$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80fcb6d2-1ce3-3c85-be1c-9bd230c36028.roa File: 80fcb6d2-1ce3-3c85-be1c-9bd230c36028.roa (raw, json) Hash identifier: TK3SyiLlmuMZIe6IuOhniOk06LFs6QEnTQXW9D/zZSA= Subject key identifier: B2:53:A4:01:78:9D:4E:D7:9A:6E:04:85:36:E4:36:EA:56:90:46:E2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926991BD2A69025F2A99A0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80fcb6d2-1ce3-3c85-be1c-9bd230c36028.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:69:91:bd:2a:69:02:5f:2a:99:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=59a9cd7d-84a7-4e25-a575-d290704124f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:54:d9:8b:33:9d:b1:88:16:0e:8b:fa:e8:9a: 4d:ce:ae:e2:7f:48:f5:21:81:d9:39:b6:99:3b:4d: 90:d3:97:de:e0:d4:6c:ac:d9:8f:ce:eb:16:dc:8c: b8:6a:ca:f5:f2:8b:e1:4d:b4:b1:39:2a:2f:99:b6: ae:46:14:ef:b6:28:ab:29:18:b9:05:58:94:a6:21: 2e:a4:49:6c:d4:03:b4:d1:8f:5b:1e:9f:dd:47:75: 72:1d:56:99:8c:ba:92:4d:b8:2a:55:28:35:e2:52: c0:60:fd:6c:c5:57:1b:e4:17:36:88:ea:e3:9c:6a: 07:50:28:2a:6a:10:ec:ac:16:40:49:98:a9:d2:77: 23:61:3f:73:8f:0c:f0:65:bd:2d:1f:29:69:b8:73: 7a:d3:0e:ff:5c:75:f5:6f:dd:dd:5f:b1:3c:e8:40: 6d:6e:f5:fa:93:e3:1e:08:96:02:1b:cc:48:ac:7e: 8b:b9:5e:18:e0:60:82:c4:7f:26:c2:e9:6b:e5:20: 1d:8a:13:95:dd:cc:dc:88:df:a9:f6:ff:dc:83:93: 63:5c:cf:96:35:66:f0:a0:f2:c1:73:68:66:6b:c1: bb:b1:85:68:3b:c9:5c:43:a0:f8:2d:30:81:91:9b: 16:9a:6a:6a:6d:09:0f:56:c8:b0:6b:e8:c8:ce:91: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:53:A4:01:78:9D:4E:D7:9A:6E:04:85:36:E4:36:EA:56:90:46:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/80fcb6d2-1ce3-3c85-be1c-9bd230c36028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:e3:83:34:d6:94:c5:8e:3f:30:cf:0c:5e:e4:3c:8b:05:63: 5e:3a:b3:c4:7c:10:5e:34:51:15:48:72:25:7a:30:81:cb:7f: 43:5f:ac:68:cf:f9:70:e1:ce:c4:5b:07:fa:ae:dd:25:88:76: e1:f8:cb:f9:78:ae:7a:e9:f8:03:96:c2:4f:28:eb:43:f0:0a: b8:e1:d0:ad:50:89:98:99:24:63:b6:e3:b9:bf:4c:53:af:ae: 5e:a4:d8:e0:f3:f6:e9:dd:1c:46:0c:9c:50:9b:52:a1:b8:f2: 41:02:f5:a9:d8:8c:9e:09:e7:de:bc:52:11:d2:14:50:a0:b7: ac:01:2c:a7:b8:0d:03:e1:bc:24:37:0c:87:d2:4b:0d:e2:5f: 69:ab:9e:9d:9d:e5:fc:1d:e7:be:52:b4:2c:1d:7d:6f:75:66: 77:e3:ef:80:0e:1b:a4:3a:f7:03:3b:15:1b:47:5b:50:5b:fe: df:41:60:ab:e2:6c:a0:a8:75:ed:45:e6:cd:e0:cb:01:06:1b: 1c:c6:86:92:ea:b0:b2:1f:52:14:ca:4f:92:74:c6:e5:2e:5e: 17:c9:61:e6:4c:c7:45:b4:7b:34:ba:bb:bf:c3:20:3c:f6:6d: 37:ac:98:9b:bd:78:dd:a6:cd:b4:03:26:e5:49:9f:54:ac:39: fb:06:39:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmmRvSppAl8qmaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NTlhOWNkN2QtODRhNy00ZTI1LWE1NzUtZDI5MDcwNDEyNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVTZizOdsYgWDov66JpNzq7if0j1IYHZObaZ O02Q05fe4NRsrNmPzusW3Iy4asr18ovhTbSxOSovmbauRhTvtiirKRi5BViUpiEu pEls1AO00Y9bHp/dR3VyHVaZjLqSTbgqVSg14lLAYP1sxVcb5Bc2iOrjnGoHUCgq ahDsrBZASZip0ncjYT9zjwzwZb0tHylpuHN60w7/XHX1b93dX7E86EBtbvX6k+Me CJYCG8xIrH6LuV4Y4GCCxH8mwulr5SAdihOV3czciN+p9v/cg5NjXM+WNWbwoPLB c2hma8G7sYVoO8lcQ6D4LTCBkZsWmmpqbQkPVsiwa+jIzpH5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJTpAF4nU7Xmm4EhTbkNupWkEbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODBmY2I2ZDItMWNlMy0z Yzg1LWJlMWMtOWJkMjMwYzM2MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPjgzTWlMWOPzDPDF7kPIsFY146s8R8EF40URVIciV6MIHLf0NfrGjP +XDhzsRbB/qu3SWIduH4y/l4rnrp+AOWwk8o60PwCrjh0K1QiZiZJGO247m/TFOv rl6k2ODz9undHEYMnFCbUqG48kEC9anYjJ4J5968UhHSFFCgt6wBLKe4DQPhvCQ3 DIfSSw3iX2mrnp2d5fwd575StCwdfW91Znfj74AOG6Q69wM7FRtHW1Bb/t9BYKvi bKCode1F5s3gywEGGxzGhpLqsLIfUhTKT5J0xuUuXhfJYeZMx0W0ezS6u7/DIDz2 bTesmJu9eN2mzbQDJuVJn1SsOfsGOQA= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:14 2025 by rpki-client