$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa File: d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa (raw, json) Hash identifier: Y4uV9eVNINqDLWjbydwbRdaMXzAmIHRtsPLu9HFGf4w= Subject key identifier: DE:BE:CA:83:03:BA:7F:BB:B0:67:69:09:15:85:14:E3:1A:F4:16:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0A3EF3D1414D5AC1EC00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0a:3e:f3:d1:41:4d:5a:c1:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=b50fa4dc-351d-42ea-8fdf-1d77580c78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:51:0b:e6:35:51:bd:ef:0e:9a:8d:74:8d: 6e:28:cd:9b:c3:fb:12:42:0c:ed:91:be:4c:a0:ae: 8e:14:82:b2:e0:3c:df:23:41:b1:40:ec:fa:e6:56: f4:c2:3c:77:7a:e3:59:47:6f:d7:65:62:f6:76:82: 61:84:b3:44:7f:93:36:90:0c:6a:57:03:0c:d7:d1: 1a:5e:d6:88:0d:72:71:15:66:cc:fc:ac:c4:17:67: 05:3c:59:21:1d:d3:46:39:90:59:86:24:de:9f:4a: 12:ae:be:60:f1:91:84:1e:a9:a9:1c:3b:51:0f:62: 67:e2:38:00:2d:12:4b:81:9c:70:28:59:40:9b:22: 7e:7b:9f:f6:26:7d:0a:16:c6:d8:a3:94:a1:e0:a2: f2:4b:31:4b:05:63:64:8e:a5:b0:9e:54:08:b1:b5: 26:a8:56:4b:b8:da:f0:8c:39:a5:02:70:22:2c:d1: ec:e8:9a:0d:be:2c:6a:be:b1:ed:73:11:41:fa:0c: 62:db:54:c4:14:8c:93:83:40:df:f7:3e:7e:e3:d7: 5e:23:1d:dc:d1:7a:1b:fe:9a:dd:a3:1b:da:b9:e4: d7:e2:51:af:5b:92:3a:9b:86:46:89:e2:35:19:52: ba:e5:06:71:c6:17:df:bd:90:87:54:e1:b2:b3:cd: 98:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:CA:83:03:BA:7F:BB:B0:67:69:09:15:85:14:E3:1A:F4:16:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d5e8dc8c-5149-3a49-9ef3-d8924030d642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:21:ef:f1:ca:50:5e:70:3c:1b:20:51:1d:9b:ed:6c:33:5a: 61:ca:96:23:fc:44:3d:ba:c3:24:c5:07:7f:aa:a9:5c:61:33: 40:df:fd:aa:0f:42:1f:c3:3e:9a:90:71:14:dc:e3:af:17:45: 38:0f:36:d8:4c:b1:6e:2d:43:ed:ee:a3:98:aa:d9:0a:55:22: 46:63:53:36:fe:a7:7e:12:6d:53:f7:4d:f8:07:d7:d7:24:f1: bb:be:a7:3b:22:04:af:87:bf:14:b4:cc:d0:07:22:83:4a:07: 29:33:66:7a:6d:cc:78:8e:77:e3:d9:fc:44:a2:d0:35:fd:9b: e5:1c:f6:64:4e:9f:4c:bd:65:bc:5f:8d:cf:b0:b8:32:f8:29: 87:7c:21:d3:f8:45:79:46:6c:54:ab:87:c4:0b:a3:a4:75:f1: 11:f0:ec:c8:57:45:87:9f:22:61:0e:02:45:8b:f9:86:d6:8e: 73:3e:1b:07:21:bd:f6:37:ba:83:fc:ee:0f:b1:02:16:e2:40: 4d:5c:45:be:4e:e8:d1:c2:02:91:6e:56:4e:9d:5a:9c:26:a8: 68:fd:63:27:0a:c9:30:44:39:e9:ea:10:2b:42:52:35:62:f9: b1:00:4c:00:ca:23:6e:50:7a:72:f4:52:7a:e7:ec:8f:e9:eb: e4:a9:33:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQo+89FBTVrB7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YjUwZmE0ZGMtMzUxZC00MmVhLThmZGYtMWQ3NzU4MGM3OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHtRC+Y1Ub3vDpqNdI1uKM2bw/sSQgztkb5M oK6OFIKy4DzfI0GxQOz65lb0wjx3euNZR2/XZWL2doJhhLNEf5M2kAxqVwMM19Ea XtaIDXJxFWbM/KzEF2cFPFkhHdNGOZBZhiTen0oSrr5g8ZGEHqmpHDtRD2Jn4jgA LRJLgZxwKFlAmyJ+e5/2Jn0KFsbYo5Sh4KLySzFLBWNkjqWwnlQIsbUmqFZLuNrw jDmlAnAiLNHs6JoNvixqvrHtcxFB+gxi21TEFIyTg0Df9z5+49deIx3c0Xob/prd oxvaueTX4lGvW5I6m4ZGieI1GVK65QZxxhffvZCHVOGys82YiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6+yoMDun+7sGdpCRWFFOMa9BaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDVlOGRjOGMtNTE0OS0z YTQ5LTllZjMtZDg5MjQwMzBkNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEY+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoh7/HKUF5wPBsgUR2b7WwzWmHKliP8RD26wyTFB3+qqVxhM0Df/aoP Qh/DPpqQcRTc468XRTgPNthMsW4tQ+3uo5iq2QpVIkZjUzb+p34SbVP3TfgH19ck 8bu+pzsiBK+HvxS0zNAHIoNKBykzZnptzHiOd+PZ/ESi0DX9m+Uc9mROn0y9Zbxf jc+wuDL4KYd8IdP4RXlGbFSrh8QLo6R18RHw7MhXRYefImEOAkWL+YbWjnM+Gwch vfY3uoP87g+xAhbiQE1cRb5O6NHCApFuVk6dWpwmqGj9YycKyTBEOenqECtCUjVi +bEATADKI25QenL0Unrn7I/p6+SpM1w= -----END CERTIFICATE-----Generated at Sat Nov 1 10:02:41 2025 by rpki-client