$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa File: b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa (raw, json) Hash identifier: LZPAc0fv6nft0s8+oj3TOnnhqWSc0OEgwsAtVc39toQ= Subject key identifier: 29:20:E3:73:E3:62:91:FB:FB:55:3D:EE:5F:36:4B:A4:81:61:E1:3D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D099F8C248769583D9460 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:09:9f:8c:24:87:69:58:3d:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=9c857e21-45a1-40e9-92ba-243f0b8a703f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e8:00:35:d8:1e:3b:c2:4c:46:3f:a4:19:5f: ff:3c:99:84:a6:33:c9:83:3d:88:3d:09:b8:0e:72: c0:dd:48:45:af:40:fa:5a:12:74:7b:c4:1e:00:e9: 43:bb:26:57:11:c6:4c:9b:0d:8c:61:4b:7e:70:2b: 48:0a:0d:6a:65:7a:6a:82:64:0a:90:c9:94:77:c6: 65:8a:a8:f0:23:32:c8:58:db:a8:78:df:0e:f0:07: 80:9c:be:0e:a2:a1:d0:bd:6b:f3:f9:ea:79:e9:ff: a1:72:d9:22:77:e3:85:a0:b6:be:a3:7e:43:39:77: 9c:ed:7b:f9:f3:5a:56:c8:19:54:5b:66:f4:00:00: f9:26:35:93:98:88:8f:c9:7a:1f:6c:c2:87:27:4b: b9:37:39:4e:11:b3:4f:44:1e:89:26:1b:90:bc:d7: 3e:e9:d1:26:a7:b7:9b:16:af:d1:7c:ea:da:df:55: 7e:90:88:ba:15:b0:fa:69:88:7d:94:4a:fb:77:43: d5:cb:a9:2b:3b:0c:a8:71:19:0d:ac:27:2d:d2:8e: 2a:56:8a:e6:1a:4f:02:f1:dd:b7:21:07:e3:52:5d: 62:8c:3f:1e:63:0a:7b:8d:49:3a:d2:2d:cf:5a:b2: c4:2b:fa:38:7e:a6:7b:e8:5d:77:55:16:04:b7:8a: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:E3:73:E3:62:91:FB:FB:55:3D:EE:5F:36:4B:A4:81:61:E1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b08f71b5-8ce8-37ff-89ac-4d27726d6392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:a3:00:e2:34:19:39:06:1a:b2:cc:e9:f6:2b:0b:78:52:12: ab:da:fe:54:79:ce:a7:d2:3e:a3:ea:a2:95:e5:dd:3a:69:9d: 66:32:37:93:21:be:7f:f5:82:07:14:13:f4:35:70:2f:1e:5c: 22:ed:b3:64:eb:3d:56:d3:54:d3:03:36:c8:af:6b:8d:fe:3f: 73:ed:d9:90:90:26:80:be:1c:22:4d:6b:b0:88:ac:a5:7c:83: ac:4b:f1:a4:fe:94:dd:89:36:d6:c2:36:f4:c9:9e:27:96:51: b8:0f:b3:82:88:20:3b:d3:23:04:d7:3a:41:42:94:ee:a7:7f: d3:2f:a9:4a:8f:55:32:f3:c0:2a:b3:26:18:3e:45:ae:67:4d: 09:c5:02:5c:88:66:ec:61:af:5d:60:9c:5e:70:48:25:82:e1: 33:3f:44:74:f8:ec:0f:29:98:cd:59:02:d2:85:f8:71:92:f1: 06:50:bb:6d:6a:e5:92:34:ea:20:61:ee:be:e3:09:45:5c:43: 2a:6b:87:4f:71:5f:c8:51:d4:7f:02:18:14:08:59:70:0a:62: 26:2e:49:92:0d:a9:3d:f6:35:d2:6a:04:85:9d:41:bf:45:fa: 9c:cd:11:7b:90:7b:e4:ce:3a:0f:bf:90:2e:3d:85:45:ec:e2: f0:aa:1e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQmfjCSHaVg9lGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OWM4NTdlMjEtNDVhMS00MGU5LTkyYmEtMjQzZjBiOGE3MDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOgANdgeO8JMRj+kGV//PJmEpjPJgz2IPQm4 DnLA3UhFr0D6WhJ0e8QeAOlDuyZXEcZMmw2MYUt+cCtICg1qZXpqgmQKkMmUd8Zl iqjwIzLIWNuoeN8O8AeAnL4OoqHQvWvz+ep56f+hctkid+OFoLa+o35DOXec7Xv5 81pWyBlUW2b0AAD5JjWTmIiPyXofbMKHJ0u5NzlOEbNPRB6JJhuQvNc+6dEmp7eb Fq/RfOra31V+kIi6FbD6aYh9lEr7d0PVy6krOwyocRkNrCct0o4qVormGk8C8d23 IQfjUl1ijD8eYwp7jUk60i3PWrLEK/o4fqZ76F13VRYEt4oBiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkg43PjYpH7+1U97l82S6SBYeE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjA4ZjcxYjUtOGNlOC0z N2ZmLTg5YWMtNGQyNzcyNmQ2MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyjAOI0GTkGGrLM6fYrC3hSEqva/lR5zqfSPqPqopXl3TppnWYyN5Mh vn/1ggcUE/Q1cC8eXCLts2TrPVbTVNMDNsiva43+P3Pt2ZCQJoC+HCJNa7CIrKV8 g6xL8aT+lN2JNtbCNvTJnieWUbgPs4KIIDvTIwTXOkFClO6nf9MvqUqPVTLzwCqz Jhg+Ra5nTQnFAlyIZuxhr11gnF5wSCWC4TM/RHT47A8pmM1ZAtKF+HGS8QZQu21q 5ZI06iBh7r7jCUVcQyprh09xX8hR1H8CGBQIWXAKYiYuSZINqT32NdJqBIWdQb9F +pzNEXuQe+TOOg+/kC49hUXs4vCqHkE= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:59 2025 by rpki-client