$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa File: 2a528825-cc34-395a-a8fe-a399eadad177.roa (raw, json) Hash identifier: W0S8Pk9usD1Oy+JjwcCY0OHETnqnA1yusm06gBg+xwQ= Subject key identifier: EC:DE:9B:B8:9C:DB:1A:2A:C4:E8:DD:61:76:FD:BA:8F:C3:E8:D2:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B6D2C9A83F653183EE69C6C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 40306 IP address blocks: 70.41.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:9a:83:f6:53:18:3e:e6:9c:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=96e01bc3-64fb-42e4-bfcd-5c1a0a4d4e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:28:2e:65:b8:d9:30:d8:dc:e7:28:d6:c0: cd:e4:13:b2:ef:68:88:a4:5f:e7:6f:40:31:86:84: 17:dd:48:29:be:9b:de:cb:15:bd:0c:be:e6:a0:23: 0f:28:52:93:9f:f1:ee:2c:0b:1c:ee:b5:bd:b6:5c: 62:54:ba:7f:9e:ca:a9:25:b5:a6:e1:9c:fa:1a:95: 3a:74:50:14:1f:b4:72:81:6e:84:64:35:20:3d:eb: 18:f7:a1:0a:50:8f:e3:7a:b5:72:38:9e:51:3b:2c: b4:8a:39:f3:bd:4a:af:ca:96:da:91:91:2f:ef:be: b8:7d:84:4f:3f:da:fa:d7:2e:2c:77:05:2a:c8:b8: 08:42:0b:e3:26:fe:97:0f:6c:7c:e5:d0:6c:a2:03: 19:76:0e:1f:a2:40:df:3d:77:04:34:94:96:fe:c5: 69:f9:35:60:31:9c:cd:b6:a1:65:e1:27:f0:ac:28: c9:35:ce:61:dd:0d:cf:5c:7e:33:c3:9f:1c:b9:97: e4:35:7f:c9:d7:04:c1:ed:ca:4a:12:cb:b9:b2:c8: 9c:0c:86:e2:45:0b:b9:ac:3f:c7:29:b2:b7:02:4a: 78:74:55:0f:6f:29:93:0c:20:de:21:ba:f5:fa:87: ff:d7:51:21:93:36:c7:66:4e:cc:0e:6e:46:32:62: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DE:9B:B8:9C:DB:1A:2A:C4:E8:DD:61:76:FD:BA:8F:C3:E8:D2:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:99:c0:7a:9b:bb:04:aa:c0:5b:04:fb:89:34:25:3e:8e:1d: 99:70:da:ca:91:d3:52:28:1e:52:a5:e8:62:97:ad:3a:89:7b: 17:90:dc:cf:d6:59:18:54:f4:34:2e:27:ba:86:81:27:5e:ae: 9f:65:0b:bf:0b:74:f6:dc:d5:9d:1c:72:60:48:37:57:56:4d: f8:96:e3:21:f3:ff:f7:4d:f9:7e:63:db:9c:ec:53:c8:96:c5: 32:ac:7f:0c:9a:cc:ac:5b:7f:27:9f:cc:e4:ad:06:14:45:ab: 28:dd:a0:a6:7a:62:a0:a2:a3:b8:65:91:ed:9d:e3:a9:0a:ac: 55:f8:92:0e:8b:54:e0:16:99:db:6c:a5:7e:3c:d1:04:29:86: 27:d8:21:df:f6:c5:18:ca:b6:ec:86:cd:fe:c5:b6:db:e0:f5: 8a:c5:cd:3a:cc:a7:90:43:e8:a7:94:08:25:ad:77:ae:80:f2: 1a:79:6d:11:7b:a9:0f:93:a8:02:a6:4f:fc:c4:fe:25:7e:79: ee:f8:47:10:f1:01:cd:97:ce:49:e6:af:6e:b2:5a:7b:06:91: 73:4b:ec:e4:61:84:81:53:cb:7f:33:4d:4d:80:cb:ba:f6:fc: 62:56:dd:9d:65:af:1d:6e:6b:c8:f1:83:96:b6:3b:e1:27:55: cc:83:40:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJqD9lMYPuacbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTZlMDFiYzMtNjRmYi00MmU0LWJmY2QtNWMxYTBhNGQ0ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI0oLmW42TDY3Oco1sDN5BOy72iIpF/nb0Ax hoQX3UgpvpveyxW9DL7moCMPKFKTn/HuLAsc7rW9tlxiVLp/nsqpJbWm4Zz6GpU6 dFAUH7RygW6EZDUgPesY96EKUI/jerVyOJ5ROyy0ijnzvUqvypbakZEv7764fYRP P9r61y4sdwUqyLgIQgvjJv6XD2x85dBsogMZdg4fokDfPXcENJSW/sVp+TVgMZzN tqFl4SfwrCjJNc5h3Q3PXH4zw58cuZfkNX/J1wTB7cpKEsu5ssicDIbiRQu5rD/H KbK3Akp4dFUPbymTDCDeIbr1+of/11EhkzbHZk7MDm5GMmIXSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzem7ic2xoqxOjdYXb9uo/D6NIhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1Mjg4MjUtY2MzNC0z OTVhLWE4ZmUtYTM5OWVhZGFkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6ZwHqbuwSqwFsE+4k0JT6OHZlw2sqR01IoHlKl6GKXrTqJexeQ3M/W WRhU9DQuJ7qGgSderp9lC78LdPbc1Z0ccmBIN1dWTfiW4yHz//dN+X5j25zsU8iW xTKsfwyazKxbfyefzOStBhRFqyjdoKZ6YqCio7hlke2d46kKrFX4kg6LVOAWmdts pX480QQphifYId/2xRjKtuyGzf7Fttvg9YrFzTrMp5BD6KeUCCWtd66A8hp5bRF7 qQ+TqAKmT/zE/iV+ee74RxDxAc2Xzknmr26yWnsGkXNL7ORhhIFTy38zTU2Ay7r2 /GJW3Z1lrx1ua8jxg5a2O+EnVcyDQL0= -----END CERTIFICATE-----Generated at Sat Oct 18 21:11:55 2025 by rpki-client