$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa File: 939403aa-40ef-31de-8a1b-dffc0c092dbe.roa (raw, json) Hash identifier: hkb4cgQJXE59GaLR5EkaVbUUOCOXNw9LQoQ5u//tS5k= Subject key identifier: 06:16:B2:13:88:AE:FE:55:5D:48:AF:B3:1B:8A:1E:79:0B:DA:B3:6D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19278E8C016F244B9117980 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:e8:c0:16:f2:44:b9:11:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=29e2991f-09f5-4ee9-9016-85e9eabd47bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:9a:32:aa:b6:1b:a1:1e:4d:ab:91:51:97: ab:c3:8e:aa:06:db:47:a4:af:c4:95:12:ed:cf:5a: 9c:c4:eb:4f:66:32:31:22:27:20:f9:90:f5:f3:cc: cb:18:e1:42:9a:c2:ff:e0:66:25:65:65:54:08:b2: 91:26:26:4a:d4:8a:bc:11:c5:1d:73:b5:b0:bd:70: 46:18:7c:db:93:a0:22:97:2b:74:c0:17:5f:cd:f1: cd:da:92:b9:82:0b:60:e0:c7:cd:5d:39:82:c6:03: f2:f3:c9:f6:01:69:d2:90:af:ef:fd:55:e3:7b:f3: 50:8f:58:3a:67:8b:ac:f1:bb:7c:f7:af:e2:54:4e: 71:fc:e3:73:5c:4c:5a:c5:f2:bc:f4:41:ae:ff:97: c1:57:87:f0:5c:46:09:61:2e:47:24:e0:46:b8:ec: cd:eb:3b:00:d6:54:a9:a0:fd:52:ad:60:5a:8b:f2: 44:b8:27:09:88:af:b7:55:66:32:38:fe:8f:29:ef: ab:9e:da:d1:c2:61:79:04:11:c1:2e:03:d7:70:cf: 4f:4f:ed:35:f8:96:30:7f:fd:d4:14:7f:ec:9f:a8: 2c:00:e7:00:e0:7c:b0:5c:e8:ea:39:6f:f5:c5:3c: 6c:ef:9a:e2:2b:ec:0c:50:d9:4f:08:73:8e:2a:37: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:16:B2:13:88:AE:FE:55:5D:48:AF:B3:1B:8A:1E:79:0B:DA:B3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/939403aa-40ef-31de-8a1b-dffc0c092dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f1:b8:41:aa:31:10:fb:55:0e:1d:90:cb:60:67:8b:05:55: fe:29:37:ff:02:f7:00:9d:37:0d:da:21:17:fa:be:18:d7:bf: f1:6f:76:f0:6c:84:f4:84:89:44:75:fe:74:97:7d:4e:e9:76: 0c:0e:92:d3:6b:7e:52:6b:1a:04:f4:a9:83:45:a2:a8:4a:ab: fa:ec:4b:f2:d9:b8:f1:bc:76:c6:51:4d:5a:dc:18:37:65:be: 30:b2:ba:b7:72:2c:47:f3:cb:c0:67:75:a1:cb:d1:e8:f9:e2: 7f:78:12:b0:31:c0:e6:4d:1e:95:40:44:bb:10:10:06:5d:08: c2:2b:aa:d3:81:89:25:bc:2a:35:60:4f:a1:0b:f1:67:18:ac: 31:e7:f7:76:c0:b3:70:31:0a:30:53:78:7f:23:ca:76:7c:46: 43:29:f6:4c:ba:8c:b4:7c:3f:23:67:1c:84:09:87:09:d7:3f: b3:33:49:bc:54:f7:52:e0:fb:bd:fc:33:6f:e0:4f:52:eb:56: 83:15:3f:c6:a0:39:17:16:9a:fe:7d:14:68:2f:21:5c:34:79: 76:2c:8a:64:1d:8c:27:b5:51:9b:79:fa:aa:e8:0d:43:38:d3: 57:c6:d8:c2:15:01:3d:0f:35:0f:4d:69:70:65:07:8b:70:fa: a8:87:1f:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknjowBbyRLkReYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MjllMjk5MWYtMDlmNS00ZWU5LTkwMTYtODVlOWVhYmQ0N2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoaaMqq2G6EeTauRUZerw46qBttHpK/ElRLt z1qcxOtPZjIxIicg+ZD188zLGOFCmsL/4GYlZWVUCLKRJiZK1Iq8EcUdc7WwvXBG GHzbk6Ailyt0wBdfzfHN2pK5ggtg4MfNXTmCxgPy88n2AWnSkK/v/VXje/NQj1g6 Z4us8bt896/iVE5x/ONzXExaxfK89EGu/5fBV4fwXEYJYS5HJOBGuOzN6zsA1lSp oP1SrWBai/JEuCcJiK+3VWYyOP6PKe+rntrRwmF5BBHBLgPXcM9PT+01+JYwf/3U FH/sn6gsAOcA4HywXOjqOW/1xTxs75riK+wMUNlPCHOOKjcPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYWshOIrv5VXUivsxuKHnkL2rNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOTM5NDAzYWEtNDBlZi0z MWRlLThhMWItZGZmYzBjMDkyZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3xuEGqMRD7VQ4dkMtgZ4sFVf4pN/8C9wCdNw3aIRf6vhjXv/FvdvBs hPSEiUR1/nSXfU7pdgwOktNrflJrGgT0qYNFoqhKq/rsS/LZuPG8dsZRTVrcGDdl vjCyurdyLEfzy8BndaHL0ej54n94ErAxwOZNHpVARLsQEAZdCMIrqtOBiSW8KjVg T6EL8WcYrDHn93bAs3AxCjBTeH8jynZ8RkMp9ky6jLR8PyNnHIQJhwnXP7MzSbxU 91Lg+738M2/gT1LrVoMVP8agORcWmv59FGgvIVw0eXYsimQdjCe1UZt5+qroDUM4 01fG2MIVAT0PNQ9NaXBlB4tw+qiHH3M= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:47 2025 by rpki-client