$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd6a424-58c9-3b1d-9e81-6aa99ace969f.roa File: bdd6a424-58c9-3b1d-9e81-6aa99ace969f.roa (raw, json) Hash identifier: 4Vrml2Y3OLZ6NcCr4I2UeakxUhDMCLDqb6mh8jxRfh4= Subject key identifier: EA:65:B5:C3:B5:96:96:7F:A6:48:30:A2:B1:12:4A:6C:9D:98:37:C0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926BA9E54228AEECBFF6C0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd6a424-58c9-3b1d-9e81-6aa99ace969f.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6b:a9:e5:42:28:ae:ec:bf:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=8b70d747-8de9-4c40-bd1e-1190a9e9600f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:72:4b:fe:c3:55:c7:18:dc:c4:a9:05:b1:73: 4a:2f:16:07:f8:dd:29:8b:bf:a7:44:a8:ab:29:7e: 46:ec:c7:5c:20:12:c7:ce:44:4a:8b:03:15:0b:3b: 87:99:c5:49:51:ec:d2:5d:2d:7e:e0:d4:cd:16:78: db:98:fc:89:4e:68:bf:27:cb:25:73:e1:ee:d0:84: 30:4a:a3:32:11:7d:16:05:0b:83:33:a0:59:d5:60: 9d:01:b1:73:f4:7d:f2:fd:09:50:08:7f:e5:8f:b7: 88:96:7f:eb:ce:ae:c1:44:85:49:52:17:4b:9a:d1: 05:60:fe:56:92:92:f7:6d:35:a3:79:9b:5c:f3:34: df:89:7a:a6:0f:cd:a3:b9:06:81:b9:6a:74:13:d7: 1a:30:f1:65:20:81:3a:36:fa:6a:c2:d6:9b:c7:72: 1d:8e:e3:9d:05:74:ff:0a:4f:02:1a:9f:ea:55:eb: 08:41:6b:28:fb:6f:f9:e7:cd:6c:d4:e1:7b:92:af: ae:85:d6:e2:d2:6f:64:3d:09:34:62:0d:02:5a:4d: cd:04:ef:af:99:21:7f:d4:4e:f8:ee:33:5a:7e:bd: 16:6e:46:d7:3c:a4:3d:12:48:98:fc:a4:66:61:82: 02:e8:dc:15:2e:61:66:57:21:86:1a:08:3e:a0:cd: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:65:B5:C3:B5:96:96:7F:A6:48:30:A2:B1:12:4A:6C:9D:98:37:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdd6a424-58c9-3b1d-9e81-6aa99ace969f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2f:f1:cf:ef:2d:b2:0d:47:91:27:71:91:e7:31:a2:c5:97: 65:d3:54:d8:6e:bf:49:64:9b:2c:e1:da:ab:e4:4a:e2:dd:67: b6:df:4f:5f:69:3a:c3:12:79:94:91:b8:76:fc:2c:aa:6c:16: 35:27:94:e5:c1:b3:b8:3a:46:fe:de:3a:d4:b8:56:56:6d:50: ab:bd:5c:e1:40:9a:dd:d6:ed:a7:5a:82:a0:a6:e1:7e:df:dc: b6:12:77:fc:39:74:4e:e4:f0:a8:75:41:96:b4:a9:ec:a4:9b: 9f:5a:95:4a:e3:b0:d6:a4:29:2e:27:86:12:df:e9:21:02:e8: b2:2f:04:ac:b0:2a:44:47:f9:f1:27:06:5b:58:2e:38:9a:c7: 0c:74:3b:6c:0e:23:e1:50:d1:78:5b:3c:4d:44:e7:2d:e1:c9: b7:b3:d2:2c:27:ad:9b:40:e7:eb:af:01:30:17:f5:19:85:55: c6:e6:dc:2d:71:18:23:f3:cc:f2:aa:4d:76:e3:86:de:0f:a5: 87:82:17:a3:4d:0b:78:b1:d5:6c:a3:eb:cc:4f:92:f9:77:82: 0e:22:f6:b4:dc:77:61:41:9a:28:7d:75:f9:01:56:17:d3:13: fe:6a:76:f6:a6:f5:c8:46:7f:4b:39:80:86:53:0a:ed:d8:f1: 5b:0d:58:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmup5UIoruy/9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OGI3MGQ3NDctOGRlOS00YzQwLWJkMWUtMTE5MGE5ZTk2MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynJL/sNVxxjcxKkFsXNKLxYH+N0pi7+nRKir KX5G7MdcIBLHzkRKiwMVCzuHmcVJUezSXS1+4NTNFnjbmPyJTmi/J8slc+Hu0IQw SqMyEX0WBQuDM6BZ1WCdAbFz9H3y/QlQCH/lj7eIln/rzq7BRIVJUhdLmtEFYP5W kpL3bTWjeZtc8zTfiXqmD82juQaBuWp0E9caMPFlIIE6Nvpqwtabx3IdjuOdBXT/ Ck8CGp/qVesIQWso+2/5581s1OF7kq+uhdbi0m9kPQk0Yg0CWk3NBO+vmSF/1E74 7jNafr0WbkbXPKQ9EkiY/KRmYYIC6NwVLmFmVyGGGgg+oM1A+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpltcO1lpZ/pkgworESSmydmDfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRkNmE0MjQtNThjOS0z YjFkLTllODEtNmFhOTlhY2U5NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8v8c/vLbINR5EncZHnMaLFl2XTVNhuv0lkmyzh2qvkSuLdZ7bfT19p OsMSeZSRuHb8LKpsFjUnlOXBs7g6Rv7eOtS4VlZtUKu9XOFAmt3W7adagqCm4X7f 3LYSd/w5dE7k8Kh1QZa0qeykm59alUrjsNakKS4nhhLf6SEC6LIvBKywKkRH+fEn BltYLjiaxwx0O2wOI+FQ0XhbPE1E5y3hybez0iwnrZtA5+uvATAX9RmFVcbm3C1x GCPzzPKqTXbjht4PpYeCF6NNC3ix1Wyj68xPkvl3gg4i9rTcd2FBmih9dfkBVhfT E/5qdvam9chGf0s5gIZTCu3Y8VsNWAw= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:32 2025 by rpki-client