$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa File: a2e24288-e94a-3c26-93c5-4dd394919e0e.roa (raw, json) Hash identifier: 3D/nT9PmTPTJNTFduy9dTFQ6vfg+tk7F6QYaKd3Co4c= Subject key identifier: AB:5D:73:E4:FD:CB:40:F9:45:F3:5A:43:96:45:64:08:A9:64:BA:A2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926A908F6D817A2721BB80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6a:90:8f:6d:81:7a:27:21:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=cf95d00c-be86-4551-83ed-f056b76c46cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:ef:17:10:19:6a:dd:e1:74:55:2a:6e:25: c2:06:98:92:c7:b8:8e:35:e6:4f:a0:9d:b9:de:d5: e0:0d:6f:0c:19:62:03:c9:f1:f8:d4:52:b2:8e:85: 2c:e8:70:d2:ba:3b:73:89:9c:68:ab:24:f9:fe:b6: 54:dd:e0:b9:50:bb:1c:27:9b:40:2f:ae:37:1a:3b: 4a:e1:f4:d7:c9:db:ab:64:55:7c:a9:09:97:52:bd: 0c:3a:c7:24:af:74:a8:9c:b3:03:87:73:be:05:0e: f0:0c:88:ea:e2:8f:e1:47:2a:f2:5c:ea:18:83:49: 6f:dc:ae:37:4f:0d:f3:6b:f4:fb:c3:e6:d1:74:a6: 4f:d0:e6:ca:30:4c:af:08:26:f8:9a:c2:7d:57:47: ed:f0:04:99:b1:d1:de:74:9b:d7:61:48:06:50:66: fb:e9:3e:17:ff:dd:11:22:ba:83:ec:d6:ff:6c:a7: cd:cc:0b:58:00:f6:72:08:d0:10:cf:a4:09:02:4c: b9:76:b6:93:4f:0a:cf:e5:2c:5c:c2:a4:9f:b9:a4: e4:26:59:cc:08:8d:16:f6:4d:c5:15:d2:92:32:f9: 3e:dc:85:0a:35:09:17:8c:66:ce:c4:be:06:7d:af: fe:07:8a:99:0b:f2:ed:cb:bb:6f:ca:d4:24:e7:64: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5D:73:E4:FD:CB:40:F9:45:F3:5A:43:96:45:64:08:A9:64:BA:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a2e24288-e94a-3c26-93c5-4dd394919e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:2f:f8:15:91:62:1b:b0:48:5d:ac:75:3a:17:75:e8:a9:11: 66:e2:35:b6:b5:0c:67:23:67:80:07:00:54:cc:c6:e5:8a:ee: 1b:ef:d4:78:b6:ac:f8:eb:52:9d:aa:6e:e1:90:39:cd:86:6b: 2b:82:cd:da:82:fe:c9:d0:7c:64:f8:cc:35:76:2c:88:92:a3: 8d:20:83:59:37:da:20:2b:e3:2a:9a:3e:d4:20:47:9a:7b:d4: 47:2c:1b:03:0f:b4:45:69:e3:85:48:5c:83:db:2f:23:0d:4d: 78:80:51:c2:c0:cd:7e:07:1a:e9:35:2f:9a:12:d4:4b:e9:27: dd:30:2a:50:45:63:50:86:06:e3:e9:29:51:bb:ed:ff:18:72: 4e:ce:50:99:5c:56:eb:c9:e1:f2:6f:da:81:a7:d2:69:ad:57: 24:9a:8c:31:56:32:16:96:a9:44:7d:3c:89:19:8e:36:c0:a0: 1a:36:1b:39:d1:b2:e3:b3:7f:54:9c:93:4b:d7:fe:5a:a2:57: 3c:e4:58:ba:02:20:ea:6d:8e:87:4f:34:09:49:84:56:d8:0e: 30:38:8b:cc:76:6b:8e:31:2b:51:e5:1a:0f:ac:92:e1:f6:aa: 37:90:dc:29:3e:52:2d:83:60:ae:df:9e:b2:d7:6f:af:87:24: d2:0b:b3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmqQj22Beichu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Y2Y5NWQwMGMtYmU4Ni00NTUxLTgzZWQtZjA1NmI3NmM0NmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4XvFxAZat3hdFUqbiXCBpiSx7iONeZPoJ25 3tXgDW8MGWIDyfH41FKyjoUs6HDSujtziZxoqyT5/rZU3eC5ULscJ5tAL643GjtK 4fTXydurZFV8qQmXUr0MOsckr3SonLMDh3O+BQ7wDIjq4o/hRyryXOoYg0lv3K43 Tw3za/T7w+bRdKZP0ObKMEyvCCb4msJ9V0ft8ASZsdHedJvXYUgGUGb76T4X/90R IrqD7Nb/bKfNzAtYAPZyCNAQz6QJAky5draTTwrP5SxcwqSfuaTkJlnMCI0W9k3F FdKSMvk+3IUKNQkXjGbOxL4Gfa/+B4qZC/Lty7tvytQk52TxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtdc+T9y0D5RfNaQ5ZFZAipZLqiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTJlMjQyODgtZTk0YS0z YzI2LTkzYzUtNGRkMzk0OTE5ZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEv+BWRYhuwSF2sdToXdeipEWbiNba1DGcjZ4AHAFTMxuWK7hvv1Hi2 rPjrUp2qbuGQOc2GayuCzdqC/snQfGT4zDV2LIiSo40gg1k32iAr4yqaPtQgR5p7 1EcsGwMPtEVp44VIXIPbLyMNTXiAUcLAzX4HGuk1L5oS1EvpJ90wKlBFY1CGBuPp KVG77f8Yck7OUJlcVuvJ4fJv2oGn0mmtVySajDFWMhaWqUR9PIkZjjbAoBo2GznR suOzf1Sck0vX/lqiVzzkWLoCIOptjodPNAlJhFbYDjA4i8x2a44xK1HlGg+skuH2 qjeQ3Ck+Ui2DYK7fnrLXb6+HJNILs+U= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:35 2025 by rpki-client