$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa File: dc2dc789-3aaf-3694-9090-4f4c006937fe.roa (raw, json) Hash identifier: i2ifv4iJwrxldF8Z9hQmiH4p7Ct3dtag/3xXWcsrJX0= Subject key identifier: FC:CB:E9:74:6F:7B:ED:CC:04:2D:C2:33:04:C6:2B:0C:FF:60:BF:2E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D0B49AFFA473B181C1B80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:0b:49:af:fa:47:3b:18:1c:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=0ad4e097-0c67-4cae-9ab1-d67675762523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:d8:1f:04:cd:fc:ca:da:01:33:e9:9d:f6: cb:ee:fc:7c:a9:ea:17:d2:60:42:a0:1c:26:f1:49: 18:55:2f:31:d7:a5:71:40:cf:79:dd:c1:33:c1:3b: 8a:26:c0:47:03:54:45:4d:55:4c:45:56:85:62:6d: fe:1d:e8:3d:74:f8:5a:a5:d0:f3:22:13:31:0a:14: 76:66:f5:09:ff:06:18:69:4a:39:7c:25:1c:77:7c: a9:2f:5a:96:05:c1:1a:e1:5f:cf:97:88:25:27:82: e8:f4:61:74:20:09:84:55:ac:a7:6d:c6:ba:5b:36: a2:7d:25:8f:93:43:39:9d:10:5a:54:e4:05:73:77: 8c:bd:6f:26:e5:60:03:90:4f:88:8c:41:e3:4f:5c: 09:59:13:5d:d4:d8:00:02:bc:92:38:21:71:c7:34: 40:e9:9e:02:7b:b2:23:08:20:df:4a:43:82:35:83: 30:29:ba:2e:5e:fc:df:c9:9d:71:c8:e5:91:14:87: 9b:94:97:b9:fe:82:16:ae:b9:54:0a:be:4e:35:f4: 29:5a:71:db:cc:86:2c:00:05:ed:7f:68:b7:ad:56: b7:40:19:23:7c:d8:96:9b:e5:79:e5:75:1a:19:c0: ff:91:17:91:dd:85:b9:7e:0a:b5:40:88:71:3e:dc: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CB:E9:74:6F:7B:ED:CC:04:2D:C2:33:04:C6:2B:0C:FF:60:BF:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dc2dc789-3aaf-3694-9090-4f4c006937fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:30:f2:b9:7d:ed:70:03:01:e2:6a:66:7f:a9:70:45:58:39: 21:17:df:f8:51:a6:66:ba:cf:48:7d:20:77:fe:15:42:dd:06: 51:96:2f:63:59:2b:46:d5:b8:1a:a9:55:e7:88:fd:f9:4c:90: 5d:f0:ad:c5:bf:1b:95:3e:9f:15:39:73:1a:b9:0b:2d:79:b1: 17:02:d1:ce:26:4d:90:90:de:f5:1b:82:9e:d8:64:d4:70:35: 7e:b2:57:b4:2b:b1:4c:49:be:07:ee:dc:fe:64:c9:dc:28:95: f3:9f:dd:73:a2:64:b9:07:ff:63:b8:35:9f:24:88:81:4a:7b: c3:ba:c8:e7:92:6c:5b:22:04:11:c7:81:0b:6e:6c:cb:83:1c: 40:55:cf:3d:51:a3:26:26:d4:36:1c:e5:a4:2a:e4:0a:23:e9: 3d:90:14:1d:67:76:d1:9a:4b:f5:c9:79:d8:8b:d4:c0:0c:79: 23:71:93:fd:a4:5a:9b:31:f6:8a:55:9b:99:f5:1e:8b:85:21: 83:d1:23:b3:2b:66:47:40:0a:da:ab:6e:f7:d0:8e:5e:97:d9: 4c:da:2f:5e:80:39:ad:d5:f3:80:f3:ae:b0:84:8d:c0:3b:4a: b0:7d:38:b2:fe:e9:6a:e9:95:dc:f9:39:d4:de:12:a3:b2:c8: d2:b5:89:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQtJr/pHOxgcG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MGFkNGUwOTctMGM2Ny00Y2FlLTlhYjEtZDY3Njc1NzYyNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rvYHwTN/MraATPpnfbL7vx8qeoX0mBCoBwm 8UkYVS8x16VxQM953cEzwTuKJsBHA1RFTVVMRVaFYm3+Heg9dPhapdDzIhMxChR2 ZvUJ/wYYaUo5fCUcd3ypL1qWBcEa4V/Pl4glJ4Lo9GF0IAmEVaynbca6WzaifSWP k0M5nRBaVOQFc3eMvW8m5WADkE+IjEHjT1wJWRNd1NgAArySOCFxxzRA6Z4Ce7Ij CCDfSkOCNYMwKbouXvzfyZ1xyOWRFIeblJe5/oIWrrlUCr5ONfQpWnHbzIYsAAXt f2i3rVa3QBkjfNiWm+V55XUaGcD/kReR3YW5fgq1QIhxPtwk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzL6XRve+3MBC3CMwTGKwz/YL8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGMyZGM3ODktM2FhZi0z Njk0LTkwOTAtNGY0YzAwNjkzN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAw8rl97XADAeJqZn+pcEVYOSEX3/hRpma6z0h9IHf+FULdBlGWL2NZ K0bVuBqpVeeI/flMkF3wrcW/G5U+nxU5cxq5Cy15sRcC0c4mTZCQ3vUbgp7YZNRw NX6yV7QrsUxJvgfu3P5kydwolfOf3XOiZLkH/2O4NZ8kiIFKe8O6yOeSbFsiBBHH gQtubMuDHEBVzz1RoyYm1DYc5aQq5Aoj6T2QFB1ndtGaS/XJediL1MAMeSNxk/2k Wpsx9opVm5n1HouFIYPRI7MrZkdACtqrbvfQjl6X2UzaL16AOa3V84DzrrCEjcA7 SrB9OLL+6Wrpldz5OdTeEqOyyNK1iSw= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:45 2025 by rpki-client