$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa File: 9c07aace-1927-30c1-b311-abd823477496.roa (raw, json) Hash identifier: yBboD6mQnJbv4kcSasO44aLvtXtYW0IPtaiCF6PixjM= Subject key identifier: 3D:FF:F9:3A:95:03:83:00:7A:9A:A7:6E:F7:A7:31:CC:37:50:42:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192780F5AF900A18078ADC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:0f:5a:f9:00:a1:80:78:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=f9484e4f-f90b-4e77-9b2e-12e5b5551f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:34:29:c7:d4:54:c0:98:9d:9b:f9:10:9b: 1f:97:be:a1:6a:d2:d1:17:16:b1:57:6f:0a:85:b0: c0:1c:e9:03:52:cb:df:b5:31:67:35:29:bf:f0:e8: bc:ce:8f:7f:23:d1:08:19:6a:72:97:33:45:a0:db: ad:e9:a8:0e:97:43:e6:2b:03:a6:fd:89:a9:15:a5: 5e:a3:bb:b5:27:b1:bd:5c:3d:2d:ba:e1:1c:c1:ad: 24:7d:0f:8f:ee:e9:ac:ee:cc:d4:03:23:30:21:ab: ab:19:1e:49:53:e9:6c:5d:21:4e:b4:64:25:93:16: 28:9d:79:f8:f2:2c:46:8e:6d:67:92:94:42:c9:3e: e0:6c:ec:f9:48:03:e1:72:7d:bc:8e:9c:37:49:6f: 21:26:ca:14:f9:53:36:21:ca:e4:97:8f:6b:d8:a3: f1:70:50:76:06:be:79:92:87:1e:79:ef:1d:3f:2f: 1a:6e:6a:7c:09:c2:8f:81:34:d8:b1:23:2f:0e:53: ad:49:c9:7d:c5:5c:55:d6:69:2d:9c:cd:0e:25:0b: 96:32:b5:be:95:c2:3d:f9:a5:93:6b:44:c8:1a:31: a3:4f:b8:66:48:62:93:b3:7d:5b:8a:99:c0:6f:00: 1e:87:2f:cb:be:ce:70:d1:ee:48:e4:32:7a:65:3c: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FF:F9:3A:95:03:83:00:7A:9A:A7:6E:F7:A7:31:CC:37:50:42:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9c07aace-1927-30c1-b311-abd823477496.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:76:fb:d6:1d:76:a8:fe:42:8a:d4:82:05:c9:90:73:db:13: 02:7d:20:63:b6:2a:eb:2d:da:58:50:61:97:23:45:da:ae:e5: 8d:31:59:23:fc:c7:ce:e1:8a:03:a5:84:c6:f0:a9:0d:f7:52: 5d:7e:07:ce:ed:1c:e4:ee:13:28:6e:98:98:52:7c:21:ff:62: f6:c6:46:a3:01:78:21:95:d6:ff:45:ad:0a:55:21:96:6b:41: 97:e6:c2:ed:3a:21:77:24:cd:46:10:02:c8:88:8e:18:b0:48: bb:ef:ee:07:55:e7:6e:53:2e:57:0f:a4:ae:6b:4b:24:49:dd: 79:d7:b2:5c:b1:7a:ac:ef:7f:6d:79:5e:dc:2d:27:8b:5f:48: 11:d6:cc:11:e1:aa:db:48:b2:fb:72:2c:56:91:3d:ac:0b:1f: ab:c9:ca:ea:2d:c7:b5:74:e8:46:75:02:cc:24:54:64:cf:5a: ea:2a:10:1e:fb:98:ff:e7:56:71:0c:ab:14:2c:72:70:11:2c: 04:61:d1:8e:14:a4:51:55:5d:90:34:d9:df:38:9a:74:aa:9b: d4:9b:24:07:cd:21:86:f9:52:9c:b4:a4:89:63:70:86:e7:7b: 33:14:a7:e9:59:22:3d:e9:03:61:d8:2f:19:c1:0d:04:0e:0b: d4:6f:98:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkngPWvkAoYB4rcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Zjk0ODRlNGYtZjkwYi00ZTc3LTliMmUtMTJlNWI1NTUxZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyY0KcfUVMCYnZv5EJsfl76hatLRFxaxV28K hbDAHOkDUsvftTFnNSm/8Oi8zo9/I9EIGWpylzNFoNut6agOl0PmKwOm/YmpFaVe o7u1J7G9XD0tuuEcwa0kfQ+P7ums7szUAyMwIaurGR5JU+lsXSFOtGQlkxYonXn4 8ixGjm1nkpRCyT7gbOz5SAPhcn28jpw3SW8hJsoU+VM2Icrkl49r2KPxcFB2Br55 koceee8dPy8abmp8CcKPgTTYsSMvDlOtScl9xVxV1mktnM0OJQuWMrW+lcI9+aWT a0TIGjGjT7hmSGKTs31bipnAbwAehy/Lvs5w0e5I5DJ6ZTyFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3/+TqVA4MAepqnbvenMcw3UEKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWMwN2FhY2UtMTkyNy0z MGMxLWIzMTEtYWJkODIzNDc3NDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ2+9Yddqj+QorUggXJkHPbEwJ9IGO2Kust2lhQYZcjRdqu5Y0xWSP8 x87higOlhMbwqQ33Ul1+B87tHOTuEyhumJhSfCH/YvbGRqMBeCGV1v9FrQpVIZZr QZfmwu06IXckzUYQAsiIjhiwSLvv7gdV525TLlcPpK5rSyRJ3XnXslyxeqzvf215 XtwtJ4tfSBHWzBHhqttIsvtyLFaRPawLH6vJyuotx7V06EZ1AswkVGTPWuoqEB77 mP/nVnEMqxQscnARLARh0Y4UpFFVXZA02d84mnSqm9SbJAfNIYb5Upy0pIljcIbn ezMUp+lZIj3pA2HYLxnBDQQOC9RvmH4= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:56 2025 by rpki-client