$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa File: 7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa (raw, json) Hash identifier: M/0+IXmVEAcqS9aT6M/Pqa+hafjT52g5uGga0FlHnos= Subject key identifier: 99:C1:C9:6B:73:B3:F7:A6:42:18:C5:47:2A:B8:FD:F3:97:03:A7:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0F1B15E34A340DF02780 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0f:1b:15:e3:4a:34:0d:f0:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=d5c94312-c279-4965-ac73-761478080ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:11:a7:b1:ac:b8:29:5c:62:d2:3d:74:f8:8a: 9c:b4:a8:0c:87:20:bc:fc:65:6f:d0:23:62:61:5e: 7e:3c:a4:cd:ac:b8:4f:88:60:fa:0d:91:5f:04:2c: a4:83:9b:6b:f7:60:77:b4:e1:77:93:f2:d1:83:f6: f0:02:2e:49:5c:db:05:57:de:08:a5:0e:56:ad:bc: 12:18:59:02:58:21:ee:0f:83:54:b1:c5:72:ff:87: a5:96:40:40:1b:10:0a:0e:f3:f3:ab:b3:c7:43:f2: e0:c3:4c:94:42:ba:ad:cf:3b:e2:8e:5b:19:8e:a4: 69:20:6c:aa:94:62:55:0c:2f:3a:fc:21:38:31:59: ca:1f:f0:c0:ed:5b:f6:63:a5:2e:38:db:f8:69:7e: 19:df:2c:0a:e0:be:f4:f3:04:38:b5:74:9f:7e:40: ec:5b:9e:3a:8f:10:cc:cf:8a:a5:11:8e:97:31:20: b5:2a:ba:5c:b8:d3:5d:33:6d:df:9a:8d:3b:7a:2f: 5a:c4:68:a8:d5:8a:91:ae:94:fa:1c:6a:4b:7d:02: e8:0f:76:6e:ee:c1:63:67:86:a0:34:43:57:15:ab: 2e:d6:81:65:f2:0f:0d:99:12:bf:9d:27:6e:49:b9: 68:77:2b:17:1d:28:69:94:2c:5f:e7:8e:9e:dd:db: b1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:C9:6B:73:B3:F7:A6:42:18:C5:47:2A:B8:FD:F3:97:03:A7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7b9f9361-e3e0-3af5-8eb5-c1cdb2f6606b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:4b:78:c4:ce:38:c9:7a:10:91:49:66:a0:3b:61:2f:38:49: ce:d9:66:8d:84:41:2d:0f:20:0e:c8:53:07:61:86:66:66:83: 6f:0e:9b:7f:ee:e9:cb:30:8a:69:d2:47:c5:c5:ce:c0:52:b0: 46:79:f8:bd:43:63:a8:b7:b0:42:fb:ca:37:49:51:ab:4e:d7: 09:c9:93:9b:9e:c4:58:74:e2:56:ec:6e:f2:03:4b:6a:2f:94: 52:f7:7a:a3:ed:58:bf:6c:c5:f5:ae:02:08:c1:dc:c1:af:fa: 74:6e:17:1b:7c:ad:f4:e0:fc:91:f5:c4:31:22:7b:94:44:5c: b8:29:55:f3:6a:9a:69:80:67:e5:b4:6a:ed:fe:97:c7:a0:a9: 06:91:74:2b:d6:23:5c:77:b1:c6:7f:b2:4b:17:a5:a4:36:46: ab:9b:78:0a:62:3c:7b:bd:ec:cf:98:85:0f:e5:2c:18:5a:bf: 1c:3d:26:c1:01:d6:d3:ab:58:4a:4a:0a:75:8c:2e:e3:88:99: 0e:e5:0f:ad:cf:87:c5:87:ee:e0:c9:03:f8:e3:aa:77:20:51: b1:2d:2c:6b:54:f7:8f:bd:ac:a6:17:2b:80:f2:b9:c6:d3:fa: 77:cb:4c:d8:cf:ad:02:be:42:9d:6a:77:0b:18:a9:88:cf:ce: 32:40:ce:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ8bFeNKNA3wJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZDVjOTQzMTItYzI3OS00OTY1LWFjNzMtNzYxNDc4MDgwYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxGnsay4KVxi0j10+IqctKgMhyC8/GVv0CNi YV5+PKTNrLhPiGD6DZFfBCykg5tr92B3tOF3k/LRg/bwAi5JXNsFV94IpQ5WrbwS GFkCWCHuD4NUscVy/4ellkBAGxAKDvPzq7PHQ/Lgw0yUQrqtzzvijlsZjqRpIGyq lGJVDC86/CE4MVnKH/DA7Vv2Y6UuONv4aX4Z3ywK4L708wQ4tXSffkDsW546jxDM z4qlEY6XMSC1KrpcuNNdM23fmo07ei9axGio1YqRrpT6HGpLfQLoD3Zu7sFjZ4ag NENXFasu1oFl8g8NmRK/nSduSblodysXHShplCxf546e3duxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnByWtzs/emQhjFRyq4/fOXA6dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2I5ZjkzNjEtZTNlMC0z YWY1LThlYjUtYzFjZGIyZjY2MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMdLeMTOOMl6EJFJZqA7YS84Sc7ZZo2EQS0PIA7IUwdhhmZmg28Om3/u 6cswimnSR8XFzsBSsEZ5+L1DY6i3sEL7yjdJUatO1wnJk5uexFh04lbsbvIDS2ov lFL3eqPtWL9sxfWuAgjB3MGv+nRuFxt8rfTg/JH1xDEie5REXLgpVfNqmmmAZ+W0 au3+l8egqQaRdCvWI1x3scZ/sksXpaQ2RqubeApiPHu97M+YhQ/lLBhavxw9JsEB 1tOrWEpKCnWMLuOImQ7lD63Ph8WH7uDJA/jjqncgUbEtLGtU94+9rKYXK4DyucbT +nfLTNjPrQK+Qp1qdwsYqYjPzjJAzow= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:40 2025 by rpki-client