$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa File: 88674e0a-efc0-3112-b316-ca2b820f32ce.roa (raw, json) Hash identifier: wrzSbNBsIOYS67xDMJk6TsdYmQduIu3Br+eFemQ/fKU= Subject key identifier: 32:EF:8D:90:D4:8C:3B:90:14:36:27:46:7C:CE:B9:D2:1F:79:A3:8F Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19277BBDB4ED4E230CC1260 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:77:bb:db:4e:d4:e2:30:cc:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=c80c82a1-446e-4449-a587-1be463034bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:e3:14:e9:b1:89:b2:d0:4d:5a:c2:da:da: 9d:82:30:f7:f9:22:b4:98:3a:d0:d5:65:20:6b:f3: ce:15:69:21:19:81:a3:bc:cc:ce:52:29:87:b2:c4: 94:ad:36:73:ef:65:9a:04:6c:ce:a4:55:af:47:51: 25:f9:9c:6d:63:66:e3:3d:b4:0f:18:af:7b:e9:43: 4c:67:b4:f1:81:f6:a9:9b:f2:4d:01:ae:f8:7c:ca: 44:9b:55:1b:42:b3:ca:a8:94:31:e5:06:39:ff:37: 56:5c:63:3e:be:8a:2a:94:bc:a8:e9:be:d0:01:4e: 80:c2:d3:d4:ed:6d:26:ae:41:4e:e2:96:20:8b:2b: ce:90:3f:75:83:84:25:02:63:96:4e:92:bc:60:6c: 83:af:0c:1a:19:d2:fa:34:94:ca:f1:8d:69:b5:c9: 0b:4d:db:93:d9:64:12:2a:5b:b6:07:87:c2:fc:55: 80:50:4c:1e:f4:ef:ed:d7:8b:44:01:25:f3:7d:10: 60:47:83:d7:4f:b6:ae:52:40:e2:8c:8c:50:ea:8a: e4:90:70:4c:28:22:38:16:e4:8a:cf:64:54:ad:de: 3c:3f:f1:aa:56:63:57:b9:dd:49:ce:9d:c8:5f:ff: dc:7d:0f:38:33:f6:7a:14:b2:c7:a1:f4:4e:17:3f: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:8D:90:D4:8C:3B:90:14:36:27:46:7C:CE:B9:D2:1F:79:A3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/88674e0a-efc0-3112-b316-ca2b820f32ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3b:f3:cf:71:e7:25:46:e2:c8:e1:cf:3a:59:16:82:c5:80: 15:e4:10:41:3e:b0:70:37:e0:f5:36:f7:d8:88:f1:88:db:de: a2:11:92:08:71:b5:e5:15:18:7d:6f:aa:3f:57:21:72:5a:a2: d3:e5:b5:f5:33:74:89:f8:81:f5:c9:df:cb:7a:13:4d:58:97: 44:f5:b5:ec:b9:12:ea:a1:6b:27:69:ed:c4:dd:66:8b:17:5a: 0f:9d:f6:91:b9:e4:9e:4c:ba:9c:96:3d:0e:87:0c:fd:c3:00: 58:5e:cb:ad:91:04:83:4a:b7:07:f0:08:06:79:3c:4f:be:7c: f3:4b:91:e2:af:99:66:63:fd:e2:d7:4d:30:08:b2:d5:01:a5: 4d:77:80:33:7f:69:29:e9:58:4f:93:90:c5:86:54:08:3e:04: 04:45:35:61:54:60:64:4f:1e:d8:67:2d:78:6d:aa:88:56:c9: 2e:27:62:4f:8f:c2:3e:0a:fd:0b:a8:fe:5c:44:5e:79:72:79: 62:7b:3b:b2:ce:66:20:d7:94:f0:ee:00:8c:50:cd:e3:53:d5: a8:a6:ca:5e:2e:4a:bf:31:55:83:b3:2f:54:0b:df:b8:24:be: 70:39:37:81:42:2c:c7:2f:9e:c5:05:53:15:2a:d6:05:14:87: 94:0b:8b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkne7207U4jDMEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YzgwYzgyYTEtNDQ2ZS00NDQ5LWE1ODctMWJlNDYzMDM0YmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvvjFOmxibLQTVrC2tqdgjD3+SK0mDrQ1WUg a/POFWkhGYGjvMzOUimHssSUrTZz72WaBGzOpFWvR1El+ZxtY2bjPbQPGK976UNM Z7Txgfapm/JNAa74fMpEm1UbQrPKqJQx5QY5/zdWXGM+vooqlLyo6b7QAU6AwtPU 7W0mrkFO4pYgiyvOkD91g4QlAmOWTpK8YGyDrwwaGdL6NJTK8Y1ptckLTduT2WQS Klu2B4fC/FWAUEwe9O/t14tEASXzfRBgR4PXT7auUkDijIxQ6orkkHBMKCI4FuSK z2RUrd48P/GqVmNXud1Jzp3IX//cfQ84M/Z6FLLHofROFz8hkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLvjZDUjDuQFDYnRnzOudIfeaOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODg2NzRlMGEtZWZjMC0z MTEyLWIzMTYtY2EyYjgyMGYzMmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk7889x5yVG4sjhzzpZFoLFgBXkEEE+sHA34PU299iI8Yjb3qIRkghx teUVGH1vqj9XIXJaotPltfUzdIn4gfXJ38t6E01Yl0T1tey5Euqhaydp7cTdZosX Wg+d9pG55J5MupyWPQ6HDP3DAFhey62RBINKtwfwCAZ5PE++fPNLkeKvmWZj/eLX TTAIstUBpU13gDN/aSnpWE+TkMWGVAg+BARFNWFUYGRPHthnLXhtqohWyS4nYk+P wj4K/Quo/lxEXnlyeWJ7O7LOZiDXlPDuAIxQzeNT1aimyl4uSr8xVYOzL1QL37gk vnA5N4FCLMcvnsUFUxUq1gUUh5QLi9w= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:30 2025 by rpki-client