$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa File: bcf45e9e-dc18-3d25-b5d1-bae729308233.roa (raw, json) Hash identifier: LSEECaR9PTNHiTeY4AkHxA/Dsu0/3+p8BBVPZg70usY= Subject key identifier: B2:C5:35:F1:FE:9F:5F:59:62:30:D3:11:80:77:3F:CE:A7:94:B5:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCC3E3E9665A03839A8620 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 40306 IP address blocks: 70.41.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c3:e3:e9:66:5a:03:83:9a:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=30cfc32a-e22a-4acf-b939-bafa1d6860a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:76:f2:85:81:ba:95:56:18:9c:da:25:a0: a9:e3:db:2b:59:ad:9c:d6:14:ba:1e:1c:18:cb:8e: 56:15:f0:88:99:bd:1a:ca:e7:e7:30:e8:c5:7a:4a: 37:12:d0:d9:e3:33:5e:f2:78:4a:27:81:d8:fb:c0: 22:9f:32:30:94:a2:1b:ea:ff:f0:2a:00:63:5e:0d: b9:a2:68:fa:3e:1b:0e:f2:05:0d:ad:92:00:e8:89: da:9e:a6:75:2f:00:5a:81:76:e0:79:06:73:10:8d: 11:ec:2b:44:c4:41:4b:e3:fd:68:a8:7b:e3:e0:de: 9b:db:c2:a8:e4:df:68:b0:c9:e5:19:76:2f:a9:7d: 83:b9:02:b0:4c:d5:85:e0:db:5a:f8:5a:06:77:03: d2:ce:7c:c1:1b:48:6e:c4:b1:84:8d:c2:ae:fa:1b: 40:5a:df:dc:fd:37:8e:83:aa:a0:2e:50:03:96:1e: 0c:b7:c0:4c:f3:b8:21:de:64:a4:b1:35:dc:73:74: 01:1f:21:5c:19:c1:17:71:ad:8d:aa:2d:f4:75:b4: 49:9f:51:74:b9:a6:4d:08:73:11:bc:d7:fd:4d:42: ff:40:e5:f2:78:14:04:bb:3d:02:94:10:de:17:82: f6:13:c6:f3:57:55:a7:19:f7:5e:be:fe:c3:80:03: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C5:35:F1:FE:9F:5F:59:62:30:D3:11:80:77:3F:CE:A7:94:B5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bcf45e9e-dc18-3d25-b5d1-bae729308233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:28:f3:56:a8:95:f5:e2:c3:29:66:9b:dc:28:7d:a3:d7:1a: 80:65:7e:ac:34:fd:80:3c:86:8b:e7:b3:46:9d:23:f3:77:37: 8d:a4:62:df:f0:ad:d7:af:88:28:5d:35:79:93:2d:a1:1f:d5: b3:bc:a2:3c:d1:9d:97:e1:ff:67:dd:de:41:44:97:8c:d9:c4: c5:59:25:50:60:bb:4f:60:ad:dd:91:79:1b:d4:90:c6:30:07: c5:7e:f8:4c:aa:dc:33:54:ce:d0:ce:df:78:af:ba:34:57:27: cc:70:17:22:c2:40:9f:9c:fd:7a:3b:9a:f6:f2:55:b7:63:eb: b6:3e:14:77:4c:0b:1a:e8:19:76:98:eb:1a:e9:81:c9:76:ac: e3:27:7d:6e:37:17:05:ed:22:6a:b1:82:6d:31:50:70:b1:8c: 4b:a6:8f:81:9e:37:fa:45:13:31:94:fa:1c:b8:8c:47:57:d8: fb:4c:d5:69:72:85:37:6e:a5:29:08:bf:c1:af:7f:94:4a:d0: 65:3f:3b:7c:cd:65:a3:9d:62:ad:73:d5:56:56:69:b5:5e:0c: 85:0a:a0:8e:a3:62:e1:52:a5:37:ef:4a:5e:2d:6c:c2:b7:1b: 8d:17:78:9c:1d:fb:aa:ed:49:e3:73:f2:10:f9:9f:13:ee:11: 27:43:56:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMPj6WZaA4OahiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzBjZmMzMmEtZTIyYS00YWNmLWI5MzktYmFmYTFkNjg2MGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydV28oWBupVWGJzaJaCp49srWa2c1hS6HhwY y45WFfCImb0ayufnMOjFeko3EtDZ4zNe8nhKJ4HY+8AinzIwlKIb6v/wKgBjXg25 omj6PhsO8gUNrZIA6InanqZ1LwBagXbgeQZzEI0R7CtExEFL4/1oqHvj4N6b28Ko 5N9osMnlGXYvqX2DuQKwTNWF4Nta+FoGdwPSznzBG0huxLGEjcKu+htAWt/c/TeO g6qgLlADlh4Mt8BM87gh3mSksTXcc3QBHyFcGcEXca2Nqi30dbRJn1F0uaZNCHMR vNf9TUL/QOXyeBQEuz0ClBDeF4L2E8bzV1WnGfdevv7DgAP+DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLFNfH+n19ZYjDTEYB3P86nlLXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNmNDVlOWUtZGMxOC0z ZDI1LWI1ZDEtYmFlNzI5MzA4MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEso81aolfXiwylmm9wofaPXGoBlfqw0/YA8hovns0adI/N3N42kYt/w rdeviChdNXmTLaEf1bO8ojzRnZfh/2fd3kFEl4zZxMVZJVBgu09grd2ReRvUkMYw B8V++Eyq3DNUztDO33ivujRXJ8xwFyLCQJ+c/Xo7mvbyVbdj67Y+FHdMCxroGXaY 6xrpgcl2rOMnfW43FwXtImqxgm0xUHCxjEumj4GeN/pFEzGU+hy4jEdX2PtM1Wly hTdupSkIv8Gvf5RK0GU/O3zNZaOdYq1z1VZWabVeDIUKoI6jYuFSpTfvSl4tbMK3 G40XeJwd+6rtSeNz8hD5nxPuESdDVgg= -----END CERTIFICATE-----Generated at Sat Oct 18 21:08:30 2025 by rpki-client