$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa File: ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa (raw, json) Hash identifier: eV7WqLkPoz3zIsU3ma8+mH0ifXjYSE5rian+5MMcoOI= Subject key identifier: 87:B9:CC:3B:06:A9:6E:FF:10:46:BE:12:C4:8A:9A:CD:2E:74:8D:22 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0EF7D07857F032E2F480 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0e:f7:d0:78:57:f0:32:e2:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=8904c1fe-d0d2-4bfd-95d3-1654a5951fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:8e:44:1a:26:5e:4e:6c:08:5d:bc:eb:54: 8d:4e:9c:0a:11:b7:eb:98:df:14:1a:2a:1f:4c:26: ea:a7:35:6f:ce:4b:09:da:a1:e8:93:c1:6f:e5:a5: 3f:52:42:78:82:71:07:bd:76:c0:33:ff:d1:67:01: 1b:cc:8c:d0:f9:c4:da:7a:64:f7:44:7b:36:c5:c2: 58:aa:fc:37:e6:69:33:03:00:b0:0d:47:ab:5f:b3: 73:3a:30:54:d1:55:00:4a:55:a3:a2:26:47:f6:35: bc:2c:56:0e:b8:29:7f:ed:36:9c:e5:6d:e2:aa:af: 1f:7c:8e:db:71:41:64:99:40:d4:6c:f9:e0:01:22: 30:c0:fd:89:65:fc:29:e3:4a:d4:2f:a3:d9:5a:55: c1:fa:2c:1d:dd:3a:7b:c0:9d:dd:04:b5:71:b5:5f: 3f:b6:c1:ec:b0:af:b3:89:06:60:22:72:d9:e7:45: d6:61:0e:0a:9e:fd:72:f2:21:7c:bc:f7:fa:c1:9b: 8a:cb:07:15:aa:43:c2:97:5f:d2:7b:36:6c:a2:7a: 42:6a:25:42:b3:bc:42:bc:da:16:2f:60:c7:cd:51: 57:ff:82:a1:f9:64:f6:46:db:a9:bc:f0:99:dd:92: d6:e4:7e:12:69:19:e5:ed:10:a5:91:46:c5:df:90: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:CC:3B:06:A9:6E:FF:10:46:BE:12:C4:8A:9A:CD:2E:74:8D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ccfc4eac-3bd9-3a2b-b245-875bb5c3a142.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:5d:fa:92:a6:c7:67:88:1c:e2:21:85:7c:9e:3b:a2:1f:be: 0d:de:62:86:61:78:94:ba:36:bd:22:cf:d6:2c:99:dc:1f:d2: 05:26:bd:9b:ed:45:b9:7f:55:00:06:79:19:63:50:f5:8e:0c: 3f:00:c7:fd:71:5f:37:72:7d:58:8c:41:19:af:9e:aa:69:4a: 41:42:8e:07:ce:25:43:e6:0e:3f:f2:82:22:5d:92:70:33:49: 25:d6:e1:a6:0d:3e:f0:5e:63:11:55:e5:f6:bb:8c:2d:e6:90: d7:25:1a:5f:59:53:ce:fb:b6:8a:12:01:aa:fc:66:66:06:8e: 83:d1:90:5d:a6:54:fc:67:9e:ef:63:db:eb:a9:95:50:9e:e0: 36:04:2a:1a:82:43:a3:81:27:06:04:6b:19:c4:dd:f2:11:7a: 92:25:1a:53:bf:83:2a:c8:4d:d6:c7:21:ba:61:a6:ab:1b:ef: 12:57:72:02:4c:d9:d4:0d:34:c5:0a:f0:3d:13:8c:d0:84:8b: 9e:d1:fb:87:3d:80:a1:b8:8b:7b:d2:c8:0b:8d:21:89:91:8a: dc:49:47:64:27:b8:6e:02:7f:9e:17:54:61:6d:d2:3a:66:80: 05:1e:8c:ed:13:33:b3:c5:7a:d8:26:bf:cd:21:8f:ee:99:67: 07:0e:13:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQ730HhX8DLi9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ODkwNGMxZmUtZDBkMi00YmZkLTk1ZDMtMTY1NGE1OTUxZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipOORBomXk5sCF2861SNTpwKEbfrmN8UGiof TCbqpzVvzksJ2qHok8Fv5aU/UkJ4gnEHvXbAM//RZwEbzIzQ+cTaemT3RHs2xcJY qvw35mkzAwCwDUerX7NzOjBU0VUASlWjoiZH9jW8LFYOuCl/7Tac5W3iqq8ffI7b cUFkmUDUbPngASIwwP2JZfwp40rUL6PZWlXB+iwd3Tp7wJ3dBLVxtV8/tsHssK+z iQZgInLZ50XWYQ4Knv1y8iF8vPf6wZuKywcVqkPCl1/SezZsonpCaiVCs7xCvNoW L2DHzVFX/4Kh+WT2RtupvPCZ3ZLW5H4SaRnl7RClkUbF35DkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe5zDsGqW7/EEa+EsSKms0udI0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2NmYzRlYWMtM2JkOS0z YTJiLWIyNDUtODc1YmI1YzNhMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZd+pKmx2eIHOIhhXyeO6Ifvg3eYoZheJS6Nr0iz9Ysmdwf0gUmvZvt Rbl/VQAGeRljUPWODD8Ax/1xXzdyfViMQRmvnqppSkFCjgfOJUPmDj/ygiJdknAz SSXW4aYNPvBeYxFV5fa7jC3mkNclGl9ZU877tooSAar8ZmYGjoPRkF2mVPxnnu9j 2+uplVCe4DYEKhqCQ6OBJwYEaxnE3fIRepIlGlO/gyrITdbHIbphpqsb7xJXcgJM 2dQNNMUK8D0TjNCEi57R+4c9gKG4i3vSyAuNIYmRitxJR2QnuG4Cf54XVGFt0jpm gAUejO0TM7PFetgmv80hj+6ZZwcOE/I= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:48 2025 by rpki-client