$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa File: a88128f7-729a-3527-a66e-0f8deb6e69f8.roa (raw, json) Hash identifier: y8+3HxE1aAzB64pLjEB741+LZyjIs+q/uG5P5Qc6qfs= Subject key identifier: EB:17:32:A6:13:59:86:4A:17:A1:16:07:4C:C4:36:DF:C5:DF:FB:BF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927957DE3371BBF1191A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:79:57:de:33:71:bb:f1:19:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=fe229b5f-8b43-4eb6-adb8-bc80595487fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:a7:88:20:d7:75:4e:7b:e4:a6:6c:d1:3c: 70:96:6d:4e:69:d3:35:b2:da:6d:11:f4:fd:58:f5: c0:01:6e:80:64:02:cc:d0:0b:d4:07:cc:69:5a:71: 63:c7:5c:e0:98:5b:ed:5a:71:e9:f0:16:61:04:e3: de:31:9b:1e:41:6b:a3:fb:8a:e5:a0:4d:c3:49:1f: f3:4d:57:2c:51:83:a8:d1:5e:ea:ea:44:f8:41:9a: 66:f1:0a:8f:7d:b9:13:8f:f6:26:a9:93:f8:99:c4: f1:a0:5e:cf:18:28:dc:7c:9d:2a:df:1f:03:c7:1e: 31:a7:47:17:10:72:bf:31:35:e0:27:a1:a2:32:78: a6:48:e7:56:b2:fa:8e:62:8d:21:a5:ef:74:ee:ea: 1e:7d:35:d6:40:e4:19:12:6b:1b:9d:f7:e0:30:84: af:22:1b:14:7e:1e:59:df:2b:10:51:10:36:0a:c9: 84:ea:7a:34:22:d3:5d:e0:9c:66:69:4d:1b:09:af: 78:aa:1a:64:5d:4f:55:02:cb:9b:4d:c0:be:81:91: 14:6c:0e:49:4f:18:b6:11:c0:3f:21:b8:43:9d:34: fc:f1:bd:fd:12:f1:2b:85:f5:0e:dc:1f:d9:37:59: 30:79:6f:09:84:8b:a2:48:32:40:97:79:cd:a0:3c: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:17:32:A6:13:59:86:4A:17:A1:16:07:4C:C4:36:DF:C5:DF:FB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a88128f7-729a-3527-a66e-0f8deb6e69f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:15:24:72:63:23:f7:64:5f:af:cb:bd:5a:aa:30:59:7c:75: 27:7e:a4:56:59:56:12:96:87:83:31:5b:e1:26:c7:d6:51:53: 33:69:e8:38:0c:1c:0b:5f:60:71:fc:ce:eb:06:1c:87:83:fa: d4:5a:a5:9c:3d:52:4a:3a:72:08:b9:dc:06:35:d3:99:d9:be: c6:70:9c:3b:48:2f:e5:62:9a:68:63:22:9c:3c:3e:bb:ef:a0: da:ff:2c:57:d4:5b:57:1a:4f:f8:42:ac:db:c6:92:03:73:1d: 47:e1:fe:19:26:dd:46:e0:f8:28:a5:9b:3c:b1:98:58:be:bd: a2:af:05:fc:fa:4a:60:90:1b:1f:29:7d:47:e0:78:f7:7d:43: 4e:47:1f:cb:1c:f1:6c:23:18:1b:a6:cf:e7:57:f2:f9:ee:54: 56:6d:ec:ad:e3:2c:73:d4:a6:cc:2c:a5:68:71:7a:65:7c:f4: 8a:de:48:09:4e:c8:d0:b1:7f:fd:15:91:a1:bc:65:37:17:1f: 41:12:e2:34:5e:e8:42:71:dc:6a:2a:b1:29:0a:3e:e1:dc:5b: e8:29:4e:2d:f1:b8:50:13:bc:00:53:8e:47:b5:95:33:d0:17: 7d:69:aa:3f:b5:4a:e5:27:08:7d:25:81:51:17:13:76:cc:2d: 4d:13:aa:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknlX3jNxu/EZGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZmUyMjliNWYtOGI0My00ZWI2LWFkYjgtYmM4MDU5NTQ4N2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOSniCDXdU575KZs0Txwlm1OadM1stptEfT9 WPXAAW6AZALM0AvUB8xpWnFjx1zgmFvtWnHp8BZhBOPeMZseQWuj+4rloE3DSR/z TVcsUYOo0V7q6kT4QZpm8QqPfbkTj/YmqZP4mcTxoF7PGCjcfJ0q3x8Dxx4xp0cX EHK/MTXgJ6GiMnimSOdWsvqOYo0hpe907uoefTXWQOQZEmsbnffgMISvIhsUfh5Z 3ysQURA2CsmE6no0ItNd4JxmaU0bCa94qhpkXU9VAsubTcC+gZEUbA5JTxi2EcA/ IbhDnTT88b39EvErhfUO3B/ZN1kweW8JhIuiSDJAl3nNoDw4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsXMqYTWYZKF6EWB0zENt/F3/u/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4MTI4ZjctNzI5YS0z NTI3LWE2NmUtMGY4ZGViNmU2OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQVJHJjI/dkX6/LvVqqMFl8dSd+pFZZVhKWh4MxW+Emx9ZRUzNp6DgM HAtfYHH8zusGHIeD+tRapZw9Uko6cgi53AY105nZvsZwnDtIL+VimmhjIpw8Prvv oNr/LFfUW1caT/hCrNvGkgNzHUfh/hkm3Ubg+CilmzyxmFi+vaKvBfz6SmCQGx8p fUfgePd9Q05HH8sc8WwjGBumz+dX8vnuVFZt7K3jLHPUpswspWhxemV89IreSAlO yNCxf/0VkaG8ZTcXH0ES4jRe6EJx3GoqsSkKPuHcW+gpTi3xuFATvABTjke1lTPQ F31pqj+1SuUnCH0lgVEXE3bMLU0Tqpw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:30:37 2025 by rpki-client