$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8530cf21-f035-3553-b2cb-e85ca7e1abac.roa File: 8530cf21-f035-3553-b2cb-e85ca7e1abac.roa (raw, json) Hash identifier: hDk1fuf7oFtVYjGfWuK1wgQhRwkM59Dn8RYdzee31UY= Subject key identifier: 01:22:81:45:55:3C:ED:FC:D6:BF:65:A9:31:A2:5D:16:0F:B2:50:8B Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927846A00A58BC93470660 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8530cf21-f035-3553-b2cb-e85ca7e1abac.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:46:a0:0a:58:bc:93:47:06:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=dd6c3d17-e2f5-49a4-bf86-e5d4ec8d550f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:cf:9f:5f:4a:e8:67:4f:bd:54:5b:a6:17: 32:fa:00:e4:26:e9:15:89:d2:c4:98:78:8a:e7:47: 18:3f:6e:53:04:f1:4a:60:ca:d2:1e:fd:d9:0b:2a: 1a:56:35:6a:df:57:81:b6:84:21:f5:35:02:11:b5: 23:1a:00:99:de:0a:7d:cc:59:6b:6f:34:60:13:85: 00:42:00:db:8d:c8:50:78:71:29:c0:2a:4b:66:76: b4:df:ec:63:9f:cc:57:6d:50:f0:42:fa:73:77:91: 57:86:68:03:b6:7c:3d:e0:a9:44:38:5a:cd:12:91: ff:49:56:5c:fc:06:6b:20:56:79:b7:00:48:cb:91: e7:0b:d8:c2:8c:8b:49:91:d0:a8:9a:ac:66:63:11: 5e:5f:a8:9d:00:d7:55:ad:ab:bd:74:80:3f:da:50: 9b:c9:07:c0:84:ed:b5:af:96:8f:83:bd:b3:10:4e: 1a:73:f3:c1:ff:a6:5b:b2:b4:27:fb:fd:72:48:6a: 9d:91:c3:96:0d:b1:1b:44:31:0c:e8:24:ea:16:84: 92:1a:3d:43:c9:d7:8e:bc:8e:fe:34:e7:c7:5c:91: 03:44:4d:8c:38:33:74:f0:71:33:b0:39:e9:2b:3a: db:c2:b4:5a:99:9a:09:a0:3b:81:36:4c:2d:85:da: b8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:22:81:45:55:3C:ED:FC:D6:BF:65:A9:31:A2:5D:16:0F:B2:50:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8530cf21-f035-3553-b2cb-e85ca7e1abac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1d:0e:34:11:71:ce:b3:59:0a:c4:1e:97:71:e5:3e:7d:00: 9d:f9:86:97:4e:39:72:cc:54:17:03:0d:09:cf:34:dd:93:c7: 72:08:83:25:e1:5f:73:85:66:f3:4e:47:b9:90:4d:8c:f4:78: 63:5d:54:46:f7:49:46:59:97:d0:af:3f:cd:a5:5b:ab:56:fa: 95:2e:c3:6d:a1:48:fe:be:d5:bc:40:57:2b:d0:f5:58:8d:40: f0:1f:28:ed:0d:8c:9d:3d:20:8e:b3:fe:55:d9:74:8f:c4:f0: 55:de:eb:28:d5:1d:37:eb:91:1c:7b:66:5f:d5:17:89:cc:aa: 8d:33:a0:44:b5:fc:ff:3d:80:35:8e:71:7f:6f:28:ed:63:88: 64:5d:1d:51:19:4a:e9:2c:83:62:c7:3f:34:22:5a:3e:68:a2: 4f:be:36:50:41:7b:c8:f7:25:49:f1:25:d5:82:c2:af:0f:41: 52:76:90:62:a5:e4:3b:96:4d:84:ad:50:f8:4b:e7:4c:70:e2: 53:4a:f5:24:05:6c:5b:38:23:6c:28:35:1d:c2:88:6d:45:3a: 17:ff:cc:a7:a4:a1:8d:08:57:dd:20:d3:00:41:c4:99:f3:4c: 8a:37:58:c8:2f:02:98:46:8c:ca:ee:6e:f1:80:db:2e:3f:10: 4d:14:5b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknhGoApYvJNHBmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGQ2YzNkMTctZTJmNS00OWE0LWJmODYtZTVkNGVjOGQ1NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC3Pn19K6GdPvVRbphcy+gDkJukVidLEmHiK 50cYP25TBPFKYMrSHv3ZCyoaVjVq31eBtoQh9TUCEbUjGgCZ3gp9zFlrbzRgE4UA QgDbjchQeHEpwCpLZna03+xjn8xXbVDwQvpzd5FXhmgDtnw94KlEOFrNEpH/SVZc /AZrIFZ5twBIy5HnC9jCjItJkdComqxmYxFeX6idANdVrau9dIA/2lCbyQfAhO21 r5aPg72zEE4ac/PB/6ZbsrQn+/1ySGqdkcOWDbEbRDEM6CTqFoSSGj1DydeOvI7+ NOfHXJEDRE2MODN08HEzsDnpKzrbwrRamZoJoDuBNkwthdq4gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEigUVVPO381r9lqTGiXRYPslCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUzMGNmMjEtZjAzNS0z NTUzLWIyY2ItZTg1Y2E3ZTFhYmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcdDjQRcc6zWQrEHpdx5T59AJ35hpdOOXLMVBcDDQnPNN2Tx3IIgyXh X3OFZvNOR7mQTYz0eGNdVEb3SUZZl9CvP82lW6tW+pUuw22hSP6+1bxAVyvQ9ViN QPAfKO0NjJ09II6z/lXZdI/E8FXe6yjVHTfrkRx7Zl/VF4nMqo0zoES1/P89gDWO cX9vKO1jiGRdHVEZSuksg2LHPzQiWj5ook++NlBBe8j3JUnxJdWCwq8PQVJ2kGKl 5DuWTYStUPhL50xw4lNK9SQFbFs4I2woNR3CiG1FOhf/zKekoY0IV90g0wBBxJnz TIo3WMgvAphGjMrubvGA2y4/EE0UW2Y= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:45 2025 by rpki-client