$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa File: 78682fb8-444e-3bcc-92fd-5c188484d002.roa (raw, json) Hash identifier: bf3NDcFo1K+/9Ofu3BZNQghEfFkwiOwc1rVrzTa78s8= Subject key identifier: 48:23:A0:AF:28:75:F6:80:8F:37:E4:03:CD:9E:5F:21:33:AC:F7:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CCF9CF91A8CA98128DC680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:f9:cf:91:a8:ca:98:12:8d:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=4c369f03-ec1e-4784-b369-fb2ccfb39931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fd:5c:25:05:a8:ea:39:c5:87:ee:2b:00:a1: af:fb:5c:a5:e7:5e:81:f2:38:e7:9d:5b:be:2c:aa: 93:0f:d3:b4:c8:68:4f:3b:f5:0e:d9:26:85:b5:1e: 13:d7:0d:17:92:d6:18:e4:c4:c3:4a:47:24:5c:97: 2c:fe:d9:36:2b:53:ea:59:e4:63:5f:6f:e8:ea:13: fa:86:b1:94:dd:52:70:4b:e8:62:60:be:4a:a3:2c: d0:7c:73:a2:d7:d9:8e:9e:49:fb:11:f3:dc:2c:76: 45:84:09:ff:ec:40:13:f5:14:d2:a7:e6:5a:5f:9f: 1a:37:1a:1d:01:d4:fe:70:bc:63:98:d6:7f:6b:aa: f9:d3:4a:08:00:d4:04:e9:d9:16:9c:34:ba:5f:01: b5:e8:18:f1:72:05:a4:02:3d:90:ad:dd:b5:c5:71: 0c:ff:14:ab:dc:ad:78:78:6c:14:3d:40:df:39:df: d2:ff:ec:52:27:72:d6:5b:1d:5d:f3:e6:b1:fd:69: 13:42:e9:ea:aa:38:26:08:0b:65:54:04:99:41:a8: 12:63:d1:b5:e1:c5:df:af:d7:7d:f7:39:b1:16:9c: 94:fb:5d:7a:a2:f8:7f:25:a3:10:93:00:a1:04:a0: b7:e8:38:92:9c:b7:01:9c:5b:96:61:50:ad:0a:b6: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:A0:AF:28:75:F6:80:8F:37:E4:03:CD:9E:5F:21:33:AC:F7:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/78682fb8-444e-3bcc-92fd-5c188484d002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:81:2d:fb:c6:d2:ea:30:0b:f1:bf:bc:1a:8b:1a:12:b8:0d: 5e:c9:ba:4e:3d:d4:9c:ff:11:52:a8:5e:ca:55:d0:13:c8:02: dd:1c:c6:2d:65:fb:54:bd:cb:2e:be:51:5e:c8:82:5e:2e:4e: 23:0e:2a:ff:6d:a9:29:2b:33:11:f2:a5:31:c2:bb:e0:73:de: c0:3d:23:1e:8c:56:35:26:96:27:38:06:4d:f2:63:9c:b6:46: 6b:d2:a3:0f:a2:91:3c:dc:77:79:3b:bc:da:03:7c:37:d2:bb: 2d:10:0b:77:07:9d:78:31:5f:f3:c6:99:f4:8b:0f:f1:aa:7e: 33:e0:16:ab:b4:44:27:5a:71:c0:37:21:8f:b7:e9:20:47:56: 26:96:87:4a:93:28:ac:08:0b:39:f0:61:b0:80:a0:5e:83:55: 47:f1:49:91:f1:33:3e:e0:07:1a:65:b5:54:51:74:20:9a:e1: 22:e1:a3:8b:26:e2:61:44:77:28:a1:e0:46:18:83:5a:60:db: d4:fc:f6:e6:db:dc:af:a4:a9:c2:32:46:cf:b4:63:a0:c3:96: 7c:e3:0d:b7:e8:2f:0e:c7:42:12:73:39:bd:0f:02:5f:63:07: 4f:72:dc:76:d2:c8:e2:58:a0:ee:6c:1b:35:51:b0:a9:25:14: 84:fe:af:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzPnPkajKmBKNxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGMzNjlmMDMtZWMxZS00Nzg0LWIzNjktZmIyY2NmYjM5OTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/1cJQWo6jnFh+4rAKGv+1yl516B8jjnnVu+ LKqTD9O0yGhPO/UO2SaFtR4T1w0XktYY5MTDSkckXJcs/tk2K1PqWeRjX2/o6hP6 hrGU3VJwS+hiYL5KoyzQfHOi19mOnkn7EfPcLHZFhAn/7EAT9RTSp+ZaX58aNxod AdT+cLxjmNZ/a6r500oIANQE6dkWnDS6XwG16BjxcgWkAj2Qrd21xXEM/xSr3K14 eGwUPUDfOd/S/+xSJ3LWWx1d8+ax/WkTQunqqjgmCAtlVASZQagSY9G14cXfr9d9 9zmxFpyU+116ovh/JaMQkwChBKC36DiSnLcBnFuWYVCtCrYBnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgjoK8odfaAjzfkA82eXyEzrPfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzg2ODJmYjgtNDQ0ZS0z YmNjLTkyZmQtNWMxODg0ODRkMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2BLfvG0uowC/G/vBqLGhK4DV7Juk491Jz/EVKoXspV0BPIAt0cxi1l +1S9yy6+UV7Igl4uTiMOKv9tqSkrMxHypTHCu+Bz3sA9Ix6MVjUmlic4Bk3yY5y2 RmvSow+ikTzcd3k7vNoDfDfSuy0QC3cHnXgxX/PGmfSLD/GqfjPgFqu0RCdaccA3 IY+36SBHViaWh0qTKKwICznwYbCAoF6DVUfxSZHxMz7gBxpltVRRdCCa4SLho4sm 4mFEdyih4EYYg1pg29T89ubb3K+kqcIyRs+0Y6DDlnzjDbfoLw7HQhJzOb0PAl9j B09y3HbSyOJYoO5sGzVRsKklFIT+r3c= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:41 2025 by rpki-client