$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b7a88b1-235b-3663-aa7f-480422fbd2b4.roa File: 0b7a88b1-235b-3663-aa7f-480422fbd2b4.roa (raw, json) Hash identifier: hdkoA1pW9rzbJkLK5GM/luw0f5hrJYkY9ShWoVNT3UU= Subject key identifier: 42:8B:BF:B2:04:81:A9:5F:14:40:B4:1A:81:EB:C7:CD:6A:F8:15:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD88736182C4B606F41700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b7a88b1-235b-3663-aa7f-480422fbd2b4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:88:73:61:82:c4:b6:06:f4:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bdbc0e9a-7e8f-42de-b0aa-e4f32d21111a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:50:72:ef:a7:f3:d5:20:4a:a5:30:b1:8c:2e: 3b:fa:68:fb:7e:fc:dd:e5:e0:a7:1f:a5:a2:5e:48: 83:34:78:c6:51:92:f6:df:3f:9b:ff:83:bb:91:22: b1:80:33:1e:b9:4b:6b:01:c6:77:2c:14:25:1d:a9: 8e:05:29:93:e9:e8:42:f2:8f:4d:11:fe:a2:a2:94: 5b:8e:a2:2b:92:30:c5:69:71:37:3b:f0:ea:7b:9a: c9:40:0a:2c:05:d0:79:4e:a1:4d:33:dc:49:0e:d0: 96:4a:2a:2b:75:e8:11:78:ce:51:5e:1f:21:fc:da: c0:1b:cc:ae:cb:51:03:e5:d7:44:75:90:e7:c6:c9: 4c:b0:d5:c2:88:3d:1a:f6:69:4e:b4:ee:f9:4c:1d: 1f:68:f2:1a:3e:f2:f2:6d:8c:67:03:ab:35:82:55: 10:80:f6:a3:ae:10:e1:f1:4f:f0:49:26:3f:de:86: 29:a4:3a:4d:11:61:d0:f2:a6:3b:e1:6a:34:f2:55: 68:da:f6:d5:a8:ca:14:c6:d9:f4:56:03:88:4d:ba: f4:22:8b:75:ea:f5:05:2a:fa:2f:a1:ff:38:6d:65: d2:da:1c:8d:8c:0e:47:00:60:a6:dd:2e:ed:19:55: 94:98:13:e1:f2:b5:3b:e9:30:07:e2:85:b0:4e:24: b6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8B:BF:B2:04:81:A9:5F:14:40:B4:1A:81:EB:C7:CD:6A:F8:15:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b7a88b1-235b-3663-aa7f-480422fbd2b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3d:5e:3e:65:54:ff:92:a6:8d:ac:8e:46:13:1e:cb:9e:4e: 6a:7e:9f:32:17:78:4e:fc:af:2b:22:97:a9:ae:71:5b:a1:c9: dd:39:7a:3c:ea:f6:fc:67:c6:6f:f4:40:57:1c:cc:15:29:8d: 52:f9:a7:20:c3:4f:d5:41:15:3c:7d:88:39:31:dd:40:4b:f9: 86:7a:fc:5c:2c:c8:1c:1f:39:6a:a6:8c:cc:bc:04:18:20:a3: 93:92:24:77:09:f7:ef:e8:74:22:bb:75:c1:86:1a:f7:67:15: 65:3f:46:2b:c9:18:49:5d:49:a5:fa:19:26:7a:9a:4d:cb:2f: 63:88:8b:31:9d:4b:40:13:d2:ba:ea:d0:b4:98:69:56:52:cf: f5:99:b8:11:7c:b7:96:20:f1:05:c9:5a:b5:e3:b8:49:d1:fb: c7:d0:60:7d:e6:39:60:23:85:8a:45:a0:c8:6e:a2:ed:ad:1b: c3:e8:cb:26:f2:81:9c:4d:23:85:3f:f6:95:19:29:f3:7e:61: eb:f1:46:eb:59:85:b0:94:74:7e:e2:c1:a4:fc:59:c9:b1:7c: cf:96:5b:29:27:d4:54:95:cf:28:db:43:2f:1c:53:77:b4:cf: 6e:30:27:a3:9c:aa:56:28:a4:36:23:c7:f8:f0:f1:59:39:3d: a0:fb:e7:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYhzYYLEtgb0FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmRiYzBlOWEtN2U4Zi00MmRlLWIwYWEtZTRmMzJkMjExMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61By76fz1SBKpTCxjC47+mj7fvzd5eCnH6Wi XkiDNHjGUZL23z+b/4O7kSKxgDMeuUtrAcZ3LBQlHamOBSmT6ehC8o9NEf6iopRb jqIrkjDFaXE3O/Dqe5rJQAosBdB5TqFNM9xJDtCWSiordegReM5RXh8h/NrAG8yu y1ED5ddEdZDnxslMsNXCiD0a9mlOtO75TB0faPIaPvLybYxnA6s1glUQgPajrhDh 8U/wSSY/3oYppDpNEWHQ8qY74Wo08lVo2vbVqMoUxtn0VgOITbr0Iot16vUFKvov of84bWXS2hyNjA5HAGCm3S7tGVWUmBPh8rU76TAH4oWwTiS2gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKLv7IEgalfFEC0GoHrx81q+BWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI3YTg4YjEtMjM1Yi0z NjYzLWFhN2YtNDgwNDIyZmJkMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG89Xj5lVP+Spo2sjkYTHsueTmp+nzIXeE78rysil6mucVuhyd05ejzq 9vxnxm/0QFcczBUpjVL5pyDDT9VBFTx9iDkx3UBL+YZ6/FwsyBwfOWqmjMy8BBgg o5OSJHcJ9+/odCK7dcGGGvdnFWU/RivJGEldSaX6GSZ6mk3LL2OIizGdS0AT0rrq 0LSYaVZSz/WZuBF8t5Yg8QXJWrXjuEnR+8fQYH3mOWAjhYpFoMhuou2tG8Poyyby gZxNI4U/9pUZKfN+YevxRutZhbCUdH7iwaT8WcmxfM+WWykn1FSVzyjbQy8cU3e0 z24wJ6OcqlYopDYjx/jw8Vk5PaD757Q= -----END CERTIFICATE-----Generated at Mon Oct 20 05:21:57 2025 by rpki-client