$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa File: b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa (raw, json) Hash identifier: EqSZ8iMgTFkc8MmimorICRw6aoghHaGfvGkysM87w+M= Subject key identifier: 48:14:18:C8:A2:4D:88:50:F4:5B:37:1B:DC:AC:7A:48:ED:2E:C6:82 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0AFD34DC1A61A2C8A7C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0a:fd:34:dc:1a:61:a2:c8:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=a0310a27-0909-4bba-8e05-8e576a87f230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:92:9b:14:f8:38:08:8e:ad:f7:1c:e5:28: cb:3d:05:cc:2a:88:ab:a4:71:7e:8e:71:76:14:f9: 40:30:dc:6c:e9:51:da:49:0c:2e:07:4c:9f:b4:11: 27:60:26:e6:86:f6:2c:99:05:aa:ba:ef:17:43:8f: 91:f2:48:33:11:e7:a2:19:31:ab:46:5e:f5:0e:f9: 27:04:11:9e:6a:6e:f7:3e:06:c5:71:2e:1c:fa:61: 2d:dd:00:3d:6c:23:0e:f7:d2:46:23:22:b7:91:97: a7:bd:3c:a3:a9:1b:1c:50:3a:59:42:1d:38:98:87: fb:46:06:da:1e:69:2e:c5:a4:a9:16:24:d2:9a:b5: 61:28:8d:58:65:eb:0d:f1:b4:d2:21:b2:7a:02:6f: b4:bb:27:16:cf:0d:fb:45:9c:b6:4d:53:25:f4:6e: e6:1d:9b:c1:83:9b:98:a7:5a:2d:bc:23:12:d3:dd: 76:e6:77:7d:8d:7b:5b:8d:38:94:b4:88:19:cd:42: 34:62:0b:72:3d:41:bc:40:d3:75:57:75:25:7f:75: c8:17:27:e9:3e:aa:c0:5d:6f:17:0c:2d:cd:8d:b0: eb:03:f3:dc:e5:da:5b:cc:b7:7d:39:8e:3f:59:f2: a3:da:20:f4:9b:27:61:eb:08:ab:54:d9:66:e5:de: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:14:18:C8:A2:4D:88:50:F4:5B:37:1B:DC:AC:7A:48:ED:2E:C6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b24dc92a-cc8c-3cf9-9297-c0bed1db2414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9a:f7:5f:11:34:9a:e8:ec:d0:63:e9:17:1c:94:ac:e1:37: c4:c1:23:5b:39:73:3e:5f:37:24:b1:46:3a:8e:43:8a:2d:3d: 48:11:13:09:4e:fc:50:8a:5f:e5:2d:48:b6:37:0f:92:d3:4a: 57:1b:e5:7d:f1:19:a3:2b:27:3c:99:14:4d:a2:e2:ff:cb:b8: 63:83:86:a0:4d:f3:cd:d1:bc:a5:13:77:92:85:a0:fe:09:b6: 4c:9b:7d:59:1e:d7:2c:ca:4d:b1:08:49:c1:09:e3:8d:20:b0: 5f:2f:eb:7a:60:1c:d7:11:55:ce:86:96:b9:a7:1d:d0:80:50: 45:7a:99:55:00:00:8d:70:43:c7:b7:9b:df:3e:8d:78:11:d3: df:27:a3:55:29:f3:df:3c:4e:00:f2:c0:e8:09:9e:c8:08:27: 22:7b:23:ca:e6:c8:b8:41:ea:e2:84:d2:fb:23:c4:8e:57:8f: 85:88:18:77:ed:87:61:cb:17:35:5f:b7:12:9c:8d:b3:71:40: 76:e1:1d:39:2c:08:fc:cc:d4:72:d7:e7:1c:5c:1d:9d:2b:00: bd:d3:bb:34:6d:5d:f0:a5:d8:08:b6:89:ff:6f:9e:db:eb:1e: 55:dc:e2:56:bd:c6:ae:fb:db:b1:2d:42:1b:f9:98:af:19:c1: dd:6d:b4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQr9NNwaYaLIp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YTAzMTBhMjctMDkwOS00YmJhLThlMDUtOGU1NzZhODdmMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9SSmxT4OAiOrfcc5SjLPQXMKoirpHF+jnF2 FPlAMNxs6VHaSQwuB0yftBEnYCbmhvYsmQWquu8XQ4+R8kgzEeeiGTGrRl71Dvkn BBGeam73PgbFcS4c+mEt3QA9bCMO99JGIyK3kZenvTyjqRscUDpZQh04mIf7Rgba HmkuxaSpFiTSmrVhKI1YZesN8bTSIbJ6Am+0uycWzw37RZy2TVMl9G7mHZvBg5uY p1otvCMS09125nd9jXtbjTiUtIgZzUI0YgtyPUG8QNN1V3Ulf3XIFyfpPqrAXW8X DC3NjbDrA/Pc5dpbzLd9OY4/WfKj2iD0mydh6wirVNlm5d6BpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgUGMiiTYhQ9Fs3G9ysekjtLsaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjI0ZGM5MmEtY2M4Yy0z Y2Y5LTkyOTctYzBiZWQxZGIyNDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEaiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWa918RNJro7NBj6RcclKzhN8TBI1s5cz5fNySxRjqOQ4otPUgREwlO /FCKX+UtSLY3D5LTSlcb5X3xGaMrJzyZFE2i4v/LuGODhqBN883RvKUTd5KFoP4J tkybfVke1yzKTbEIScEJ440gsF8v63pgHNcRVc6GlrmnHdCAUEV6mVUAAI1wQ8e3 m98+jXgR098no1Up8988TgDywOgJnsgIJyJ7I8rmyLhB6uKE0vsjxI5Xj4WIGHft h2HLFzVftxKcjbNxQHbhHTksCPzM1HLX5xxcHZ0rAL3TuzRtXfCl2Ai2if9vntvr HlXc4la9xq7727EtQhv5mK8Zwd1ttHs= -----END CERTIFICATE-----Generated at Sat Nov 1 10:03:05 2025 by rpki-client