$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa File: eb9c9955-2742-37c2-abee-ce50eda1bddd.roa (raw, json) Hash identifier: nZijVhkutpXg68f5TRJ+HkmTK7GD9AnY+JPscTYSnRo= Subject key identifier: CC:AA:DF:9C:B9:BC:DA:7B:AA:5D:F9:60:78:3B:FF:E7:D0:30:26:FB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB02D103124E6C6260EFD27C8 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 13335 IP address blocks: 172.70.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:10:31:24:e6:c6:26:0e:fd:27:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=b862cf1d-9956-458f-862e-95a694d2423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:8b:0a:19:bc:79:8b:03:e7:6b:98:18:15: af:40:4a:71:d1:14:ed:27:c9:1a:e8:5b:86:b1:55: 47:05:1c:3f:3f:3a:b1:c6:81:5e:d2:76:2e:74:26: 72:3c:c6:18:96:56:2d:2d:63:2d:70:03:75:89:ea: a6:f1:a7:64:b6:79:4e:b4:22:10:2a:7c:9c:53:15: 0c:0e:cf:57:eb:a0:eb:47:67:1d:e6:77:26:2d:ab: 9e:33:81:f7:60:ce:0a:81:28:65:1a:f7:f9:4a:95: 35:a3:4f:35:fe:52:21:c4:70:f7:3f:47:f0:2d:ba: e4:c5:20:41:c9:9a:bb:5e:55:a2:1d:dd:af:bf:e7: 97:53:66:ae:c8:fa:27:c4:e5:13:db:d3:ff:fb:0e: ff:98:10:a5:a0:5c:21:f1:b8:80:5e:6c:18:12:e9: 4e:20:b7:a7:47:59:47:b2:7a:12:bd:03:35:03:93: 1b:9d:59:b4:af:6d:d7:e1:64:58:9c:ce:4a:89:39: a5:c0:a2:4e:d4:bb:77:98:6a:7f:fe:fb:78:02:de: 49:51:b4:44:18:a6:eb:32:d0:b3:2b:d9:85:04:5c: 4e:f7:ad:14:de:13:09:65:33:c4:31:2a:85:03:a9: df:ef:c6:c1:5d:a0:2b:32:2c:95:d8:b6:1b:cf:c4: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AA:DF:9C:B9:BC:DA:7B:AA:5D:F9:60:78:3B:FF:E7:D0:30:26:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eb9c9955-2742-37c2-abee-ce50eda1bddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5f:ed:eb:ba:44:7f:04:00:0a:97:9c:2a:1f:ef:3c:2d:e2: 96:d0:51:c1:d6:7b:78:73:00:99:9b:1a:ef:f4:1a:e1:02:9b: 85:c2:4a:39:61:e1:84:0a:9a:29:0b:0a:2a:c7:ba:b0:a2:2b: 23:24:17:3f:03:cf:a1:e9:ea:c6:b5:c0:d9:6e:58:3e:1b:be: 6e:bb:c8:e1:70:67:a9:cd:30:fc:d4:30:7f:d7:c3:68:e3:32: 77:05:11:5e:30:d2:fb:e1:47:e6:c9:84:f7:23:1b:3a:c9:65: 1b:a4:43:d8:36:fc:b4:b1:8a:30:97:35:f6:a1:5c:96:2b:5d: da:76:4d:ed:42:3f:85:a7:3e:22:7b:b6:8a:66:71:c9:92:a5: 05:00:f5:44:a3:a0:5d:c0:8d:13:c1:30:78:dd:de:a6:56:f3: cc:f4:62:09:fd:11:a1:02:fd:66:58:66:9b:2e:fe:0c:93:73: 2f:ec:69:2c:2b:36:d2:b9:85:cb:94:e8:2e:39:18:61:50:86: f7:65:e7:d5:92:69:5a:27:be:a5:59:2e:6d:ef:0b:8f:f1:25: 5c:3d:4e:48:a8:5e:60:f7:3a:62:94:47:a1:95:d7:d9:9a:f0: 5b:4c:18:d8:48:f2:56:ee:61:24:b1:d8:b7:6c:1c:09:b2:d4: 22:3f:8d:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRAxJObGJg79J8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk Yjg2MmNmMWQtOTk1Ni00NThmLTg2MmUtOTVhNjk0ZDI0MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcaLChm8eYsD52uYGBWvQEpx0RTtJ8ka6FuG sVVHBRw/PzqxxoFe0nYudCZyPMYYllYtLWMtcAN1ieqm8adktnlOtCIQKnycUxUM Ds9X66DrR2cd5ncmLaueM4H3YM4KgShlGvf5SpU1o081/lIhxHD3P0fwLbrkxSBB yZq7XlWiHd2vv+eXU2auyPonxOUT29P/+w7/mBCloFwh8biAXmwYEulOILenR1lH snoSvQM1A5MbnVm0r23X4WRYnM5KiTmlwKJO1Lt3mGp//vt4At5JUbREGKbrMtCz K9mFBFxO960U3hMJZTPEMSqFA6nf78bBXaArMiyV2LYbz8QzrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyq35y5vNp7ql35YHg7/+fQMCb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWI5Yzk5NTUtMjc0Mi0z N2MyLWFiZWUtY2U1MGVkYTFiZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFf7eu6RH8EAAqXnCof7zwt4pbQUcHWe3hzAJmbGu/0GuECm4XCSjlh 4YQKmikLCirHurCiKyMkFz8Dz6Hp6sa1wNluWD4bvm67yOFwZ6nNMPzUMH/Xw2jj MncFEV4w0vvhR+bJhPcjGzrJZRukQ9g2/LSxijCXNfahXJYrXdp2Te1CP4WnPiJ7 topmccmSpQUA9USjoF3AjRPBMHjd3qZW88z0Ygn9EaEC/WZYZpsu/gyTcy/saSwr NtK5hcuU6C45GGFQhvdl59WSaVonvqVZLm3vC4/xJVw9TkioXmD3OmKUR6GV19ma 8FtMGNhI8lbuYSSx2LdsHAmy1CI/jWg= -----END CERTIFICATE-----Generated at Sat Nov 1 10:01:44 2025 by rpki-client