$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa File: 2df24873-17e8-3e43-9caa-e65a220bd335.roa (raw, json) Hash identifier: +2ZFcUdVIgS/CXG/aRBcdg3YPyGn7JT47tYfTEVPS7k= Subject key identifier: FC:22:4B:32:33:FB:BF:6F:53:12:BF:1C:22:0E:0E:34:07:70:DF:C8 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1926A0DE4B999FD27F3FAC0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:6a:0d:e4:b9:99:fd:27:f3:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=bb4d40d5-bda5-41ed-8698-55c3e7f9f2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:e2:cc:8c:37:eb:eb:25:e8:4f:96:50:eb: c1:15:c5:9e:f6:aa:54:8b:2a:d0:70:e9:fa:88:d1: c4:73:6d:c7:b0:1c:36:fd:32:f0:29:14:36:60:66: 59:b1:4a:d3:7b:54:ce:2b:c7:dd:fe:7b:3c:71:be: a3:6d:df:4b:6a:8b:1d:3e:bf:28:98:4c:b5:7a:78: 12:82:84:db:5f:96:a6:17:da:b1:b6:3d:c1:70:74: b7:e0:f9:b3:75:3e:9c:ed:33:35:bc:bc:f6:24:d8: ad:0e:15:02:95:ce:73:4f:66:b7:f3:00:c2:77:87: e7:8c:d4:3c:00:81:19:fc:f1:74:ad:b9:9c:b5:77: 0e:fb:ea:82:16:4d:e0:a9:5c:a1:ba:26:02:50:9a: 3d:e8:16:a3:32:3c:4c:6c:3b:6b:aa:8f:3f:57:36: a1:26:e6:49:8c:e5:b7:f4:ac:1e:88:e6:62:22:0f: bc:f2:2a:70:a8:64:f3:8e:1f:af:74:f6:a2:bd:49: 1b:ea:e8:f5:a9:ad:1b:7a:04:18:aa:4c:31:be:6a: 54:bf:19:f0:e0:98:1f:17:72:d3:a5:53:37:08:31: 41:81:73:02:89:2b:79:a0:98:13:36:d6:31:09:34: fa:68:0c:92:66:ab:af:e2:7d:c1:75:c9:4d:ff:8e: f8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:22:4B:32:33:FB:BF:6F:53:12:BF:1C:22:0E:0E:34:07:70:DF:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2df24873-17e8-3e43-9caa-e65a220bd335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d8:81:90:6a:77:f3:f5:8b:f4:cf:c5:be:ed:13:c1:56:24: 47:28:03:9a:70:1e:20:de:f8:b6:c1:88:41:9e:ff:53:46:06: 0f:87:2e:a0:6c:27:e1:e5:fc:49:14:f6:9a:8f:5a:64:ad:d8: be:1e:be:ef:ce:d9:12:0e:f8:73:1f:a5:7b:22:17:4c:cb:5e: d4:19:d2:bd:c0:10:f6:89:bb:1a:c9:a3:b2:5b:a8:e9:fa:11: 43:99:f9:38:e8:16:83:29:8c:ad:31:0c:a2:7a:43:1a:57:77: 70:2c:6f:a2:90:69:53:34:73:8f:ff:e8:7d:9d:3b:8d:04:36: 6c:5a:02:ab:7d:f4:10:e5:6b:4b:10:d6:68:4f:dd:ce:e8:d3: bb:96:d9:b1:4d:5d:67:e8:ea:27:00:d9:3a:b0:51:e0:c6:ec: ba:3d:17:8c:25:00:cb:86:4a:e4:59:3a:69:50:c3:e2:a9:f8: b7:cf:9a:54:94:3f:09:4c:ca:9e:31:62:2b:d8:28:65:54:30: 9a:fe:9e:df:8d:8d:01:aa:5f:fa:a5:20:c4:40:32:70:45:2a: 75:3e:8b:99:f0:13:df:f3:00:e8:0b:b8:a5:04:6f:71:1b:2c: 49:50:7f:ec:71:fe:29:3e:49:7a:6c:eb:1a:83:ab:57:0f:58: 84:59:77:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmoN5LmZ/Sfz+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk YmI0ZDQwZDUtYmRhNS00MWVkLTg2OTgtNTVjM2U3ZjlmMmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopPizIw36+sl6E+WUOvBFcWe9qpUiyrQcOn6 iNHEc23HsBw2/TLwKRQ2YGZZsUrTe1TOK8fd/ns8cb6jbd9LaosdPr8omEy1engS goTbX5amF9qxtj3BcHS34PmzdT6c7TM1vLz2JNitDhUClc5zT2a38wDCd4fnjNQ8 AIEZ/PF0rbmctXcO++qCFk3gqVyhuiYCUJo96BajMjxMbDtrqo8/VzahJuZJjOW3 9KweiOZiIg+88ipwqGTzjh+vdPaivUkb6uj1qa0begQYqkwxvmpUvxnw4JgfF3LT pVM3CDFBgXMCiSt5oJgTNtYxCTT6aAySZquv4n3BdclN/474iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwiSzIz+79vUxK/HCIODjQHcN/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmRmMjQ4NzMtMTdlOC0z ZTQzLTljYWEtZTY1YTIyMGJkMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/YgZBqd/P1i/TPxb7tE8FWJEcoA5pwHiDe+LbBiEGe/1NGBg+HLqBs J+Hl/EkU9pqPWmSt2L4evu/O2RIO+HMfpXsiF0zLXtQZ0r3AEPaJuxrJo7JbqOn6 EUOZ+TjoFoMpjK0xDKJ6QxpXd3Asb6KQaVM0c4//6H2dO40ENmxaAqt99BDla0sQ 1mhP3c7o07uW2bFNXWfo6icA2TqwUeDG7Lo9F4wlAMuGSuRZOmlQw+Kp+LfPmlSU PwlMyp4xYivYKGVUMJr+nt+NjQGqX/qlIMRAMnBFKnU+i5nwE9/zAOgLuKUEb3Eb LElQf+xx/ik+SXps6xqDq1cPWIRZd6Y= -----END CERTIFICATE-----Generated at Wed Nov 5 04:55:03 2025 by rpki-client