$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa File: 7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa (raw, json) Hash identifier: 38WWbtd4SN00lGKPM88Wy+YUWZApoIsee5qOjyizzZU= Subject key identifier: 2E:3A:84:F1:D1:A5:B7:F1:38:05:5D:5F:2A:77:F2:42:C2:82:F2:93 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0F081D8F6687C6289900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0f:08:1d:8f:66:87:c6:28:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=b32b3a41-70dd-4380-912a-f4ecd61903f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d6:a1:32:71:82:c1:f3:86:45:53:be:35:50: 86:17:71:d8:83:03:0c:6e:57:17:2e:a9:dc:2d:b4: c8:9e:e4:27:45:d6:55:9a:9e:0f:88:5f:3b:e7:65: bf:3d:26:b7:3b:95:b8:f4:20:b4:f9:98:0b:83:76: 71:46:b8:c8:4c:b9:1d:16:7c:93:dc:87:1b:72:fa: 26:41:e7:90:ba:91:8a:32:20:a6:da:c6:89:e1:d1: e7:73:fa:50:2f:c5:12:9d:bd:d1:5a:d2:64:70:26: ac:e9:45:6f:dc:01:98:a8:37:d0:06:fb:81:99:65: ac:27:43:b7:93:2b:69:24:0e:cc:82:20:5e:0f:0d: 04:63:06:8b:9c:bf:7e:2e:16:c3:b9:7d:78:7b:a4: 5e:01:3c:50:ec:26:6c:d9:7f:16:1a:da:d3:95:a3: 4e:29:ff:c0:02:a9:53:f1:18:9a:63:75:61:b8:49: 41:4e:b3:af:cc:52:83:41:7a:11:d6:40:11:15:ef: 3a:d3:b4:3e:6c:d5:cb:83:6d:05:4c:25:97:99:10: ac:4b:0b:9e:90:f4:c0:fc:f8:9c:ac:88:02:52:69: 23:e8:9b:00:f8:9b:0e:35:b6:9e:23:07:63:55:dc: 1a:ed:89:c4:02:08:36:31:dd:a9:97:c3:69:aa:86: c4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3A:84:F1:D1:A5:B7:F1:38:05:5D:5F:2A:77:F2:42:C2:82:F2:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7e5cd32f-4418-3687-a865-8f2a2ae8ab64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:47:c5:26:6c:14:e5:6a:da:5b:8b:24:b9:53:d9:14:08:e9: e1:61:2e:40:23:09:df:e8:c8:22:6c:48:66:c8:e9:aa:8f:a9: cc:5e:0d:3d:b4:36:cc:1c:c2:a4:a6:1b:b0:87:33:11:de:ca: c5:c1:33:f2:be:24:af:61:d8:00:e8:ef:03:60:b6:6b:7f:c7: 44:1b:a2:27:98:3d:9c:69:72:be:10:c3:94:ee:17:02:28:4d: 80:d7:98:72:cf:29:e0:34:24:f8:00:7e:01:e7:43:19:33:18: 9a:95:9d:2d:ed:7e:e3:5b:7e:a2:a3:c7:ac:38:43:0c:83:a1: dd:d0:ee:93:cb:56:77:b5:0b:b4:0d:dc:51:49:31:c6:b0:01: c2:b3:f2:ce:55:a7:da:ca:cf:89:40:d6:93:ed:41:41:59:3e: 70:1c:df:46:ad:83:3e:11:8b:f5:bc:57:11:c8:27:c3:4a:4c: de:6f:2b:fb:87:3d:ba:07:24:d1:9d:0a:9a:8d:bc:a6:35:ca: f0:de:fd:30:55:cc:39:5c:ea:e1:05:e7:0d:a6:b1:5a:a0:21: 3c:00:dc:b5:c2:6d:99:c1:38:32:51:28:c2:a8:20:a8:1a:2c: a8:52:7a:1d:c7:28:50:92:60:ca:cf:56:0a:e5:8c:a6:4f:a8: 0f:bf:bd:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ8IHY9mh8YomQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YjMyYjNhNDEtNzBkZC00MzgwLTkxMmEtZjRlY2Q2MTkwM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitahMnGCwfOGRVO+NVCGF3HYgwMMblcXLqnc LbTInuQnRdZVmp4PiF8752W/PSa3O5W49CC0+ZgLg3ZxRrjITLkdFnyT3Icbcvom QeeQupGKMiCm2saJ4dHnc/pQL8USnb3RWtJkcCas6UVv3AGYqDfQBvuBmWWsJ0O3 kytpJA7MgiBeDw0EYwaLnL9+LhbDuX14e6ReATxQ7CZs2X8WGtrTlaNOKf/AAqlT 8RiaY3VhuElBTrOvzFKDQXoR1kARFe8607Q+bNXLg20FTCWXmRCsSwuekPTA/Pic rIgCUmkj6JsA+JsONbaeIwdjVdwa7YnEAgg2Md2pl8NpqobEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC46hPHRpbfxOAVdXyp38kLCgvKTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2U1Y2QzMmYtNDQxOC0z Njg3LWE4NjUtOGYyYTJhZThhYjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdHxSZsFOVq2luLJLlT2RQI6eFhLkAjCd/oyCJsSGbI6aqPqcxeDT20 NswcwqSmG7CHMxHeysXBM/K+JK9h2ADo7wNgtmt/x0QboieYPZxpcr4Qw5TuFwIo TYDXmHLPKeA0JPgAfgHnQxkzGJqVnS3tfuNbfqKjx6w4QwyDod3Q7pPLVne1C7QN 3FFJMcawAcKz8s5Vp9rKz4lA1pPtQUFZPnAc30atgz4Ri/W8VxHIJ8NKTN5vK/uH PboHJNGdCpqNvKY1yvDe/TBVzDlc6uEF5w2msVqgITwA3LXCbZnBODJRKMKoIKga LKhSeh3HKFCSYMrPVgrljKZPqA+/vY8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:36 2025 by rpki-client