$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa File: 6271fc68-ffa1-36e8-986f-5b3f458779fe.roa (raw, json) Hash identifier: jgpExQSFZUrtgMNGH3hFM4HZ6C8oibU+ukSSlhkpKXU= Subject key identifier: 1F:3A:C5:9E:AF:65:CC:E0:06:27:C7:B6:08:FA:C1:95:9B:00:85:00 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19277CE4966B39C7E70DB20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:77:ce:49:66:b3:9c:7e:70:db:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=db853758-54e7-4720-976f-540847ae0c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:45:f2:23:d0:f5:17:08:34:f7:f1:40:05: b0:67:be:38:04:79:ad:b8:9f:63:2f:7b:d0:ed:07: 73:55:e5:5c:c5:15:08:53:15:55:ae:32:f5:f0:b2: 32:25:13:cb:80:cd:07:e6:ab:61:b7:7b:31:f2:a1: 32:e0:f2:0e:38:52:50:41:dc:e4:7a:78:86:03:bf: e5:34:36:57:86:88:83:60:f4:5c:77:eb:3b:21:21: 60:24:78:85:5d:c9:9e:2a:6a:07:78:3b:8e:c8:93: ff:50:ae:38:90:70:c0:7d:ae:d7:65:59:78:c6:0d: 8e:b2:70:6d:5c:fb:6e:18:c1:e4:d1:f2:25:78:41: 37:0a:eb:e6:bf:15:d5:fc:c0:92:c0:47:bf:3f:fc: a4:04:48:55:d3:9f:ac:c1:96:49:7e:5a:e8:57:69: 24:cf:e3:c4:24:3a:34:1d:3e:aa:c3:22:fa:1e:e1: 3e:a5:d5:37:0d:7d:f1:79:85:24:c5:ef:b3:6d:cf: 6c:d2:c3:31:5e:a7:1b:cd:40:86:3b:3f:2d:d1:6b: 14:cc:1c:cf:3f:d8:c1:d3:a8:71:fd:ad:ca:7b:f1: c9:fd:4b:ab:8b:ed:fa:e2:08:e2:ed:31:c0:26:9d: 70:ce:48:ce:f9:44:36:80:87:25:b2:2a:e6:03:be: 7d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3A:C5:9E:AF:65:CC:E0:06:27:C7:B6:08:FA:C1:95:9B:00:85:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6271fc68-ffa1-36e8-986f-5b3f458779fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0b:58:48:ab:98:b0:aa:85:9b:6e:24:8b:4b:a2:dc:de:e1: e6:5c:47:97:c8:bd:32:d2:85:6f:6f:e5:33:9d:61:94:36:31: 6e:2e:09:be:06:ca:48:f0:9a:99:82:60:dc:3e:20:db:6c:56: 3a:3c:86:7c:69:9c:5c:ea:78:c9:65:57:a4:c0:cc:0f:25:0c: bc:91:e2:25:91:de:56:c1:3f:16:20:18:75:21:54:5b:8a:25: 2a:9c:2d:84:f6:1b:a0:b4:a3:ca:e6:de:9a:8e:9f:6f:35:54: 4a:f2:a2:fc:62:22:8e:fd:22:9e:e5:93:ab:52:57:bd:04:c5: 8a:c7:35:02:72:18:1c:33:0f:af:9c:57:de:03:27:03:ff:e8: 19:9b:23:41:fa:18:7b:f1:5c:2c:60:f4:a1:b5:e7:39:c8:b1: 5e:44:f9:01:ac:57:93:1c:aa:e8:92:28:27:92:c0:1d:b9:04: eb:4f:97:d1:08:e6:71:00:06:af:84:be:81:8e:22:c7:6f:3c: 87:8e:19:dd:75:bf:a1:c6:6b:e5:9b:de:32:9c:95:3d:f6:ef: 2f:77:a8:3a:81:0c:2b:c1:b8:4d:fd:e6:24:98:2c:f4:2d:93: f9:9f:16:b5:8b:43:45:9a:aa:19:d5:4c:52:be:85:c0:56:d5: 92:ea:ff:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknfOSWaznH5w2yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGI4NTM3NTgtNTRlNy00NzIwLTk3NmYtNTQwODQ3YWUwYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34ZF8iPQ9RcINPfxQAWwZ744BHmtuJ9jL3vQ 7QdzVeVcxRUIUxVVrjL18LIyJRPLgM0H5qtht3sx8qEy4PIOOFJQQdzkeniGA7/l NDZXhoiDYPRcd+s7ISFgJHiFXcmeKmoHeDuOyJP/UK44kHDAfa7XZVl4xg2OsnBt XPtuGMHk0fIleEE3CuvmvxXV/MCSwEe/P/ykBEhV05+swZZJflroV2kkz+PEJDo0 HT6qwyL6HuE+pdU3DX3xeYUkxe+zbc9s0sMxXqcbzUCGOz8t0WsUzBzPP9jB06hx /a3Ke/HJ/Uuri+364gji7THAJp1wzkjO+UQ2gIclsirmA759gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB86xZ6vZczgBifHtgj6wZWbAIUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNjI3MWZjNjgtZmZhMS0z NmU4LTk4NmYtNWIzZjQ1ODc3OWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGULWEirmLCqhZtuJItLotze4eZcR5fIvTLShW9v5TOdYZQ2MW4uCb4G ykjwmpmCYNw+INtsVjo8hnxpnFzqeMllV6TAzA8lDLyR4iWR3lbBPxYgGHUhVFuK JSqcLYT2G6C0o8rm3pqOn281VEryovxiIo79Ip7lk6tSV70ExYrHNQJyGBwzD6+c V94DJwP/6BmbI0H6GHvxXCxg9KG15znIsV5E+QGsV5McquiSKCeSwB25BOtPl9EI 5nEABq+EvoGOIsdvPIeOGd11v6HGa+Wb3jKclT327y93qDqBDCvBuE395iSYLPQt k/mfFrWLQ0WaqhnVTFK+hcBW1ZLq/9w= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:52 2025 by rpki-client