$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa File: 9ea72dd8-e25c-35dd-994d-c81a614f044e.roa (raw, json) Hash identifier: fj+JEdTzTxC67rxbBMnapXvf6kZ8yuIKEbrFGnUeMiE= Subject key identifier: CF:62:C3:56:60:DC:5D:79:7C:35:A4:8B:6E:C0:70:E9:0B:1A:09:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB19278C6944D214440380DC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:c6:94:4d:21:44:40:38:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=111c9f20-a911-4f6b-a172-dad09def531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:53:2c:aa:14:29:71:1c:0c:b3:50:25:18: 49:93:dd:f5:b5:89:16:92:86:24:d5:8e:75:15:f1: 74:4a:9d:cd:fb:00:77:c5:a9:47:b6:50:b7:08:0e: 16:e8:9a:9c:2e:9c:84:8a:38:aa:14:91:2f:11:3b: 88:80:1e:87:d2:d1:dc:9e:61:3d:cb:fe:06:cb:09: 7e:99:a4:5c:7f:59:9e:cb:19:b3:60:ad:84:3c:20: 8c:d4:35:d5:52:87:f2:c3:f9:57:0e:77:8e:6c:a4: 51:63:af:3c:04:1d:83:04:a0:bd:23:8d:b0:57:aa: 23:94:c7:a8:1c:fb:2c:00:2e:29:9a:59:7e:cd:a1: 3f:b7:98:60:2b:26:73:23:42:84:3c:ca:ee:f0:12: c1:1d:26:11:94:af:a4:08:9d:e3:c1:a5:8b:d8:8a: 51:ee:67:e5:4c:11:4a:2e:ab:23:65:54:62:1e:aa: 9e:ce:85:40:76:b4:cc:23:77:31:b1:f2:42:3d:6a: 52:76:ec:e6:5f:26:34:2d:1e:1a:ba:9c:a0:f4:fa: 34:86:0d:10:de:46:cc:d0:b1:a3:e7:5e:b5:2d:22: dc:f4:a2:4a:7c:e6:ad:03:7c:eb:90:3b:79:88:f1: 09:5b:1b:d2:cf:4e:16:45:94:28:9d:05:4a:fc:09: e7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:62:C3:56:60:DC:5D:79:7C:35:A4:8B:6E:C0:70:E9:0B:1A:09:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ea72dd8-e25c-35dd-994d-c81a614f044e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:20:26:91:ee:7e:6b:95:44:ae:d8:2e:86:ad:0c:e5:8c:6f: 2c:e3:d8:01:72:62:4f:c0:27:ad:6e:95:13:ed:cf:12:64:00: 90:97:ef:81:aa:fa:f7:35:df:6c:d7:c5:d0:06:ca:3b:1f:85: a0:80:10:5c:c5:a6:15:ca:41:93:01:ad:f1:5b:e8:41:25:15: 7e:53:c2:dc:a0:27:d3:3f:32:8a:4e:8b:1b:e5:7d:23:f5:f9: 43:cf:cd:44:83:21:7d:a4:40:e6:b1:80:8a:4d:01:14:a5:36: 9b:48:7f:74:75:17:f8:c3:f2:7c:ad:47:e0:1b:1f:a5:d3:d9: 50:b5:9f:fa:45:45:29:93:b1:e8:70:19:8e:fc:76:60:11:82: 5a:bc:b0:c7:65:b3:42:04:3a:8c:4b:ce:a8:65:d3:c6:e6:c4: a7:ef:35:a0:7c:3b:c5:9d:94:32:0d:1b:e6:66:fa:9b:74:0e: ad:a0:12:11:37:e2:08:2a:b5:9a:2e:30:8c:ac:75:98:49:09: fe:cd:cd:19:f1:0a:88:55:f2:24:cb:e2:bf:93:e0:e9:53:c3: 11:b7:0d:a8:28:b7:2c:e5:05:d8:12:8c:84:dd:e3:a7:1b:c5: f7:61:56:75:5f:52:5b:ee:91:e8:19:05:1a:b6:a3:ea:7a:9f: cd:bf:42:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknjGlE0hREA4DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MTExYzlmMjAtYTkxMS00ZjZiLWExNzItZGFkMDlkZWY1MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyZTLKoUKXEcDLNQJRhJk931tYkWkoYk1Y51 FfF0Sp3N+wB3xalHtlC3CA4W6JqcLpyEijiqFJEvETuIgB6H0tHcnmE9y/4Gywl+ maRcf1meyxmzYK2EPCCM1DXVUofyw/lXDneObKRRY688BB2DBKC9I42wV6ojlMeo HPssAC4pmll+zaE/t5hgKyZzI0KEPMru8BLBHSYRlK+kCJ3jwaWL2IpR7mflTBFK LqsjZVRiHqqezoVAdrTMI3cxsfJCPWpSduzmXyY0LR4aupyg9Po0hg0Q3kbM0LGj 5161LSLc9KJKfOatA3zrkDt5iPEJWxvSz04WRZQonQVK/AnnGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9iw1Zg3F15fDWki27AcOkLGglZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWVhNzJkZDgtZTI1Yy0z NWRkLTk5NGQtYzgxYTYxNGYwNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEgJpHufmuVRK7YLoatDOWMbyzj2AFyYk/AJ61ulRPtzxJkAJCX74Gq +vc132zXxdAGyjsfhaCAEFzFphXKQZMBrfFb6EElFX5TwtygJ9M/MopOixvlfSP1 +UPPzUSDIX2kQOaxgIpNARSlNptIf3R1F/jD8nytR+AbH6XT2VC1n/pFRSmTsehw GY78dmARglq8sMdls0IEOoxLzqhl08bmxKfvNaB8O8WdlDING+Zm+pt0Dq2gEhE3 4ggqtZouMIysdZhJCf7NzRnxCohV8iTL4r+T4OlTwxG3DagotyzlBdgSjITd46cb xfdhVnVfUlvukegZBRq2o+p6n82/Qjs= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:35 2025 by rpki-client