$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cb8781-3f5f-374b-8910-06665481ecb8.roa File: d4cb8781-3f5f-374b-8910-06665481ecb8.roa (raw, json) Hash identifier: jbG0Swv2OyiGmTXPjXp6Ei/XsVkGZdtMBqRdiEJl0xc= Subject key identifier: 5B:4C:65:48:9D:53:D3:19:1D:E3:7E:A1:50:8E:EA:5D:F3:FA:B2:D0 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926A52BDFD77EACA622640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cb8781-3f5f-374b-8910-06665481ecb8.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6a:52:bd:fd:77:ea:ca:62:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=df183783-a98f-43e4-89a5-b8d526cc5129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:7f:62:e8:08:28:e2:15:78:35:0b:98:63: 0c:39:3e:1f:c1:65:1b:c7:a2:de:d6:f7:87:89:93: 8d:9d:63:43:dd:d9:c8:ae:83:1f:9e:4b:9c:de:3d: d9:ab:37:5e:8a:8a:ee:2d:0f:9d:70:36:5e:df:a0: a6:d0:4c:46:63:e0:f1:e8:72:53:d9:f9:b5:fa:bc: 86:40:63:2d:5d:2f:35:db:a5:9e:ec:ca:e9:22:3c: c0:2c:6f:af:c8:c4:e7:50:7d:b1:15:40:f1:a0:e2: 21:b5:cf:80:af:36:4e:a7:20:63:e7:82:03:0c:69: 50:9e:8e:f2:4d:fc:e6:37:3d:81:60:5d:c6:fa:c6: af:ea:50:7d:8e:83:a7:23:9a:77:c0:74:43:41:93: e8:28:50:51:00:90:60:49:48:8e:0e:83:6f:5c:fd: 30:6f:e0:d6:01:b1:65:58:87:28:8a:c4:b5:d1:fc: 6e:24:76:17:e8:7c:39:d3:ab:90:a5:34:5c:75:ef: 5b:9e:78:c5:dc:79:a6:b4:2b:ec:ed:65:55:54:f2: f2:81:29:b4:66:e0:41:05:06:72:89:c1:0e:de:d3: 1b:a7:61:16:c8:eb:e8:ea:7f:af:8d:86:85:2b:0d: 14:3c:42:03:29:03:73:d0:95:89:01:56:2d:ce:36: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4C:65:48:9D:53:D3:19:1D:E3:7E:A1:50:8E:EA:5D:F3:FA:B2:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d4cb8781-3f5f-374b-8910-06665481ecb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6c:1a:37:5c:23:02:98:80:cd:e5:0e:27:c1:7e:89:45:09: 47:e1:ca:8b:fb:00:d7:64:af:52:34:1c:59:02:c9:5a:18:cd: 6f:83:64:6c:a0:9f:c9:1a:63:3a:b0:6e:71:cc:ad:b3:f6:32: 0f:70:33:b9:a8:d8:d4:b2:eb:35:af:54:ff:20:ef:17:5b:93: b0:d7:e3:e2:7e:30:ef:b5:64:7f:24:08:46:25:ef:ff:e0:70: b7:d6:40:9a:29:b6:1a:38:60:28:d2:a1:6e:a5:f5:c6:1d:c8: a8:03:89:c9:a9:90:86:80:d2:e7:3e:4f:eb:09:98:d6:9e:04: 36:b0:33:7b:eb:e7:99:5f:b1:10:8a:a4:97:83:8d:3a:1c:fc: 7a:2e:42:4b:5a:00:15:f7:aa:e0:79:67:3d:da:a1:32:b7:55: e5:d7:3d:22:f0:cb:fc:1e:2e:16:ca:af:5f:96:61:af:92:a6: 23:2c:59:5f:b0:23:68:16:5e:f8:3d:e0:a8:c2:66:de:9b:d4: f4:ea:30:1f:77:4a:d0:11:2a:02:b8:cd:e3:4a:b4:33:f8:9d: 3e:d4:58:76:70:0e:65:67:58:f4:b4:ee:24:6c:62:0b:6e:18: d8:b3:a1:38:bc:1b:fa:10:b9:a8:11:67:03:6b:59:86:ce:4c: 15:2c:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmpSvf136spiJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGYxODM3ODMtYTk4Zi00M2U0LTg5YTUtYjhkNTI2Y2M1MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0t/YugIKOIVeDULmGMMOT4fwWUbx6Le1veH iZONnWND3dnIroMfnkuc3j3ZqzdeioruLQ+dcDZe36Cm0ExGY+Dx6HJT2fm1+ryG QGMtXS8126We7MrpIjzALG+vyMTnUH2xFUDxoOIhtc+ArzZOpyBj54IDDGlQno7y TfzmNz2BYF3G+sav6lB9joOnI5p3wHRDQZPoKFBRAJBgSUiODoNvXP0wb+DWAbFl WIcoisS10fxuJHYX6Hw506uQpTRcde9bnnjF3HmmtCvs7WVVVPLygSm0ZuBBBQZy icEO3tMbp2EWyOvo6n+vjYaFKw0UPEIDKQNz0JWJAVYtzja9tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtMZUidU9MZHeN+oVCO6l3z+rLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDRjYjg3ODEtM2Y1Zi0z NzRiLTg5MTAtMDY2NjU0ODFlY2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClsGjdcIwKYgM3lDifBfolFCUfhyov7ANdkr1I0HFkCyVoYzW+DZGyg n8kaYzqwbnHMrbP2Mg9wM7mo2NSy6zWvVP8g7xdbk7DX4+J+MO+1ZH8kCEYl7//g cLfWQJoptho4YCjSoW6l9cYdyKgDicmpkIaA0uc+T+sJmNaeBDawM3vr55lfsRCK pJeDjToc/HouQktaABX3quB5Zz3aoTK3VeXXPSLwy/weLhbKr1+WYa+SpiMsWV+w I2gWXvg94KjCZt6b1PTqMB93StARKgK4zeNKtDP4nT7UWHZwDmVnWPS07iRsYgtu GNizoTi8G/oQuagRZwNrWYbOTBUsf+s= -----END CERTIFICATE-----Generated at Sat Nov 1 12:34:41 2025 by rpki-client