$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa File: a4d24589-120f-3342-a970-7f75ed378e81.roa (raw, json) Hash identifier: 4fIb9UWHDkYTxCnR/q6qwcvlkmRdTrQtdaQvNl4edUQ= Subject key identifier: 90:00:FA:58:69:D8:DA:5E:F5:8E:52:EC:E6:ED:01:48:F1:C3:39:96 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926B143FEE6C4C0463A178 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6b:14:3f:ee:6c:4c:04:63:a1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=5c3f77b9-9854-49dc-b7aa-f50cd8e2c44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:27:9d:38:aa:82:23:a2:9b:31:b5:be:ee: c4:51:4e:b8:40:b1:2a:c3:f3:a5:77:fd:c5:52:c4: 5c:8c:74:f0:db:74:19:ec:c8:8f:a1:a8:a3:d1:b4: d1:b0:43:23:69:88:0f:c7:88:e6:6c:62:9c:3a:9b: 64:7b:e5:c5:b1:67:e0:a5:d5:7f:b3:ea:ef:7a:35: 62:d4:b6:82:e7:c9:c9:89:97:63:06:3d:2a:ff:04: 7f:c8:74:3f:64:84:e3:fe:87:31:5f:e7:74:04:32: 8e:ad:3a:fc:3b:84:96:0a:ba:aa:d4:40:cc:a5:c8: 52:b7:35:69:55:8b:e7:06:50:52:c2:94:eb:88:cd: 39:97:3b:fd:9a:37:00:3a:50:31:cc:82:d8:fa:c8: 05:f0:ed:9e:ae:64:90:38:91:c5:66:a4:90:75:07: a8:16:04:24:1f:d8:f9:2a:4a:12:6e:51:16:14:89: c3:19:31:b0:3b:4f:74:1d:2f:18:46:52:08:f2:ee: bd:6c:31:28:5c:2b:4c:45:e7:68:95:d9:fb:f7:e7: d8:b6:3d:b8:ff:a3:d0:e4:3e:a9:52:9c:bf:2d:2a: 7f:a8:85:fc:32:10:3b:84:35:1e:b5:69:90:01:44: c3:ec:80:0e:a0:f0:af:b6:e1:5d:de:9e:4f:67:40: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:00:FA:58:69:D8:DA:5E:F5:8E:52:EC:E6:ED:01:48:F1:C3:39:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a4d24589-120f-3342-a970-7f75ed378e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:83:2d:4e:a8:68:fd:84:4b:49:aa:eb:ed:b3:8e:85:2e:8f: a4:06:86:d7:cc:de:f6:6a:f2:a8:57:4c:5b:67:ab:04:5f:c0: 68:c2:fb:75:8d:79:d7:9b:14:ec:b9:e7:91:56:43:39:e4:c7: 1b:69:f6:e3:19:49:23:a7:23:ae:c3:bd:32:ed:ec:0a:25:93: ed:ed:4a:47:55:39:23:37:ac:d2:02:ab:c7:07:db:78:99:53: a7:86:9e:85:d0:fc:96:70:a8:48:33:50:1c:67:ca:38:fa:e3: 50:7d:55:f6:5e:b6:5a:64:36:43:9a:17:21:92:a3:eb:0b:ff: ca:81:81:57:92:a4:b3:44:f3:95:3f:4d:4a:6d:14:fa:19:88: c4:ee:3d:e2:20:dc:87:9b:c7:6d:77:9f:72:40:54:0b:45:10: cb:a3:2b:7d:92:b9:3a:79:32:2e:ff:dc:ae:87:87:8e:a5:db: 9e:2a:f4:8d:19:ab:45:74:87:87:d0:2b:12:a8:c1:65:e9:a6: 77:dc:e3:09:9c:a7:cb:17:c6:b9:2e:6d:9b:31:0e:84:4e:07: b0:95:19:bc:d1:03:c0:75:5d:9c:90:eb:ef:20:0b:01:0d:ec: ac:a6:a8:b7:62:c3:58:c2:93:74:b7:a6:df:88:eb:30:00:4b: 5c:dc:86:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmsUP+5sTARjoXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NWMzZjc3YjktOTg1NC00OWRjLWI3YWEtZjUwY2Q4ZTJjNDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5InnTiqgiOimzG1vu7EUU64QLEqw/Old/3F UsRcjHTw23QZ7MiPoaij0bTRsEMjaYgPx4jmbGKcOptke+XFsWfgpdV/s+rvejVi 1LaC58nJiZdjBj0q/wR/yHQ/ZITj/ocxX+d0BDKOrTr8O4SWCrqq1EDMpchStzVp VYvnBlBSwpTriM05lzv9mjcAOlAxzILY+sgF8O2ermSQOJHFZqSQdQeoFgQkH9j5 KkoSblEWFInDGTGwO090HS8YRlII8u69bDEoXCtMRedoldn79+fYtj24/6PQ5D6p Upy/LSp/qIX8MhA7hDUetWmQAUTD7IAOoPCvtuFd3p5PZ0C+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAA+lhp2Npe9Y5S7ObtAUjxwzmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTRkMjQ1ODktMTIwZi0z MzQyLWE5NzAtN2Y3NWVkMzc4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmDLU6oaP2ES0mq6+2zjoUuj6QGhtfM3vZq8qhXTFtnqwRfwGjC+3WN edebFOy555FWQznkxxtp9uMZSSOnI67DvTLt7Aolk+3tSkdVOSM3rNICq8cH23iZ U6eGnoXQ/JZwqEgzUBxnyjj641B9VfZetlpkNkOaFyGSo+sL/8qBgVeSpLNE85U/ TUptFPoZiMTuPeIg3Iebx213n3JAVAtFEMujK32SuTp5Mi7/3K6Hh46l254q9I0Z q0V0h4fQKxKowWXppnfc4wmcp8sXxrkubZsxDoROB7CVGbzRA8B1XZyQ6+8gCwEN 7KymqLdiw1jCk3S3pt+I6zAAS1zchrc= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:37 2025 by rpki-client