$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa File: efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa (raw, json) Hash identifier: szy3sWl3GxH7TfQQxxMsTYQxdE1QmjA1q2V6G6d0BE4= Subject key identifier: B0:A4:12:F6:20:3A:44:6E:CE:4A:3D:16:8B:84:F0:06:3B:B7:F5:C7 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB192782250BA891A9C206C20 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:78:22:50:ba:89:1a:9c:20:6c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=df75a9f4-81d2-4eff-8033-4aec1314a220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:cf:f3:0f:78:27:92:99:e8:b6:16:fe:a1: 13:b9:51:c2:54:3a:3c:5a:7c:96:31:dd:ba:54:65: b3:0e:95:f9:85:16:84:3b:2d:eb:5c:bc:3a:e3:36: ce:80:e3:6f:5f:90:1d:fc:02:a9:26:3c:f2:98:5a: 47:e8:91:11:c9:70:1a:99:e6:1f:e0:36:d0:fd:6f: 92:07:f7:d1:36:fd:6c:ba:8e:d1:ee:c4:74:ba:55: 58:a0:a0:d5:ee:7c:7e:7e:4b:98:3a:59:f5:aa:74: 91:c7:66:28:d9:c2:5a:e1:55:02:f3:ac:80:51:df: 1d:4e:ff:10:20:d7:89:c3:1f:32:22:c5:d6:13:59: 79:82:08:f3:63:2e:36:02:ef:e4:cf:b9:e8:99:40: 41:e8:0d:fa:bf:4a:13:21:c1:dd:0a:3a:db:ab:86: 7d:49:8c:af:2c:00:ba:3d:0d:f0:d6:37:55:8f:79: a5:80:81:5d:2b:af:7e:ee:40:14:73:7b:42:8e:44: 14:56:18:5e:bf:9c:c7:7d:cb:e8:1c:26:c4:17:6d: e7:65:7d:e2:c2:b0:e6:84:d5:5c:79:a5:46:f4:a2: b5:38:7f:0b:4f:e0:35:91:90:37:38:17:ae:2b:95: 9d:e4:09:e9:fb:1e:aa:26:bf:6f:44:ff:de:aa:df: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A4:12:F6:20:3A:44:6E:CE:4A:3D:16:8B:84:F0:06:3B:B7:F5:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/efcfff4d-2c9a-349b-aecd-c4c3910dce56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:23:b3:af:21:b6:4b:13:f5:b8:0e:d6:fc:e1:2a:16:34:ee: a2:82:8d:28:f9:a4:e6:85:e5:d7:d8:2c:c4:39:81:85:94:df: 29:07:62:3b:bc:f9:9b:8a:b5:ff:15:86:d8:38:6a:08:8b:0c: 1c:50:d6:92:d3:49:f2:2c:35:db:72:5c:fd:2a:57:74:98:78: 36:84:f1:65:6f:73:6d:60:20:89:e3:c6:72:cd:7a:ad:b1:e1: 56:9e:48:9b:84:d0:97:e9:0d:28:73:53:ee:7f:ff:d3:23:9a: 5b:31:da:3d:43:86:05:f8:f7:aa:0f:93:ed:9d:ec:50:e2:d6: fa:a8:66:2d:69:41:0d:db:38:9a:26:0a:de:81:e1:6c:25:96: f1:bd:ca:cf:59:65:ff:40:83:2d:e4:42:1b:e1:c6:87:83:bc: 0c:82:5d:0a:63:23:59:10:e9:6f:63:a5:e0:68:06:bf:73:4a: a0:a4:2f:6a:f5:e5:7b:b9:03:90:9c:74:58:e0:c0:9f:3f:51: dd:7e:34:61:6d:1a:88:72:a2:3f:3b:83:c3:1a:56:e3:99:d6: f4:b7:f0:3b:e3:a2:d8:e0:4d:81:9b:7f:6a:19:5c:de:92:3d: b9:f5:35:f9:2d:19:e7:e4:26:6b:28:9f:f3:58:f4:10:29:6f: a5:52:ef:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkngiULqJGpwgbCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk ZGY3NWE5ZjQtODFkMi00ZWZmLTgwMzMtNGFlYzEzMTRhMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPP8w94J5KZ6LYW/qETuVHCVDo8WnyWMd26 VGWzDpX5hRaEOy3rXLw64zbOgONvX5Ad/AKpJjzymFpH6JERyXAameYf4DbQ/W+S B/fRNv1suo7R7sR0ulVYoKDV7nx+fkuYOln1qnSRx2Yo2cJa4VUC86yAUd8dTv8Q INeJwx8yIsXWE1l5ggjzYy42Au/kz7nomUBB6A36v0oTIcHdCjrbq4Z9SYyvLAC6 PQ3w1jdVj3mlgIFdK69+7kAUc3tCjkQUVhhev5zHfcvoHCbEF23nZX3iwrDmhNVc eaVG9KK1OH8LT+A1kZA3OBeuK5Wd5Anp+x6qJr9vRP/eqt8agQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCkEvYgOkRuzko9FouE8AY7t/XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZWZjZmZmNGQtMmM5YS0z NDliLWFlY2QtYzRjMzkxMGRjZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEa6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcjs68htksT9bgO1vzhKhY07qKCjSj5pOaF5dfYLMQ5gYWU3ykHYju8 +ZuKtf8Vhtg4agiLDBxQ1pLTSfIsNdtyXP0qV3SYeDaE8WVvc21gIInjxnLNeq2x 4VaeSJuE0JfpDShzU+5//9Mjmlsx2j1DhgX496oPk+2d7FDi1vqoZi1pQQ3bOJom Ct6B4WwllvG9ys9ZZf9Agy3kQhvhxoeDvAyCXQpjI1kQ6W9jpeBoBr9zSqCkL2r1 5Xu5A5CcdFjgwJ8/Ud1+NGFtGohyoj87g8MaVuOZ1vS38DvjotjgTYGbf2oZXN6S Pbn1NfktGefkJmson/NY9BApb6VS7y4= -----END CERTIFICATE-----Generated at Sat Nov 1 15:22:01 2025 by rpki-client