$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa File: 7fad9b23-4779-30e6-a138-18cb124dd0c3.roa (raw, json) Hash identifier: +tHCX8BhmeZL92/LpeVf4xguevyAhUVb2zwJrKhSEiw= Subject key identifier: 89:CD:CD:E1:E5:3E:5E:F6:31:4A:C3:C7:27:F5:EA:54:CE:53:A4:DF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA932778D9FA913CD4327EC20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:77:8d:9f:a9:13:cd:43:27:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=b743f664-c8d3-447e-a17f-8834a8982236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:f7:53:36:8b:15:4c:9f:d0:7c:6f:4f:27: c2:11:77:a4:16:5d:42:92:fb:a3:4a:30:ff:6b:e6: 76:2f:5d:50:3d:9c:ab:0a:11:7a:88:b3:a8:45:8e: be:83:2e:78:e8:2d:03:5f:0a:12:db:0c:a2:18:1b: 5e:f1:fb:e9:ca:af:44:78:3c:6d:95:a0:da:50:f1: c2:f0:e5:40:4d:89:0f:4a:47:73:b8:92:06:c6:db: a6:69:c7:7f:de:8f:6e:78:90:de:92:07:bc:b7:80: c8:bd:c3:d1:e5:36:d7:44:a3:01:30:31:c8:d8:d2: 00:c5:58:1b:65:db:01:9d:59:b3:ec:b2:96:35:e4: 46:f7:a5:16:49:ef:18:f2:09:cc:04:2f:e5:2f:a2: 12:4f:98:4f:73:04:40:a5:5b:f4:0a:0c:42:5e:e0: 21:9e:7c:99:3d:3f:07:5a:c6:f1:79:f9:b1:06:3c: 5c:7d:14:a7:33:84:43:39:e2:e7:2f:d5:f4:01:3a: ad:7d:64:55:39:40:36:59:37:7a:db:ad:85:92:c3: 3d:82:ad:e1:7d:20:30:01:8b:76:61:9d:73:83:b9: b6:91:ab:c8:72:df:6a:e4:0d:17:cf:1d:6b:df:cc: 2a:60:f4:d1:9e:68:cc:9a:49:af:96:c5:cf:1d:e2: 4c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:CD:E1:E5:3E:5E:F6:31:4A:C3:C7:27:F5:EA:54:CE:53:A4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/7fad9b23-4779-30e6-a138-18cb124dd0c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:12:47:0b:11:69:75:62:8c:7e:f0:71:95:eb:d7:b8:2e:99: be:1a:f5:cb:75:f6:5c:8c:70:64:3c:d9:64:d1:f3:23:7c:55: c1:23:f7:7f:37:82:eb:63:96:96:3d:08:cf:ad:cd:04:3f:a6: fb:82:de:27:88:a6:f9:6e:f9:19:22:93:c2:67:47:af:a5:9f: b0:5c:2e:f5:8a:26:d3:72:6f:f8:20:34:d9:4b:15:8b:84:fa: 66:e3:01:f5:40:66:68:c7:57:fa:68:73:0e:e1:24:d2:82:cb: f0:b2:44:7c:42:18:26:7d:e0:51:d7:66:f9:e1:86:eb:f2:14: cc:d8:4c:98:e5:0c:90:d1:6e:52:53:dc:bb:a9:79:f0:dd:76: 2a:4e:9e:98:cd:8b:05:56:88:76:96:6d:29:9a:6f:09:97:bb: 08:55:b5:39:84:d8:9e:99:90:f6:84:8f:33:fa:5e:14:e4:25: c2:12:6a:47:9f:c2:b5:a7:0a:00:22:c0:ed:81:f0:83:88:f1: 09:1b:7c:86:cd:e7:df:a4:7d:e4:e9:a5:12:90:e1:06:e7:b1: c3:a6:52:a0:f5:97:79:f3:96:9a:c0:1c:27:13:9a:12:2f:32: a7:71:49:16:26:0a:d3:28:58:b7:68:bf:0a:9b:6d:75:a1:97: 49:e7:11:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMneNn6kTzUMn7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk Yjc0M2Y2NjQtYzhkMy00NDdlLWExN2YtODgzNGE4OTgyMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidv3UzaLFUyf0HxvTyfCEXekFl1CkvujSjD/ a+Z2L11QPZyrChF6iLOoRY6+gy546C0DXwoS2wyiGBte8fvpyq9EeDxtlaDaUPHC 8OVATYkPSkdzuJIGxtumacd/3o9ueJDekge8t4DIvcPR5TbXRKMBMDHI2NIAxVgb ZdsBnVmz7LKWNeRG96UWSe8Y8gnMBC/lL6IST5hPcwRApVv0CgxCXuAhnnyZPT8H WsbxefmxBjxcfRSnM4RDOeLnL9X0ATqtfWRVOUA2WTd6262FksM9gq3hfSAwAYt2 YZ1zg7m2kavIct9q5A0Xzx1r38wqYPTRnmjMmkmvlsXPHeJM9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInNzeHlPl72MUrDxyf16lTOU6TfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvN2ZhZDliMjMtNDc3OS0z MGU2LWExMzgtMThjYjEyNGRkMGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZ6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAASRwsRaXVijH7wcZXr17gumb4a9ct19lyMcGQ82WTR8yN8VcEj9383 gutjlpY9CM+tzQQ/pvuC3ieIpvlu+Rkik8JnR6+ln7BcLvWKJtNyb/ggNNlLFYuE +mbjAfVAZmjHV/pocw7hJNKCy/CyRHxCGCZ94FHXZvnhhuvyFMzYTJjlDJDRblJT 3LupefDddipOnpjNiwVWiHaWbSmabwmXuwhVtTmE2J6ZkPaEjzP6XhTkJcISakef wrWnCgAiwO2B8IOI8QkbfIbN59+kfeTppRKQ4QbnscOmUqD1l3nzlprAHCcTmhIv MqdxSRYmCtMoWLdovwqbbXWhl0nnEc8= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:33 2025 by rpki-client