$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a948e49-7e46-36a7-a6e4-9840d9b43381.roa File: 8a948e49-7e46-36a7-a6e4-9840d9b43381.roa (raw, json) Hash identifier: NfDoBK8iJRZPYrEDjuHq9qiaJfYZyeYAiii9PJDA61k= Subject key identifier: BE:F6:1F:02:44:82:E6:AD:53:38:45:AB:D8:64:00:2C:81:8A:A3:98 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192786B843A6192261BAE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a948e49-7e46-36a7-a6e4-9840d9b43381.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:6b:84:3a:61:92:26:1b:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=7a61d070-8c16-4819-beb2-ecfbf8203617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:62:e3:22:ab:e3:4f:de:ba:63:8c:b4:31: 83:27:90:bc:d2:eb:f4:56:6a:51:2b:cb:ac:b6:ed: 09:a9:e8:28:eb:cc:bb:e1:82:00:c1:3c:85:2b:d2: 73:0b:bd:ec:c9:e6:5e:b5:bb:5a:66:87:12:65:eb: ac:87:83:f5:8f:65:2d:00:e6:19:4a:45:a1:a3:81: 56:e9:b1:ad:3b:a9:e0:dd:f7:d6:b6:1d:87:2b:d4: b8:ad:d3:c3:84:e5:73:61:74:62:10:db:c2:be:3f: d3:1e:3b:02:ae:69:9e:46:37:df:7d:cf:25:71:ae: 45:30:04:5f:c7:b4:4b:e2:79:b7:40:1f:c5:8b:17: 6e:f0:49:92:72:c5:79:a2:74:30:6c:ce:f1:13:42: 2a:06:3e:d3:8a:e5:37:79:34:8c:6c:5b:33:44:97: 37:2f:ab:ef:3c:69:fa:ff:37:d4:2c:08:57:d8:5b: 53:e3:9a:e6:46:87:76:03:59:ec:84:b6:3e:a2:66: 75:6e:30:0a:c5:77:b2:3d:a0:48:09:f3:cc:a1:23: 05:70:ea:fc:ee:e0:aa:ac:0d:6b:bb:48:b1:f2:df: 5a:2e:94:98:42:7a:fb:5e:f6:e8:0b:18:e6:bb:77: 30:2a:56:b7:c3:21:cc:da:76:1b:65:4e:42:97:fe: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F6:1F:02:44:82:E6:AD:53:38:45:AB:D8:64:00:2C:81:8A:A3:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8a948e49-7e46-36a7-a6e4-9840d9b43381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:91:df:81:08:b2:29:0a:10:66:03:66:b6:88:23:c8:ae:3e: 23:04:2d:cf:f8:fe:3d:cd:ee:6a:60:14:e4:ee:27:90:33:a9: a7:16:b2:07:3d:f7:5b:42:f6:0e:02:25:9c:a2:07:56:46:d6: 94:60:a0:53:69:d7:64:e3:3e:60:81:31:e1:16:d9:42:48:1e: e5:2d:f7:e8:4b:ed:98:5d:ca:62:a7:a1:5e:4c:c7:30:1c:14: 87:50:95:a2:f2:2e:d5:4c:e7:7b:7e:0d:67:58:fe:07:81:9e: d4:44:69:83:06:98:b0:68:e3:fa:0d:d0:3f:99:96:e8:f9:fb: 25:f8:9c:19:f7:98:70:fd:f9:77:a8:af:43:8b:0e:66:71:10: 3a:6a:34:ef:64:bb:c3:c4:5b:c3:48:fb:29:5b:bb:b9:51:7d: ef:83:69:93:e8:6c:43:b4:fd:51:32:49:59:b0:89:6c:ab:b4: 2e:4f:f6:b8:d5:e7:e2:5b:65:23:bc:7a:f2:dc:12:21:de:62: e7:06:d7:44:f7:72:e8:29:a4:27:37:43:cc:51:05:6b:2a:89: da:97:2d:28:eb:36:e2:f7:7a:1d:ae:75:35:8e:6a:7f:95:f5: b1:ca:c4:48:6c:0f:56:85:7d:0e:28:68:8b:43:d5:65:56:7d: af:1e:44:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknhrhDphkiYbroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk N2E2MWQwNzAtOGMxNi00ODE5LWJlYjItZWNmYmY4MjAzNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBNi4yKr40/eumOMtDGDJ5C80uv0VmpRK8us tu0Jqego68y74YIAwTyFK9JzC73syeZetbtaZocSZeush4P1j2UtAOYZSkWho4FW 6bGtO6ng3ffWth2HK9S4rdPDhOVzYXRiENvCvj/THjsCrmmeRjfffc8lca5FMARf x7RL4nm3QB/Fixdu8EmScsV5onQwbM7xE0IqBj7TiuU3eTSMbFszRJc3L6vvPGn6 /zfULAhX2FtT45rmRod2A1nshLY+omZ1bjAKxXeyPaBICfPMoSMFcOr87uCqrA1r u0ix8t9aLpSYQnr7XvboCxjmu3cwKla3wyHM2nYbZU5Cl/73kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL72HwJEguatUzhFq9hkACyBiqOYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGE5NDhlNDktN2U0Ni0z NmE3LWE2ZTQtOTg0MGQ5YjQzMzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSR34EIsikKEGYDZraII8iuPiMELc/4/j3N7mpgFOTuJ5AzqacWsgc9 91tC9g4CJZyiB1ZG1pRgoFNp12TjPmCBMeEW2UJIHuUt9+hL7ZhdymKnoV5MxzAc FIdQlaLyLtVM53t+DWdY/geBntREaYMGmLBo4/oN0D+Zluj5+yX4nBn3mHD9+Xeo r0OLDmZxEDpqNO9ku8PEW8NI+ylbu7lRfe+DaZPobEO0/VEySVmwiWyrtC5P9rjV 5+JbZSO8evLcEiHeYucG10T3cugppCc3Q8xRBWsqidqXLSjrNuL3eh2udTWOan+V 9bHKxEhsD1aFfQ4oaItD1WVWfa8eRCY= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:37 2025 by rpki-client