$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa File: 85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa (raw, json) Hash identifier: fDvX0J1DKNtHy2m9bXsP+CSsg4cyu34d2BmqwDTCfhw= Subject key identifier: 90:C2:DE:2C:83:3A:1E:A7:17:8C:E1:3A:56:65:6C:06:FB:91:E0:D3 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584BB1927A5EC614A30B847B0FA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 13335 IP address blocks: 172.70.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:7a:5e:c6:14:a3:0b:84:7b:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=375c9f9e-33dd-4462-8fbf-cd0c58f44991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:c3:00:29:95:c8:10:29:49:ef:ec:f6:43: c8:bc:46:fd:74:5e:71:6e:bf:c2:39:54:68:9a:d6: f2:c1:8d:82:2c:ac:5e:d2:79:2f:ea:c1:b2:22:00: 30:90:97:52:66:7a:06:bf:1c:a5:d3:4b:f3:e4:57: 99:79:f4:c0:e2:55:55:43:31:31:e8:08:87:51:39: 65:b4:93:31:3f:e8:aa:6c:cb:76:e2:99:da:21:0e: 8f:51:34:5f:d2:b5:d3:c3:d0:c0:b2:c5:3a:2f:ef: bc:3f:d5:19:bc:1c:3e:41:6d:49:f2:22:bd:a5:49: c5:9b:71:ef:b7:51:58:ed:1b:f0:83:5b:4f:9d:c5: d7:6d:80:ca:31:a8:6f:1a:55:9d:6b:67:70:b9:c5: bc:18:2c:82:6a:c4:fd:3a:5f:f6:4e:69:ee:69:be: 17:65:a8:09:ba:de:97:2e:de:5d:ea:e2:83:a7:94: 6b:ac:dd:9e:74:d3:80:da:e0:86:f8:4d:76:f8:11: c6:f7:1a:23:1d:f6:70:8c:99:c4:bf:ac:df:46:14: 02:d2:0b:0a:1b:bd:6d:7b:43:dc:82:78:5f:b5:16: 74:eb:7c:2f:ad:9a:12:55:22:67:8d:08:03:37:92: 5a:4d:26:20:bc:e5:02:c8:b6:ce:ec:b2:83:f9:14: 27:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C2:DE:2C:83:3A:1E:A7:17:8C:E1:3A:56:65:6C:06:FB:91:E0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/85365389-d6f8-3ee3-b7a7-baf47cd7043e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.70.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:23:b2:b9:de:c9:7e:93:bf:76:ee:e0:5d:13:b5:31:36:0d: 19:12:15:c9:b6:16:b9:ec:23:ca:60:a0:55:f9:22:f5:ce:f2: 20:77:86:b3:3a:23:9b:a1:bc:39:39:2c:70:b4:50:d4:25:dd: 05:dc:54:b8:53:22:01:22:a8:e4:38:a7:64:84:39:d2:d1:e8: fa:f7:0b:c5:62:0a:c7:a6:ca:61:25:bc:56:95:18:da:d1:23: 43:c2:54:66:5f:0e:39:13:4c:af:3f:95:83:5e:58:f8:7d:2d: 69:e6:c0:13:12:d1:ad:e4:57:95:e3:9a:fa:90:82:4b:c9:f3: eb:2f:8c:19:8b:52:74:6f:6f:89:08:37:b4:3f:d9:d2:ef:d5: 2b:03:b8:ad:40:36:b1:25:a5:db:ac:89:ae:84:07:ea:10:2d: 93:84:d5:17:6d:42:3c:13:9c:38:bf:02:bb:61:ca:14:82:ee: 51:09:94:cb:67:d8:65:ba:a5:fb:3f:2b:2d:69:f9:2a:42:1f: 80:bc:d0:37:bc:a0:3a:75:02:28:83:ca:9b:34:bd:2b:f4:66: 03:22:d7:0c:1c:a1:a5:de:51:83:53:1f:23:92:f2:43:9c:12: f0:c8:0f:6a:a7:81:f6:5e:98:64:33:19:c9:c0:f6:b0:96:66: 5b:45:f0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxknpexhSjC4R7D6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk Mzc1YzlmOWUtMzNkZC00NDYyLThmYmYtY2QwYzU4ZjQ0OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+LDACmVyBApSe/s9kPIvEb9dF5xbr/COVRo mtbywY2CLKxe0nkv6sGyIgAwkJdSZnoGvxyl00vz5FeZefTA4lVVQzEx6AiHUTll tJMxP+iqbMt24pnaIQ6PUTRf0rXTw9DAssU6L++8P9UZvBw+QW1J8iK9pUnFm3Hv t1FY7Rvwg1tPncXXbYDKMahvGlWda2dwucW8GCyCasT9Ol/2Tmnuab4XZagJut6X Lt5d6uKDp5RrrN2edNOA2uCG+E12+BHG9xojHfZwjJnEv6zfRhQC0gsKG71te0Pc gnhftRZ063wvrZoSVSJnjQgDN5JaTSYgvOUCyLbO7LKD+RQnswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDC3iyDOh6nF4zhOlZlbAb7keDTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODUzNjUzODktZDZmOC0z ZWUzLWI3YTctYmFmNDdjZDcwNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAjsrneyX6Tv3bu4F0TtTE2DRkSFcm2FrnsI8pgoFX5IvXO8iB3hrM6 I5uhvDk5LHC0UNQl3QXcVLhTIgEiqOQ4p2SEOdLR6Pr3C8ViCsemymElvFaVGNrR I0PCVGZfDjkTTK8/lYNeWPh9LWnmwBMS0a3kV5XjmvqQgkvJ8+svjBmLUnRvb4kI N7Q/2dLv1SsDuK1ANrElpdusia6EB+oQLZOE1RdtQjwTnDi/ArthyhSC7lEJlMtn 2GW6pfs/Ky1p+SpCH4C80De8oDp1AiiDyps0vSv0ZgMi1wwcoaXeUYNTHyOS8kOc EvDID2qngfZemGQzGcnA9rCWZltF8P0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:21:52 2025 by rpki-client