$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa File: a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa (raw, json) Hash identifier: 9nvQVNjnskbwCo0rtjFVTZLEOYYEPNdsZC74olrGgq8= Subject key identifier: AE:B0:8E:F4:B7:65:BC:00:FD:6B:AD:F3:C1:0F:46:20:81:BC:0D:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD7B1D397C49BC5906B580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 40306 IP address blocks: 70.41.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:7b:1d:39:7c:49:bc:59:06:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=94926645-9aa5-43f5-abee-014406c490da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7c:5f:37:81:96:5b:b2:a0:36:93:bb:9f:78: bb:43:f1:02:65:40:f0:eb:6a:f3:59:f6:6f:57:ed: c0:20:a2:c5:ae:4b:d0:34:ad:21:66:a5:b6:c1:4c: d6:ad:0d:de:bd:89:fc:23:1a:72:8b:ff:54:64:d3: 6f:12:fc:47:f5:b3:cd:b8:dc:47:28:42:4e:33:39: bf:dc:aa:1d:cf:30:d2:78:9d:b6:7a:ba:e9:a9:51: 4f:b2:17:33:2d:85:af:d0:f5:5c:d4:2f:b4:49:49: 41:c0:d6:68:ae:9e:2e:1a:5b:ad:95:42:fd:e7:bd: c8:11:d0:54:19:32:bf:0f:53:ba:30:be:36:87:da: 4b:c8:e1:c5:ba:11:66:a4:07:f1:a3:94:a5:13:fa: 6e:62:df:8e:e8:e7:4a:bd:d0:98:5a:fa:b8:cb:95: d4:bd:84:48:ff:31:02:94:9f:ba:37:1a:d3:ee:29: 17:90:e3:d0:fc:92:3d:58:20:ed:33:95:00:c7:dc: bb:4c:aa:f6:4b:ec:49:dd:17:e9:39:c5:3b:d0:81: 96:be:44:26:2a:6e:1c:7e:e7:1a:cc:f9:44:97:73: db:ff:32:eb:fe:c7:37:2b:42:76:d6:9a:c0:ed:f0: 3f:a8:65:43:f5:82:8c:0e:77:c0:67:81:bd:83:08: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B0:8E:F4:B7:65:BC:00:FD:6B:AD:F3:C1:0F:46:20:81:BC:0D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2c8a8-e0ee-3339-839e-4c51d8c8912a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:02:28:38:57:14:30:f1:47:2a:5a:ea:b6:99:8a:bd:73:1e: 97:c6:57:17:d7:5e:76:1b:dc:5b:1c:cd:d9:42:85:52:89:26: 7a:25:6e:d9:2d:06:a8:c1:ff:c4:bc:79:f2:7a:6a:fa:50:6a: 33:9b:e2:7b:fe:a7:d2:bc:cf:e9:ad:de:c3:0c:90:ca:49:04: 1b:4c:69:f4:58:6e:ea:1a:90:b3:07:a9:d9:64:c6:01:86:93: ee:79:fd:6b:f5:de:24:0c:f9:c6:56:ee:c8:7d:42:21:3e:47: ba:02:e4:5e:45:5b:37:32:a6:dc:8d:d8:ee:cb:ab:be:96:a8: ff:e9:72:fa:f9:98:43:b6:b4:f0:5c:d8:31:69:af:8c:17:c4: 6b:79:82:ef:e0:a0:81:59:7b:77:84:c2:92:92:eb:0a:f3:b4: 92:cd:9f:3e:b0:24:49:c5:69:da:6e:11:f2:36:e7:ce:a9:1e: 85:63:70:0b:08:ee:bb:ab:52:2e:d4:7d:a0:df:6b:ce:38:cc: 8a:b2:45:be:76:f0:7f:31:b3:bd:35:d1:bc:69:00:53:5e:6a: 86:02:1e:ea:2d:ad:28:60:72:01:ac:90:60:75:86:05:fa:26: 64:9e:da:60:43:e9:e5:05:70:32:7b:2a:c0:ea:ea:9a:b6:b4: 28:94:b6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXsdOXxJvFkGtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTQ5MjY2NDUtOWFhNS00M2Y1LWFiZWUtMDE0NDA2YzQ5MGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXxfN4GWW7KgNpO7n3i7Q/ECZUDw62rzWfZv V+3AIKLFrkvQNK0hZqW2wUzWrQ3evYn8Ixpyi/9UZNNvEvxH9bPNuNxHKEJOMzm/ 3KodzzDSeJ22errpqVFPshczLYWv0PVc1C+0SUlBwNZorp4uGlutlUL9573IEdBU GTK/D1O6ML42h9pLyOHFuhFmpAfxo5SlE/puYt+O6OdKvdCYWvq4y5XUvYRI/zEC lJ+6NxrT7ikXkOPQ/JI9WCDtM5UAx9y7TKr2S+xJ3RfpOcU70IGWvkQmKm4cfuca zPlEl3Pb/zLr/sc3K0J21prA7fA/qGVD9YKMDnfAZ4G9gwg78QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6wjvS3ZbwA/Wut88EPRiCBvA3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmM4YTgtZTBlZS0z MzM5LTgzOWUtNGM1MWQ4Yzg5MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgCKDhXFDDxRypa6raZir1zHpfGVxfXXnYb3FsczdlChVKJJnolbtkt BqjB/8S8efJ6avpQajOb4nv+p9K8z+mt3sMMkMpJBBtMafRYbuoakLMHqdlkxgGG k+55/Wv13iQM+cZW7sh9QiE+R7oC5F5FWzcyptyN2O7Lq76WqP/pcvr5mEO2tPBc 2DFpr4wXxGt5gu/goIFZe3eEwpKS6wrztJLNnz6wJEnFadpuEfI2586pHoVjcAsI 7rurUi7UfaDfa844zIqyRb528H8xs7010bxpAFNeaoYCHuotrShgcgGskGB1hgX6 JmSe2mBD6eUFcDJ7KsDq6pq2tCiUtgA= -----END CERTIFICATE-----Generated at Sat Oct 18 21:08:29 2025 by rpki-client