsuRbkNRBOLmW NO2qHeXVUYMaf5K1nKtZYG45dEhB7NG6tPZloYhgZl+y/NDGTmrchZ3WqavsvPuZ bfxm5+0096TLLCTObgPdx/4d/7XC6FfegdSt4S2+7Ig0R7BnliPdtwnl73GHWTQr Mx9LXQyb6qG6cbQtGnhbUkbJN9V+i7zOjrBeI4vAAQw4nTjd4ILdXX24wynxoZIp GAeX3lA3B668q6m6uP+0od3kcFj2RPs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:41 2025 by rpki-client