$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa File: dc38943b-646d-3d87-8d19-7a4e376a9916.roa (raw, json) Hash identifier: 0lR6wTZU3+QxoFvCmvp3cnOWQzCa5nW9AXUhDCIGPiM= Subject key identifier: 02:28:31:5F:83:81:45:B8:AA:D4:1F:5E:66:A0:0D:5A:81:ED:A2:76 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCC3ADB18FF46D50DBCCC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 40306 IP address blocks: 70.41.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:c3:ad:b1:8f:f4:6d:50:db:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3516ba3d-774e-4281-8421-390367d4e95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:66:d5:ac:9e:d1:4d:1d:8b:cb:b5:af:c9: 7f:30:56:d2:71:87:e4:50:24:e0:f5:2d:80:18:51: 53:ce:f6:ab:4a:dd:0c:db:69:4d:39:5f:ae:1d:6f: 80:5d:2b:31:d3:7c:20:f6:14:59:72:42:77:1d:5e: 1c:2d:b0:fd:3a:17:68:56:24:58:73:32:57:5f:46: 52:a4:f3:df:4a:57:c0:6c:5c:bc:87:1f:2f:32:4d: ae:2b:15:f2:74:2c:a3:40:da:16:30:5c:4d:a5:cc: ee:2f:99:c3:4f:20:0b:ff:7e:4c:1b:94:e9:8c:da: 37:2d:88:2a:62:16:09:c2:65:96:bc:8e:38:1e:1d: b7:19:87:b1:68:19:ba:d7:6c:25:f8:5b:18:06:68: 40:33:6a:26:62:40:46:f8:5b:1f:b7:dd:af:ea:7c: 56:1e:45:14:dd:f4:b8:1a:e2:74:3e:41:a4:f1:a4: 39:83:a7:08:d6:86:6b:34:83:87:5e:a3:2c:71:22: 60:bc:a8:04:9f:4c:7d:d4:d8:00:d1:f6:fa:5a:f4: b6:e1:5f:78:d9:a4:a2:dc:f6:77:1d:33:e5:7e:70: b8:d3:e1:bc:18:00:5d:99:91:56:dc:a5:65:3f:00: e4:32:94:1d:75:a7:f6:33:09:61:9d:cb:de:cc:01: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:31:5F:83:81:45:B8:AA:D4:1F:5E:66:A0:0D:5A:81:ED:A2:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc38943b-646d-3d87-8d19-7a4e376a9916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:06:5a:f5:67:07:6d:9a:34:79:bc:17:8f:57:0f:ed:c8:fd: 4a:39:a7:c8:c5:2c:14:97:89:12:b0:6f:de:ee:cb:fc:f9:09: e4:b0:a9:a3:aa:d8:ea:99:3d:c9:f8:00:a9:f9:5f:b6:5d:2c: 28:55:44:da:66:f0:e4:ed:7a:52:8d:03:4f:db:ad:2e:e8:47: 26:c0:57:9a:79:e7:9f:df:e6:49:d0:98:51:b0:be:01:ae:50: bc:a1:99:4f:ea:e3:44:77:04:f7:ec:f8:af:1f:b8:bb:16:f1: 89:ca:7e:09:ec:27:fe:20:86:96:1f:67:3d:01:f0:60:1f:60: 14:e9:0b:46:50:7f:74:d2:24:ef:8f:de:0d:ca:9c:68:68:31: 34:cd:75:d5:23:b3:c7:5b:e0:7a:b4:f3:9a:d5:6d:cf:da:49: 9e:e0:26:bd:5a:b6:1f:0d:43:e8:23:84:b1:46:70:6c:98:9c: b3:16:86:5a:57:b7:89:f8:fa:b2:88:aa:34:8a:82:0d:06:a2: 97:62:68:02:2b:e7:a1:5c:ac:ce:98:23:c4:2a:48:8c:00:b6: d3:4a:80:b0:ea:9d:50:25:b0:fb:9b:f1:3b:02:11:df:87:c4: 4d:6c:0c:ff:d9:f7:c9:44:99:a9:0e:b2:77:77:6d:2a:74:b3: e0:1e:05:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMOtsY/0bVDbzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzUxNmJhM2QtNzc0ZS00MjgxLTg0MjEtMzkwMzY3ZDRlOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3xm1aye0U0di8u1r8l/MFbScYfkUCTg9S2A GFFTzvarSt0M22lNOV+uHW+AXSsx03wg9hRZckJ3HV4cLbD9OhdoViRYczJXX0ZS pPPfSlfAbFy8hx8vMk2uKxXydCyjQNoWMFxNpczuL5nDTyAL/35MG5TpjNo3LYgq YhYJwmWWvI44Hh23GYexaBm612wl+FsYBmhAM2omYkBG+Fsft92v6nxWHkUU3fS4 GuJ0PkGk8aQ5g6cI1oZrNIOHXqMscSJgvKgEn0x91NgA0fb6WvS24V942aSi3PZ3 HTPlfnC40+G8GABdmZFW3KVlPwDkMpQddaf2MwlhncvezAG4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIoMV+DgUW4qtQfXmagDVqB7aJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGMzODk0M2ItNjQ2ZC0z ZDg3LThkMTktN2E0ZTM3NmE5OTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkGWvVnB22aNHm8F49XD+3I/Uo5p8jFLBSXiRKwb97uy/z5CeSwqaOq 2OqZPcn4AKn5X7ZdLChVRNpm8OTtelKNA0/brS7oRybAV5p555/f5knQmFGwvgGu ULyhmU/q40R3BPfs+K8fuLsW8YnKfgnsJ/4ghpYfZz0B8GAfYBTpC0ZQf3TSJO+P 3g3KnGhoMTTNddUjs8db4Hq085rVbc/aSZ7gJr1ath8NQ+gjhLFGcGyYnLMWhlpX t4n4+rKIqjSKgg0GopdiaAIr56FcrM6YI8QqSIwAttNKgLDqnVAlsPub8TsCEd+H xE1sDP/Z98lEmakOsnd3bSp0s+AeBTc= -----END CERTIFICATE-----Generated at Sat Oct 18 21:09:35 2025 by rpki-client