$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa File: c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa (raw, json) Hash identifier: qLHvyyA32fLt2FCAjYalMpzSMh9V6v5nmLyPrCUyyyA= Subject key identifier: F2:69:A2:CD:74:DA:7B:96:C8:80:CF:07:36:1D:AE:B4:44:4F:8E:CA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927A289A4A67B21DDB9100 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:28:9a:4a:67:b2:1d:db:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=302e9928-6868-497c-8240-d6d3a0daa887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:00:0a:27:94:ff:60:8e:91:7b:f7:44:fc: 63:27:61:c5:c3:1e:b9:38:2e:83:48:ac:ea:8a:a6: fc:5c:05:27:32:b4:08:16:be:95:f6:5c:cb:bb:c9: 31:3f:db:e1:ff:c1:00:b2:21:e9:78:84:17:06:28: 04:07:0c:4f:73:c9:91:9b:d4:9a:4d:3c:fa:62:60: 96:26:ee:2e:50:02:61:9b:10:09:d0:5d:f2:b8:83: 7c:eb:a6:97:72:1e:d6:0d:90:98:e9:2a:42:9b:25: 53:3a:23:64:67:ca:be:2b:c1:f6:36:d2:aa:af:3e: 35:be:c9:25:0b:4f:0c:7a:aa:40:97:05:d5:49:66: fa:94:73:67:df:b5:68:38:81:4c:64:a6:32:38:4f: 1b:46:f6:18:89:1e:10:7e:6e:eb:5b:c5:29:32:43: ab:02:af:9d:4a:8d:0c:d7:25:9e:1b:a3:e7:94:b0: 8d:18:69:58:1f:6d:90:5f:35:5a:2b:16:ab:12:db: 0c:10:cd:ee:1a:75:2e:9d:5f:41:6c:9e:0d:69:f9: 25:f1:c8:b8:fd:08:f3:db:c0:63:4d:94:60:d5:c1: 50:ea:71:b6:8d:c1:1c:be:f1:65:be:0c:9e:c0:0b: ac:4f:97:e3:c5:79:62:88:82:62:95:2c:99:f1:be: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:69:A2:CD:74:DA:7B:96:C8:80:CF:07:36:1D:AE:B4:44:4F:8E:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c3b48fbb-0a32-34ba-9d91-b2eb7337344e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0e:aa:2b:8f:fe:99:97:19:04:99:1c:dc:15:6a:5c:d5:61: ad:d3:98:3c:36:b7:91:1d:5d:30:37:34:91:2b:72:61:a7:14: 80:8d:15:ec:9b:71:1f:73:e0:90:07:2d:fd:7e:35:f2:96:2c: 8d:aa:e6:cc:1e:84:0b:78:68:75:dc:c0:94:5f:e7:31:12:23: 64:e9:81:f6:c2:43:17:53:c1:8a:27:9d:77:ba:74:34:74:aa: c1:a9:68:58:ad:3c:70:6f:06:02:e1:ec:ad:0c:f7:96:ce:c2: 19:ac:47:77:8e:e8:e1:68:51:47:4a:7f:15:e8:5a:b2:82:93: 8a:4e:54:c3:01:32:9a:e1:79:34:9e:92:5d:b9:67:00:53:5e: b0:22:a2:c4:05:9e:0a:70:5d:a5:d2:51:d0:81:0c:05:1d:29: d4:24:35:9e:6b:bf:eb:0f:f9:28:bc:c9:4f:ba:b2:f4:d1:a5: 14:f9:f4:a0:95:ea:df:e2:37:c1:3a:83:a6:bf:45:62:ba:cd: f9:42:13:cd:91:53:ad:ac:a2:a7:4c:63:13:ea:bd:3c:91:8a: b7:b6:67:ef:96:be:82:23:e2:dd:53:65:6a:97:a9:c4:75:85: c7:13:4a:1f:1a:bf:ec:c8:ce:fd:7c:8d:3a:4e:b5:a7:ef:7d: ea:ea:8b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknoomkpnsh3bkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MzAyZTk5MjgtNjg2OC00OTdjLTgyNDAtZDZkM2EwZGFhODg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KwACieU/2COkXv3RPxjJ2HFwx65OC6DSKzq iqb8XAUnMrQIFr6V9lzLu8kxP9vh/8EAsiHpeIQXBigEBwxPc8mRm9SaTTz6YmCW Ju4uUAJhmxAJ0F3yuIN866aXch7WDZCY6SpCmyVTOiNkZ8q+K8H2NtKqrz41vskl C08MeqpAlwXVSWb6lHNn37VoOIFMZKYyOE8bRvYYiR4Qfm7rW8UpMkOrAq+dSo0M 1yWeG6PnlLCNGGlYH22QXzVaKxarEtsMEM3uGnUunV9BbJ4Nafkl8ci4/Qjz28Bj TZRg1cFQ6nG2jcEcvvFlvgyewAusT5fjxXliiIJilSyZ8b7afwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJpos102nuWyIDPBzYdrrRET47KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzNiNDhmYmItMGEzMi0z NGJhLTlkOTEtYjJlYjczMzczNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAOqiuP/pmXGQSZHNwValzVYa3TmDw2t5EdXTA3NJErcmGnFICNFeyb cR9z4JAHLf1+NfKWLI2q5swehAt4aHXcwJRf5zESI2TpgfbCQxdTwYonnXe6dDR0 qsGpaFitPHBvBgLh7K0M95bOwhmsR3eO6OFoUUdKfxXoWrKCk4pOVMMBMprheTSe kl25ZwBTXrAiosQFngpwXaXSUdCBDAUdKdQkNZ5rv+sP+Si8yU+6svTRpRT59KCV 6t/iN8E6g6a/RWK6zflCE82RU62soqdMYxPqvTyRire2Z++WvoIj4t1TZWqXqcR1 hccTSh8av+zIzv18jTpOtafvferqiyY= -----END CERTIFICATE-----Generated at Sat Nov 1 15:18:03 2025 by rpki-client