$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa File: 5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa (raw, json) Hash identifier: DPS8rTBsqqSxUositBS9/dDCVdNuD0TeUnVmHa3t1u8= Subject key identifier: 12:AA:3E:62:DE:5E:31:9F:1D:53:4B:A3:5C:26:63:3D:0C:F8:9E:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD07614FE51DAF97018760 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:07:61:4f:e5:1d:af:97:01:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=5fdb549b-fcb3-4996-8065-89348c330a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e7:97:15:ab:e9:78:3f:2a:f7:63:52:6c:6b: 7a:a6:33:b9:57:69:03:b2:b4:b0:6e:ff:52:61:b9: 7f:84:b9:e5:6d:1d:eb:42:fe:ac:c6:61:e6:16:d6: ab:44:0e:6e:6c:8e:ff:98:2c:31:7c:58:7f:4f:34: 6c:01:94:54:25:ea:ff:7c:3e:bd:7e:89:ad:3d:c4: 9b:f9:50:cb:7e:74:94:3c:d0:14:1b:3b:1c:c8:23: 06:40:03:62:39:96:5b:fe:54:ba:b7:d9:c5:17:84: 70:df:55:7a:89:c3:71:86:c5:15:c5:8c:1e:85:e3: d3:76:e2:a0:cb:b2:08:ae:51:07:9f:26:ef:b0:2a: 6a:b0:80:0c:42:76:24:49:67:b6:77:3e:25:f1:ea: 5c:43:f7:10:3d:08:d6:00:41:68:ac:a8:d6:18:52: 0e:62:43:01:af:b7:1e:48:ee:18:b7:ad:e9:28:50: 27:93:e8:20:10:a4:93:58:12:5e:91:cb:e4:39:d3: 6e:d5:9d:37:0a:73:00:ef:3c:43:f7:4d:a2:3c:d9: cf:aa:a4:e2:c7:fa:10:21:36:cb:8b:ee:63:c5:26: 60:d9:d4:53:71:e5:ad:71:bb:5e:05:c8:66:17:2b: e6:eb:d3:39:0c:31:2d:61:69:8f:8d:42:d4:6e:57: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AA:3E:62:DE:5E:31:9F:1D:53:4B:A3:5C:26:63:3D:0C:F8:9E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5e2e2ee0-20e2-3fe6-8067-7b570436fc64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b6:d1:1f:e1:8f:3f:2f:85:d5:d3:0f:b4:d7:c8:d5:d5:a1: 2f:41:cb:86:0a:ec:c9:ea:80:59:d4:a3:ce:e1:dd:3d:13:b3: 9f:d3:53:dd:12:f8:85:ca:df:23:92:41:ac:61:2d:70:ac:d4: 03:5b:b2:c2:db:ca:e3:57:8a:40:69:51:1a:7f:61:bf:e9:66: 67:8d:02:f5:7c:bb:2d:0a:6f:d2:da:f2:44:9d:2b:77:67:db: 8f:c0:e4:4a:25:ce:d4:4e:21:e2:49:4d:7c:43:8b:33:2f:ac: 98:3d:60:25:ad:b1:f8:6b:ec:e3:08:a4:dc:df:e9:46:42:e9: 39:76:e4:30:24:f2:22:4f:f7:46:95:3f:4f:20:fc:12:46:96: 01:c4:2e:ca:4c:bc:a1:dc:66:97:3a:59:ea:b2:9d:38:75:88: dd:94:3c:cd:cb:49:0f:1c:c8:b5:d6:d0:ea:77:ca:85:15:6f: 42:ac:9b:03:c7:ac:31:7e:44:90:0b:aa:5e:0b:1f:11:1b:e1: 2c:8a:25:f9:75:20:b8:19:73:de:46:60:a3:4e:22:19:87:fc: f6:16:10:8a:7a:10:64:cc:fa:49:f4:27:df:ae:e6:5b:da:d0: e3:12:82:3e:d2:3f:b0:e8:e2:5c:9d:60:ea:3d:3e:71:d1:cb: 29:fc:56:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQdhT+Udr5cBh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NWZkYjU0OWItZmNiMy00OTk2LTgwNjUtODkzNDhjMzMwYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeeXFavpeD8q92NSbGt6pjO5V2kDsrSwbv9S Ybl/hLnlbR3rQv6sxmHmFtarRA5ubI7/mCwxfFh/TzRsAZRUJer/fD69fomtPcSb +VDLfnSUPNAUGzscyCMGQANiOZZb/lS6t9nFF4Rw31V6icNxhsUVxYwehePTduKg y7IIrlEHnybvsCpqsIAMQnYkSWe2dz4l8epcQ/cQPQjWAEForKjWGFIOYkMBr7ce SO4Yt63pKFAnk+ggEKSTWBJekcvkOdNu1Z03CnMA7zxD902iPNnPqqTix/oQITbL i+5jxSZg2dRTceWtcbteBchmFyvm69M5DDEtYWmPjULUbleHDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKqPmLeXjGfHVNLo1wmYz0M+J49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWUyZTJlZTAtMjBlMi0z ZmU2LTgwNjctN2I1NzA0MzZmYzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+20R/hjz8vhdXTD7TXyNXVoS9By4YK7MnqgFnUo87h3T0Ts5/TU90S +IXK3yOSQaxhLXCs1ANbssLbyuNXikBpURp/Yb/pZmeNAvV8uy0Kb9La8kSdK3dn 24/A5EolztROIeJJTXxDizMvrJg9YCWtsfhr7OMIpNzf6UZC6Tl25DAk8iJP90aV P08g/BJGlgHELspMvKHcZpc6WeqynTh1iN2UPM3LSQ8cyLXW0Op3yoUVb0KsmwPH rDF+RJALql4LHxEb4SyKJfl1ILgZc95GYKNOIhmH/PYWEIp6EGTM+kn0J9+u5lva 0OMSgj7SP7Do4lydYOo9PnHRyyn8VjI= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:41 2025 by rpki-client