$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa File: f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa (raw, json) Hash identifier: uur4wPPGUcAE+NPFpt/Ohaj+/fHYRAyMENifxp0kzeE= Subject key identifier: 20:17:04:61:A8:82:6D:0D:30:C0:FE:C2:76:5C:71:2A:15:18:F3:53 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BA7CD073BE8E7C31DE30A9FC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 13335 IP address blocks: 172.70.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:07:3b:e8:e7:c3:1d:e3:0a:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=59e788df-1fbe-41ea-8932-d7add2421d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:53:1f:f0:34:36:bb:40:8b:16:52:78:46:de: 1a:36:bf:84:da:66:bb:11:a2:c0:66:b3:54:b3:8d: 7a:c3:a1:0c:8f:b2:7f:b9:7b:9b:35:41:52:98:1c: 93:db:68:b4:08:d5:eb:9b:70:69:9a:a3:6f:28:f4: 73:32:e4:6b:47:37:f7:03:e6:2e:6e:c6:2e:b6:f6: 5b:b4:62:4a:b3:10:b2:6d:8e:fe:45:98:37:3b:00: a9:d6:01:02:53:ae:8e:d3:1b:cc:1d:c4:73:69:ec: 8c:e5:2d:50:cd:5a:e6:75:92:df:ec:4b:38:3e:49: b7:33:29:a4:5a:8f:55:5a:b7:04:f5:21:37:3b:d4: f4:52:f3:d0:b2:e9:b0:e4:ef:58:50:23:e3:4b:93: a5:8b:d6:cb:2e:c5:80:e5:57:6b:14:77:50:1f:d8: b6:59:32:33:6d:62:dc:a3:3b:1e:9d:a4:4a:c4:8f: f7:5b:d8:c8:55:e5:e5:7c:0e:0f:39:a5:a4:52:bc: 61:1e:5c:01:46:dd:5c:f8:a4:e0:e2:5d:60:74:02: 3a:12:65:75:e0:f8:60:84:cd:77:74:49:8d:0c:02: 23:5a:eb:1d:e0:e3:54:65:fd:ec:af:8b:72:23:43: 15:31:ac:e4:4f:d5:55:ae:a7:52:6e:35:7f:09:e1: b0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:17:04:61:A8:82:6D:0D:30:C0:FE:C2:76:5C:71:2A:15:18:F3:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f3f58065-2558-3d70-ae37-d83b3b4ed7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:f1:f4:0d:04:d0:46:96:a4:5c:4c:6d:a4:05:64:db:5f:3d: 9c:11:b2:a5:74:e9:b7:d7:57:bf:62:f2:cf:b8:32:11:2c:52: 99:8a:be:31:aa:fe:4f:10:ca:9a:49:44:2d:59:f8:71:78:1b: e7:18:1e:18:49:f7:02:c0:c6:a6:9a:28:12:12:21:1d:84:18: a0:fb:23:9a:e0:5a:02:1a:44:89:50:b1:60:06:31:89:e1:b7: 50:fb:c6:18:dd:6b:73:86:1c:79:9c:6b:86:71:77:3a:1e:bd: 78:ce:c2:d7:4f:17:e8:f5:78:62:d8:46:c6:c1:12:7b:52:de: ab:c4:38:68:7b:d9:8e:e0:e8:66:1c:1c:7f:db:a7:e3:fc:8b: 6c:cf:d8:b5:3b:b5:a9:93:05:12:96:3e:c2:60:fd:12:48:71: 61:24:1a:91:bd:03:17:c6:8e:20:7a:1b:fe:af:50:77:d2:8f: f7:30:df:79:67:1e:76:c3:e7:3f:b9:df:cb:b0:d7:a4:31:dd: a9:78:62:bb:f4:b7:3b:e3:b2:d2:53:79:53:ff:af:88:e7:1f: 93:3b:2b:a2:fb:ea:f0:b8:15:e3:db:51:28:33:48:64:b6:d3: bb:f6:51:63:11:16:bd:a5:6e:52:18:0a:c5:72:d3:7f:f0:8a: 79:8b:8e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzQc76OfDHeMKn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NTllNzg4ZGYtMWZiZS00MWVhLTg5MzItZDdhZGQyNDIxZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1Mf8DQ2u0CLFlJ4Rt4aNr+E2ma7EaLAZrNU s416w6EMj7J/uXubNUFSmByT22i0CNXrm3BpmqNvKPRzMuRrRzf3A+YubsYutvZb tGJKsxCybY7+RZg3OwCp1gECU66O0xvMHcRzaeyM5S1QzVrmdZLf7Es4Pkm3Mymk Wo9VWrcE9SE3O9T0UvPQsumw5O9YUCPjS5Oli9bLLsWA5VdrFHdQH9i2WTIzbWLc ozsenaRKxI/3W9jIVeXlfA4POaWkUrxhHlwBRt1c+KTg4l1gdAI6EmV14PhghM13 dEmNDAIjWusd4ONUZf3sr4tyI0MVMazkT9VVrqdSbjV/CeGwYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAXBGGogm0NMMD+wnZccSoVGPNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjNmNTgwNjUtMjU1OC0z ZDcwLWFlMzctZDgzYjNiNGVkN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnx9A0E0EaWpFxMbaQFZNtfPZwRsqV06bfXV79i8s+4MhEsUpmKvjGq /k8QyppJRC1Z+HF4G+cYHhhJ9wLAxqaaKBISIR2EGKD7I5rgWgIaRIlQsWAGMYnh t1D7xhjda3OGHHmca4ZxdzoevXjOwtdPF+j1eGLYRsbBEntS3qvEOGh72Y7g6GYc HH/bp+P8i2zP2LU7tamTBRKWPsJg/RJIcWEkGpG9AxfGjiB6G/6vUHfSj/cw33ln HnbD5z+538uw16Qx3al4Yrv0tzvjstJTeVP/r4jnH5M7K6L76vC4FePbUSgzSGS2 07v2UWMRFr2lblIYCsVy03/winmLjjQ= -----END CERTIFICATE-----Generated at Sat Nov 1 10:00:57 2025 by rpki-client