$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa File: a67b845b-923e-3bcb-95a6-60afc388cfed.roa (raw, json) Hash identifier: ykoFTvMxbl2hlFxVpgtzudI93HmEd5cwQiBeT3eKBNs= Subject key identifier: 8D:47:E2:94:2B:BA:06:0A:46:9B:35:A0:A9:9B:01:A2:65:D8:B1:59 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD12359DBD8ADEE1CC68C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:12:35:9d:bd:8a:de:e1:cc:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=fea1e889-7e4c-4576-b62f-ea92b48f6125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:c0:44:31:46:1c:e1:4b:a3:0d:f1:37:be: 12:01:cb:00:02:27:94:91:26:58:6e:4c:68:5f:f1: f5:23:c9:54:e8:79:c3:9f:7b:f2:85:3e:87:ce:bf: 66:0b:55:94:58:14:0b:dd:3c:e2:1b:84:72:5c:ed: f7:08:2c:8c:44:0a:18:34:57:78:90:8f:99:57:24: 30:c9:e6:f3:59:0c:20:db:a1:9a:d1:26:6e:66:48: 6e:58:a3:c5:75:8e:31:6d:2d:c3:36:be:fd:d2:2b: db:24:0d:34:3c:b9:e5:90:23:6d:21:f6:45:43:9c: ae:44:ec:12:a4:d7:5a:c7:21:14:e4:03:5e:5a:24: ee:e6:a2:f5:25:23:6c:df:d6:94:45:e8:5c:3e:94: 68:d1:f2:6b:55:7a:9b:f6:9d:bd:7b:dd:80:6d:42: 96:98:3e:f9:8a:a8:b6:93:2e:ea:1d:c6:4c:24:06: f4:76:0e:48:92:cf:48:89:eb:4b:12:e1:a8:59:b9: 66:0f:3f:e3:16:ac:ce:a6:96:36:0e:3f:bd:27:5a: 01:b0:2f:21:50:d3:65:8f:9d:2e:c0:bc:55:68:53: 66:d7:0c:f1:1c:0a:27:d6:f5:81:dc:0b:67:c8:b5: dc:d8:88:dd:06:b7:24:49:c5:f1:af:f7:f9:2b:a7: 34:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:E2:94:2B:BA:06:0A:46:9B:35:A0:A9:9B:01:A2:65:D8:B1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a67b845b-923e-3bcb-95a6-60afc388cfed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:38:b0:43:b7:86:9c:1c:87:9e:47:ec:c6:2c:52:e5:0c:2d: dc:0e:6f:ac:7d:47:6f:36:3c:33:fe:44:72:f0:08:71:f0:a3: 18:df:d9:1a:bd:77:ed:d3:da:d1:a3:0d:b4:f8:e0:1c:79:8b: 0e:5d:34:c3:f8:ef:79:c3:c7:8b:ba:9e:ce:de:40:8f:c6:c9: 92:20:4a:ce:3c:a6:07:78:06:9a:e2:80:a2:65:57:66:68:eb: 03:74:5f:70:f1:fd:be:96:71:04:42:f3:44:fd:75:56:0e:17: 2a:94:ad:24:81:a3:5c:33:27:66:11:56:87:f9:40:6c:3d:0e: 42:7d:fc:77:3b:d7:e7:a9:15:3f:54:89:81:56:35:23:06:d1: 0c:dc:90:8b:58:f3:21:cc:20:92:70:f6:45:cc:90:f2:5b:14: 2f:ff:7f:01:2b:16:4a:18:02:84:c4:3e:d2:3b:cb:00:76:63: ed:b0:16:04:ee:64:4e:ec:6b:fc:4a:ee:56:38:d2:9d:08:c8: 14:db:aa:a2:89:3a:05:27:e0:35:4a:7a:4d:64:70:4b:ea:a7: 2b:a5:9a:31:b5:f5:20:28:00:c9:ec:97:e4:4e:1a:63:1d:8d: 05:d0:17:21:93:c7:0b:00:89:f3:f2:a8:a6:3b:11:d2:43:68: 44:c6:91:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRI1nb2K3uHMaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ZmVhMWU4ODktN2U0Yy00NTc2LWI2MmYtZWE5MmI0OGY2MTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMLARDFGHOFLow3xN74SAcsAAieUkSZYbkxo X/H1I8lU6HnDn3vyhT6Hzr9mC1WUWBQL3TziG4RyXO33CCyMRAoYNFd4kI+ZVyQw yebzWQwg26Ga0SZuZkhuWKPFdY4xbS3DNr790ivbJA00PLnlkCNtIfZFQ5yuROwS pNdaxyEU5ANeWiTu5qL1JSNs39aURehcPpRo0fJrVXqb9p29e92AbUKWmD75iqi2 ky7qHcZMJAb0dg5Iks9IietLEuGoWblmDz/jFqzOppY2Dj+9J1oBsC8hUNNlj50u wLxVaFNm1wzxHAon1vWB3AtnyLXc2IjdBrckScXxr/f5K6c0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1H4pQrugYKRps1oKmbAaJl2LFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTY3Yjg0NWItOTIzZS0z YmNiLTk1YTYtNjBhZmMzODhjZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ4sEO3hpwch55H7MYsUuUMLdwOb6x9R282PDP+RHLwCHHwoxjf2Rq9 d+3T2tGjDbT44Bx5iw5dNMP473nDx4u6ns7eQI/GyZIgSs48pgd4BprigKJlV2Zo 6wN0X3Dx/b6WcQRC80T9dVYOFyqUrSSBo1wzJ2YRVof5QGw9DkJ9/Hc71+epFT9U iYFWNSMG0QzckItY8yHMIJJw9kXMkPJbFC//fwErFkoYAoTEPtI7ywB2Y+2wFgTu ZE7sa/xK7lY40p0IyBTbqqKJOgUn4DVKek1kcEvqpyulmjG19SAoAMnsl+ROGmMd jQXQFyGTxwsAifPyqKY7EdJDaETGkUw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:32:53 2025 by rpki-client