$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa File: 9ff06541-3068-32ab-8810-f331d453858b.roa (raw, json) Hash identifier: mPp3sKlxxNOcZxEdRmy03dzDPEXE/OvwjyPJC7wky18= Subject key identifier: C4:DF:7D:50:DC:DD:2C:38:22:04:67:BA:B5:7F:24:70:F2:DA:39:D1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926ADFB52B536D62EAC580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6a:df:b5:2b:53:6d:62:ea:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=e15f0c8a-5429-4c8d-815b-2a77e7543036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:5d:56:03:39:2b:60:f3:69:8e:c1:98:5b: 8b:a8:52:84:3f:2e:9a:1b:75:69:85:ca:28:3a:da: 21:93:1b:7c:2f:cc:a9:bf:3f:e6:02:fe:68:07:ae: e2:db:5e:d1:89:f3:d6:d6:f8:ea:0f:17:5d:80:f6: a8:ca:78:34:1b:26:12:45:52:25:14:3a:73:d8:66: cf:2c:07:27:a4:b4:15:99:f0:54:80:37:66:01:9f: 60:d4:c3:be:47:ab:90:47:b3:7c:ab:e3:de:40:0c: c0:6f:0e:39:2f:d0:d3:d8:af:74:63:48:be:40:24: 8f:fb:4f:4d:5e:83:22:b9:18:1a:5d:23:52:12:8b: 1a:56:d8:90:35:ea:22:8c:81:85:68:00:0e:92:5e: a0:31:12:5b:0f:1c:4d:69:45:a6:0c:48:d6:31:cd: 6c:9f:7c:3d:70:b2:ff:4f:61:5b:4d:51:db:9e:cb: e9:69:47:12:ac:c7:69:cc:2d:ca:d6:6b:c3:17:75: 14:17:de:39:bd:d8:01:b3:3d:84:1b:cc:af:6a:ee: ad:1a:7d:46:52:8e:4f:84:4f:f1:9b:0c:bd:cf:17: e0:89:06:0e:29:cd:0c:78:19:9d:47:77:14:13:10: 14:ab:cc:96:4d:6b:a3:73:80:12:c6:ea:f8:eb:b6: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DF:7D:50:DC:DD:2C:38:22:04:67:BA:B5:7F:24:70:F2:DA:39:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/9ff06541-3068-32ab-8810-f331d453858b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a2:a1:fc:64:f8:67:1e:f1:c8:60:79:9a:1a:ed:25:9b:8d: 3a:3a:53:75:3f:73:28:8a:fb:ca:e3:10:93:c6:22:42:e2:19: ba:25:69:62:f2:bc:72:07:89:08:0e:17:fe:1d:8c:3d:ce:52: c6:29:90:1e:8b:4b:9a:f7:79:bf:aa:70:aa:c3:47:ee:92:f8: 68:0e:f5:5f:54:b6:9f:bd:37:f9:bd:62:c2:f7:a6:24:c8:e1: bb:a5:28:c8:50:72:d9:9d:dc:9c:93:6d:36:e6:35:74:29:03: de:8f:1a:70:52:86:ee:29:f1:04:2d:98:e5:05:5e:b8:39:26: c9:53:90:d3:06:49:9f:2c:a0:ad:1d:9e:30:ce:14:41:7a:6f: c4:c6:4c:f7:30:4b:c4:72:3a:e6:71:cd:c8:7d:a4:60:4b:c3: af:1c:c8:29:99:3a:28:bb:8f:f2:43:5d:d5:6b:53:17:a6:a1: 7d:87:4c:9e:fd:b4:9b:aa:e5:98:88:3c:af:86:d7:31:9a:e0: d6:1a:96:ca:7b:e6:31:74:0a:38:2f:61:21:5f:c2:8d:b9:6f: ac:41:3e:22:e4:8f:cb:8e:d5:2e:90:fc:79:92:ec:da:d8:bf: 4d:9a:93:e6:c6:4c:7b:5a:b0:a4:17:06:2d:77:ad:84:b8:42: aa:12:ac:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmrftStTbWLqxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZTE1ZjBjOGEtNTQyOS00YzhkLTgxNWItMmE3N2U3NTQzMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngNdVgM5K2DzaY7BmFuLqFKEPy6aG3Vphcoo Otohkxt8L8ypvz/mAv5oB67i217RifPW1vjqDxddgPaoyng0GyYSRVIlFDpz2GbP LAcnpLQVmfBUgDdmAZ9g1MO+R6uQR7N8q+PeQAzAbw45L9DT2K90Y0i+QCSP+09N XoMiuRgaXSNSEosaVtiQNeoijIGFaAAOkl6gMRJbDxxNaUWmDEjWMc1sn3w9cLL/ T2FbTVHbnsvpaUcSrMdpzC3K1mvDF3UUF945vdgBsz2EG8yvau6tGn1GUo5PhE/x mwy9zxfgiQYOKc0MeBmdR3cUExAUq8yWTWujc4ASxur467YBfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTffVDc3Sw4IgRnurV/JHDy2jnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOWZmMDY1NDEtMzA2OC0z MmFiLTg4MTAtZjMzMWQ0NTM4NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSiofxk+Gce8chgeZoa7SWbjTo6U3U/cyiK+8rjEJPGIkLiGbolaWLy vHIHiQgOF/4djD3OUsYpkB6LS5r3eb+qcKrDR+6S+GgO9V9Utp+9N/m9YsL3piTI 4bulKMhQctmd3JyTbTbmNXQpA96PGnBShu4p8QQtmOUFXrg5JslTkNMGSZ8soK0d njDOFEF6b8TGTPcwS8RyOuZxzch9pGBLw68cyCmZOii7j/JDXdVrUxemoX2HTJ79 tJuq5ZiIPK+G1zGa4NYalsp75jF0CjgvYSFfwo25b6xBPiLkj8uO1S6Q/HmS7NrY v02ak+bGTHtasKQXBi13rYS4QqoSrGw= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:42 2025 by rpki-client