$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa File: 7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa (raw, json) Hash identifier: S7aSN8SfteivQO8vbUyho8EP22oMXzky/+4ZE8rpCLw= Subject key identifier: 37:E2:07:E4:3E:51:69:38:7E:05:BA:4B:80:E7:D6:FB:17:4B:4D:CE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926BE1BDF456DA6C4BED00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6b:e1:bd:f4:56:da:6c:4b:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c4f47e3e-0c05-4d70-bdb9-1f9aa19d20e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:85:1f:9a:ed:ba:7d:69:1f:3c:69:88:b0: cc:24:6f:f8:63:2d:f1:a9:74:5b:f4:76:af:60:ce: ea:a6:63:85:90:ad:3f:36:b4:28:11:50:c4:43:e5: e8:cc:2a:69:36:c0:08:40:08:fb:8a:02:11:6b:cf: 59:8c:08:7c:2d:35:1e:7e:f2:ec:02:69:13:46:40: 95:05:c8:da:a1:72:63:e0:65:ef:f1:e5:bc:02:fa: 25:59:a4:04:93:ef:df:14:d0:f0:03:a0:66:d1:4d: fe:02:14:0b:4b:bc:87:23:62:f9:ae:8d:ec:e5:96: 09:b5:74:39:77:47:74:34:82:26:a2:05:31:cf:56: 41:3f:1b:49:36:f7:1c:9c:fb:fb:2e:42:12:4a:6e: 4b:62:34:22:0e:60:a4:38:36:5d:0d:a8:87:69:7f: af:e2:0e:7f:f0:9b:a1:d2:40:65:7d:3c:30:c0:b7: c2:c8:bb:a1:7d:aa:a6:cb:5a:c3:cd:00:f9:f0:01: 12:02:63:98:4a:47:db:be:c7:55:5e:77:11:49:8b: 3b:c5:08:17:9f:74:33:55:ff:e6:23:8d:ad:fa:77: 6c:94:31:98:2c:b8:90:6e:dc:c0:70:db:ef:16:d9: a8:ae:a7:92:29:86:37:c6:72:7c:1e:ae:70:c9:ae: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E2:07:E4:3E:51:69:38:7E:05:BA:4B:80:E7:D6:FB:17:4B:4D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7c3b0cd6-d369-3169-a0ec-c6c6fbf4a42b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2a:bc:25:86:47:3a:44:85:9f:78:ba:45:22:08:f3:bf:bb: e4:a0:22:cb:86:ce:c8:b8:c8:b6:47:e0:2e:6a:4b:c4:8a:48: 27:04:a6:f5:17:e0:87:20:26:aa:c0:76:7b:f6:7f:4e:47:05: ba:d0:7d:73:87:f9:f7:71:c3:bc:bb:c7:05:86:ac:fa:ea:84: 46:f2:a2:26:f8:16:ad:60:9f:3d:0c:56:ef:24:07:04:10:05: fe:ff:24:c3:55:d4:96:b9:3f:81:05:48:57:44:07:58:da:bc: d6:b3:8d:04:6d:3e:6e:e1:f4:19:19:df:ee:c2:d9:3d:02:1f: c6:2e:fd:b9:09:38:f5:e8:ee:64:4c:70:9a:69:d2:25:42:79: 07:98:1f:2b:43:4c:a6:ae:34:2e:28:56:e3:5a:c3:1e:8c:3c: b8:b4:ef:97:ef:05:d1:77:ad:e8:50:0d:e7:97:57:65:3b:a8: 6e:79:a1:f1:2b:a7:99:39:55:5e:a6:4d:65:d3:6d:ab:1f:71: 63:b6:43:21:e3:74:a4:7d:7b:00:82:f7:8b:93:73:97:21:5a: 36:3b:d3:a7:20:f7:00:c5:98:bd:5f:04:44:a7:c7:a6:f1:65: 36:c3:3f:6b:03:bc:59:1e:ac:4b:19:ef:1d:c8:8f:76:d8:2c: 03:32:4d:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmvhvfRW2mxL7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzRmNDdlM2UtMGMwNS00ZDcwLWJkYjktMWY5YWExOWQyMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRGFH5rtun1pHzxpiLDMJG/4Yy3xqXRb9Hav YM7qpmOFkK0/NrQoEVDEQ+XozCppNsAIQAj7igIRa89ZjAh8LTUefvLsAmkTRkCV BcjaoXJj4GXv8eW8AvolWaQEk+/fFNDwA6Bm0U3+AhQLS7yHI2L5ro3s5ZYJtXQ5 d0d0NIImogUxz1ZBPxtJNvccnPv7LkISSm5LYjQiDmCkODZdDaiHaX+v4g5/8Juh 0kBlfTwwwLfCyLuhfaqmy1rDzQD58AESAmOYSkfbvsdVXncRSYs7xQgXn3QzVf/m I42t+ndslDGYLLiQbtzAcNvvFtmorqeSKYY3xnJ8Hq5wya4b2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfiB+Q+UWk4fgW6S4Dn1vsXS03OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2MzYjBjZDYtZDM2OS0z MTY5LWEwZWMtYzZjNmZiZjRhNDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEqvCWGRzpEhZ94ukUiCPO/u+SgIsuGzsi4yLZH4C5qS8SKSCcEpvUX 4IcgJqrAdnv2f05HBbrQfXOH+fdxw7y7xwWGrPrqhEbyoib4Fq1gnz0MVu8kBwQQ Bf7/JMNV1Ja5P4EFSFdEB1javNazjQRtPm7h9BkZ3+7C2T0CH8Yu/bkJOPXo7mRM cJpp0iVCeQeYHytDTKauNC4oVuNawx6MPLi075fvBdF3rehQDeeXV2U7qG55ofEr p5k5VV6mTWXTbasfcWO2QyHjdKR9ewCC94uTc5chWjY706cg9wDFmL1fBESnx6bx ZTbDP2sDvFkerEsZ7x3Ij3bYLAMyTSQ= -----END CERTIFICATE-----Generated at Sat Nov 1 12:31:18 2025 by rpki-client