$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa File: 6cd43715-9705-3e6e-b8f7-121e94276a7e.roa (raw, json) Hash identifier: jh03fElR5Ie1tOtlq3mWE6Zh4L9F0K+hSDrWlSiMMaw= Subject key identifier: 8B:B1:1F:B8:81:E7:43:1A:CA:9D:E8:AC:73:9E:4C:C3:C6:5A:5F:90 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D10439D7BEE1C9B3C1700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:10:43:9d:7b:ee:1c:9b:3c:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=979986d9-3a64-4f90-8f9c-640386769c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cd:82:07:66:ee:6b:8a:bf:1f:95:f2:96:eb: e5:6f:bc:8d:a0:07:63:08:50:1c:20:6b:f7:45:79: b1:87:9e:80:4b:9b:21:73:fc:d6:ed:b9:d0:70:68: 8f:93:5d:09:0a:2b:1c:9d:ae:94:47:31:fa:7d:db: dc:02:eb:c4:ad:7e:43:40:0f:05:bb:22:1f:06:51: 6f:47:3e:7e:22:58:ce:0b:70:9c:1e:5b:25:21:74: 21:89:31:8a:ac:3d:86:ad:d0:34:d1:05:24:58:a1: 28:00:50:e9:7a:e5:2b:a3:e7:c9:f2:f6:85:21:49: 4c:75:f7:d2:a9:3a:f1:99:dd:93:36:fc:ea:c8:13: 7d:82:92:ca:49:df:fb:40:c9:60:0b:6a:6e:50:49: e2:5a:45:21:e1:f7:90:33:14:37:61:89:b8:6c:0e: df:23:20:6c:b0:4d:7c:fb:c6:df:85:f8:81:ab:6d: 74:ff:87:81:f0:82:86:dc:20:50:63:ae:a1:e3:06: fc:6b:dc:0e:74:3d:90:5b:3f:86:77:20:19:30:ff: 63:44:4e:78:b2:29:d0:31:8f:ca:b2:09:b2:3d:b6: 28:34:bd:b6:6f:00:d6:78:54:73:fa:77:d8:47:71: 0a:6d:53:8e:57:2b:2b:dd:7a:6c:76:73:c7:05:ee: 83:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B1:1F:B8:81:E7:43:1A:CA:9D:E8:AC:73:9E:4C:C3:C6:5A:5F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6cd43715-9705-3e6e-b8f7-121e94276a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:4a:7e:31:e6:08:76:aa:cf:6a:c4:4c:4e:d4:96:ec:05:d3: 2d:99:6b:7c:02:18:2e:31:81:a7:10:48:f8:67:75:f5:e3:fa: 78:0a:20:dc:86:a6:8f:be:5d:c3:fd:6d:a0:58:6e:f5:0e:35: ad:6e:90:95:82:ea:b5:c7:a9:e1:78:3d:ec:2e:2c:5c:7a:23: ae:41:ab:a5:22:70:c7:77:82:3e:24:46:19:23:80:be:a8:0c: 4a:7b:83:2a:5b:d2:9c:1a:7b:65:68:6e:ba:a7:13:45:24:3c: 28:1d:24:48:01:18:f1:f4:b8:89:cc:c4:09:05:ca:8b:be:3c: 91:23:08:dd:3c:d7:52:e2:78:59:68:ab:a6:82:1e:77:32:d2: b5:7f:2b:89:5f:4a:af:cb:6e:08:d8:ab:b4:e0:0d:4f:bf:65: 5d:37:9b:00:bc:46:75:b6:69:fd:72:88:45:de:4c:b7:77:6a: 46:8e:33:60:47:19:63:d6:d0:76:7f:fa:f7:17:57:b0:78:fd: 8c:3a:39:e3:9f:8b:30:c5:fc:24:d6:97:b8:0d:91:26:b1:37: 68:5a:d1:14:85:48:ed:af:c1:6c:b6:17:f9:74:b9:f4:ff:63: 73:fd:ad:f5:00:bc:b2:bc:18:95:02:d2:6a:3c:b9:7f:90:19: a7:96:19:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRBDnXvuHJs8FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OTc5OTg2ZDktM2E2NC00ZjkwLThmOWMtNjQwMzg2NzY5YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM2CB2bua4q/H5Xyluvlb7yNoAdjCFAcIGv3 RXmxh56AS5shc/zW7bnQcGiPk10JCiscna6URzH6fdvcAuvErX5DQA8FuyIfBlFv Rz5+IljOC3CcHlslIXQhiTGKrD2GrdA00QUkWKEoAFDpeuUro+fJ8vaFIUlMdffS qTrxmd2TNvzqyBN9gpLKSd/7QMlgC2puUEniWkUh4feQMxQ3YYm4bA7fIyBssE18 +8bfhfiBq210/4eB8IKG3CBQY66h4wb8a9wOdD2QWz+GdyAZMP9jRE54sinQMY/K sgmyPbYoNL22bwDWeFRz+nfYR3EKbVOOVysr3XpsdnPHBe6DCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuxH7iB50Mayp3orHOeTMPGWl+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmNkNDM3MTUtOTcwNS0z ZTZlLWI4ZjctMTIxZTk0Mjc2YTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5KfjHmCHaqz2rETE7UluwF0y2Za3wCGC4xgacQSPhndfXj+ngKINyG po++XcP9baBYbvUONa1ukJWC6rXHqeF4PewuLFx6I65Bq6UicMd3gj4kRhkjgL6o DEp7gypb0pwae2VobrqnE0UkPCgdJEgBGPH0uInMxAkFyou+PJEjCN0811LieFlo q6aCHncy0rV/K4lfSq/LbgjYq7TgDU+/ZV03mwC8RnW2af1yiEXeTLd3akaOM2BH GWPW0HZ/+vcXV7B4/Yw6OeOfizDF/CTWl7gNkSaxN2ha0RSFSO2vwWy2F/l0ufT/ Y3P9rfUAvLK8GJUC0mo8uX+QGaeWGR0= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:21 2025 by rpki-client