$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9392c456-083c-3b25-8c7e-47eaf965ba64.roa File: 9392c456-083c-3b25-8c7e-47eaf965ba64.roa (raw, json) Hash identifier: 3WTS6v/FTkN/x94vPY01tJKjCJq+BwhcvtgzOkd9bXg= Subject key identifier: 01:FE:17:73:7E:C3:48:F8:43:85:3F:B6:7D:E0:30:74:19:50:CE:60 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19269CC4CA2FB528EC4ADC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9392c456-083c-3b25-8c7e-47eaf965ba64.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:69:cc:4c:a2:fb:52:8e:c4:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=3e630f81-ced9-4568-903b-260902943b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:31:bd:fe:b7:b4:d8:89:1a:73:30:a7:24: 09:7b:e3:48:73:fe:ee:08:78:bf:7e:f2:b2:7f:fe: 07:7e:b6:e0:94:49:40:1b:e0:5d:f6:1b:74:3a:1e: 49:59:cd:f1:27:0c:4f:56:00:8d:c1:e5:e5:03:1e: 6d:27:77:c2:e4:16:35:4a:e7:50:02:d7:e5:d2:50: 7b:f4:f7:bf:4b:ea:98:c3:3b:3a:c3:a2:49:3a:e8: c7:10:44:57:88:46:71:75:56:6e:18:1e:23:83:5a: 0d:ec:3b:7d:62:0b:dd:a8:0f:84:7a:89:52:d1:6f: 69:bb:76:c8:84:9f:16:0b:aa:c3:b7:5b:43:0c:44: 27:8f:be:94:fa:98:97:bb:29:78:aa:5f:67:ef:58: 38:56:24:0d:1a:e3:46:23:0f:0b:30:a2:e4:3c:49: e8:8a:76:b7:00:71:49:cc:ce:1d:df:b6:2d:52:09: 4f:33:8b:36:f1:dc:8c:39:e8:3d:4c:91:16:5e:9a: 4e:6f:ab:c2:43:59:d0:82:0a:28:6b:a0:57:cd:6f: f8:d8:61:90:1c:a9:80:6b:f7:a6:ed:d4:f3:85:b8: bb:be:b8:98:22:42:e6:b3:69:62:7e:b7:12:2e:e8: 88:aa:df:62:90:20:84:65:49:5a:9a:bd:03:cd:fe: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:17:73:7E:C3:48:F8:43:85:3F:B6:7D:E0:30:74:19:50:CE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9392c456-083c-3b25-8c7e-47eaf965ba64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:06:00:d8:f4:fc:51:49:bd:f9:35:04:4b:19:d7:bf:7d:3b: 87:06:99:0a:38:ca:ab:f0:f9:4e:b9:8c:44:b5:28:e7:39:9d: e2:96:1c:8e:dd:c0:e1:25:89:3e:5a:4d:20:89:d4:1e:21:a6: 97:b5:42:34:c0:90:15:67:c3:21:73:af:4b:a7:c0:46:ef:59: 50:4f:8c:13:d7:94:5d:8c:a4:1b:1f:1e:eb:dd:5f:d6:3b:23: eb:e5:e3:d5:f4:39:4f:a4:b8:30:1a:09:10:23:1a:15:67:d2: 2e:3d:cd:91:e7:80:67:26:98:7f:5e:57:c9:90:7f:61:12:3c: bf:b6:24:0c:7c:f0:c1:5b:a7:cf:98:97:35:c0:62:39:9e:66: 42:c1:f4:f7:8c:18:cf:f8:d1:44:8f:08:bf:e1:06:3f:dc:61: ff:7f:52:c7:a2:e9:8f:4b:a2:14:9b:f4:1c:f5:64:1a:07:1f: 8e:d2:34:75:ef:a6:3b:e1:79:4d:5f:29:88:e6:c0:ea:96:00: 68:53:65:da:10:9c:8b:aa:8e:e3:4e:7d:32:71:07:c2:b3:b8: 11:08:5b:00:63:72:8d:a0:3e:b8:5d:c2:f2:e7:87:64:02:a8: b1:d3:1c:ce:79:37:d8:e0:70:a1:8a:ee:e4:5e:7f:87:3e:b0: f4:ea:be:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmnMTKL7Uo7ErcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk M2U2MzBmODEtY2VkOS00NTY4LTkwM2ItMjYwOTAyOTQzYjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAoxvf63tNiJGnMwpyQJe+NIc/7uCHi/fvKy f/4HfrbglElAG+Bd9ht0Oh5JWc3xJwxPVgCNweXlAx5tJ3fC5BY1SudQAtfl0lB7 9Pe/S+qYwzs6w6JJOujHEERXiEZxdVZuGB4jg1oN7Dt9YgvdqA+EeolS0W9pu3bI hJ8WC6rDt1tDDEQnj76U+piXuyl4ql9n71g4ViQNGuNGIw8LMKLkPEnoina3AHFJ zM4d37YtUglPM4s28dyMOeg9TJEWXppOb6vCQ1nQggooa6BXzW/42GGQHKmAa/em 7dTzhbi7vriYIkLms2lifrcSLuiIqt9ikCCEZUlamr0Dzf7etwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH+F3N+w0j4Q4U/tn3gMHQZUM5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTM5MmM0NTYtMDgzYy0z YjI1LThjN2UtNDdlYWY5NjViYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUGANj0/FFJvfk1BEsZ1799O4cGmQo4yqvw+U65jES1KOc5neKWHI7d wOEliT5aTSCJ1B4hppe1QjTAkBVnwyFzr0unwEbvWVBPjBPXlF2MpBsfHuvdX9Y7 I+vl49X0OU+kuDAaCRAjGhVn0i49zZHngGcmmH9eV8mQf2ESPL+2JAx88MFbp8+Y lzXAYjmeZkLB9PeMGM/40USPCL/hBj/cYf9/Usei6Y9LohSb9Bz1ZBoHH47SNHXv pjvheU1fKYjmwOqWAGhTZdoQnIuqjuNOfTJxB8KzuBEIWwBjco2gPrhdwvLnh2QC qLHTHM55N9jgcKGK7uRef4c+sPTqvqw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:37:01 2025 by rpki-client