$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa File: 8a6adb72-a446-3790-a487-5e0ec123047b.roa (raw, json) Hash identifier: ApqkCLOZvVjDel33OWWpWo6LOpSjQ8H9gM3VHgaYZtM= Subject key identifier: FE:CA:26:8B:E6:29:22:A7:1E:CB:57:A8:E7:7E:74:AE:C3:DB:82:CF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD13FADA102C8D0513AA00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:13:fa:da:10:2c:8d:05:13:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=1bd331db-3c93-406d-92a5-3f8ad962024c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:7c:65:0a:50:d7:91:2f:df:b4:9d:db:a4: fa:a0:f1:b8:37:2d:18:c7:db:16:56:b6:be:d4:24: d4:14:c4:7e:9f:bc:f7:25:8e:31:ec:11:7e:1e:c6: 41:a7:a0:dc:f2:5f:33:6b:fa:8f:0c:59:ad:ab:49: 43:81:95:29:19:0f:68:ea:9f:05:e0:fe:05:6f:44: 2b:5f:76:40:a9:bc:f2:b7:b3:3e:d6:be:ea:07:18: 02:e4:fd:0d:66:82:67:f7:8c:a7:9e:b8:63:07:4a: f5:46:93:48:d8:3b:c9:d9:f3:1e:89:60:f5:b9:e2: f4:65:02:5f:0f:4e:f9:2a:e2:87:d7:de:a8:7d:da: 07:7f:40:c9:9a:a7:9d:85:30:04:46:6e:d6:ee:97: 77:19:fd:51:69:77:e3:dc:29:10:ab:d2:c0:4d:e9: 59:5c:26:67:f1:8a:22:cc:72:22:ed:b7:91:40:47: ed:21:f2:a7:31:fd:a6:75:74:d5:99:10:ce:04:7d: 73:89:d6:d7:18:85:b6:f2:02:77:41:16:9e:24:12: 96:12:75:ca:2d:ee:10:ba:82:ec:d9:b3:12:f4:f4: 4f:c5:ba:34:ae:66:e4:38:c9:39:cb:62:2e:1f:3e: c6:d4:b3:67:5a:c0:4d:89:73:a6:b3:43:5a:6c:d1: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:26:8B:E6:29:22:A7:1E:CB:57:A8:E7:7E:74:AE:C3:DB:82:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a6adb72-a446-3790-a487-5e0ec123047b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:aa:b1:cb:fb:97:f4:4a:ad:f5:68:48:c3:ae:f8:89:da:da: fc:f3:c4:1e:e2:40:9d:1f:01:a3:33:b9:87:6c:e8:a7:09:e4: b2:23:8c:66:99:64:3f:3e:4f:cc:6e:9e:24:13:bc:60:ff:f7: df:5a:7c:ec:9a:ef:67:5d:45:51:83:d7:8e:e3:25:75:be:e1: 9d:8f:6a:65:2a:3c:43:3d:a8:6a:21:4f:a4:11:35:53:b0:5c: dd:41:85:be:b3:1d:c0:38:e8:b4:0d:83:17:d6:65:5f:2f:03: 80:4d:4a:30:b4:de:20:97:7e:7a:3d:07:ee:a1:6b:d5:f2:c6: 53:a7:b9:cb:61:03:c3:97:97:07:e3:1c:9b:47:5d:3e:42:65: b1:41:d8:af:b0:a9:ff:bb:ab:47:c7:45:30:f9:c4:87:36:be: a3:e9:c0:a2:9d:33:7b:39:db:68:9d:67:17:11:3b:ca:e9:8e: f9:61:a1:63:7b:5f:5b:d2:5d:10:79:35:ec:6f:23:b7:b9:9a: a0:3c:cd:dc:39:ef:9c:ce:5f:82:18:c6:db:f1:0c:21:b8:de: 8b:cc:0c:8b:90:6d:ae:69:97:2d:25:2f:fd:44:39:c3:72:22: 78:eb:f0:8b:67:bb:39:a5:c8:41:68:16:4f:87:c4:79:a2:ca: b5:d5:a4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRP62hAsjQUTqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MWJkMzMxZGItM2M5My00MDZkLTkyYTUtM2Y4YWQ5NjIwMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKF8ZQpQ15Ev37Sd26T6oPG4Ny0Yx9sWVra+ 1CTUFMR+n7z3JY4x7BF+HsZBp6Dc8l8za/qPDFmtq0lDgZUpGQ9o6p8F4P4Fb0Qr X3ZAqbzyt7M+1r7qBxgC5P0NZoJn94ynnrhjB0r1RpNI2DvJ2fMeiWD1ueL0ZQJf D075KuKH196ofdoHf0DJmqedhTAERm7W7pd3Gf1RaXfj3CkQq9LATelZXCZn8Yoi zHIi7beRQEftIfKnMf2mdXTVmRDOBH1zidbXGIW28gJ3QRaeJBKWEnXKLe4QuoLs 2bMS9PRPxbo0rmbkOMk5y2IuHz7G1LNnWsBNiXOms0NabNGQrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7KJovmKSKnHstXqOd+dK7D24LPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGE2YWRiNzItYTQ0Ni0z NzkwLWE0ODctNWUwZWMxMjMwNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6qscv7l/RKrfVoSMOu+Ina2vzzxB7iQJ0fAaMzuYds6KcJ5LIjjGaZ ZD8+T8xuniQTvGD/999afOya72ddRVGD147jJXW+4Z2PamUqPEM9qGohT6QRNVOw XN1Bhb6zHcA46LQNgxfWZV8vA4BNSjC03iCXfno9B+6ha9XyxlOnucthA8OXlwfj HJtHXT5CZbFB2K+wqf+7q0fHRTD5xIc2vqPpwKKdM3s522idZxcRO8rpjvlhoWN7 X1vSXRB5NexvI7e5mqA8zdw575zOX4IYxtvxDCG43ovMDIuQba5ply0lL/1EOcNy Injr8ItnuzmlyEFoFk+HxHmiyrXVpIs= -----END CERTIFICATE-----Generated at Sat Nov 1 09:59:24 2025 by rpki-client