$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa File: 17beaaac-e961-30e1-89fd-dc056e3b1d78.roa (raw, json) Hash identifier: ChvTCWP5g9mkQwFvoeCzWOd8AaZJOEoSF9CGHSnn5Ak= Subject key identifier: 67:B9:FF:8B:C0:5C:71:37:22:59:66:7C:B3:4B:8A:E5:8D:04:6F:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD85D891DA8250F6AFC290 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:85:d8:91:da:82:50:f6:af:c2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=39b4b6a1-0761-4ed8-b497-7637745b202d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:20:b4:38:77:db:f9:f0:23:95:25:97:f4:bc: 9a:e9:ee:89:6f:f9:4e:63:fa:94:9e:5d:49:fd:e1: 85:af:b4:fb:db:f7:bf:2c:e8:3d:37:41:33:fc:4a: 4a:d9:56:46:73:8b:48:18:12:f5:03:ea:89:01:d0: 0f:96:ed:91:2a:99:d6:d3:be:18:2c:76:c5:0b:3a: c8:5c:05:a8:09:24:14:db:83:c9:23:d2:32:f4:6e: be:23:4f:8f:12:d6:33:17:4b:ee:fe:8f:86:d7:68: 5c:a7:fd:f6:93:b1:75:7b:ef:3b:b6:29:40:f0:91: 49:66:8b:ee:36:3b:bf:ce:c4:ba:ac:56:a9:f0:55: a5:58:03:c6:af:cf:b5:f4:ba:ba:41:5d:ad:65:ad: ae:d8:cc:98:91:2f:f7:d0:3a:d0:39:7a:9f:4d:c2: bf:8c:3a:31:5b:f3:c1:2f:23:df:43:28:cd:c9:da: a4:af:a7:79:3a:f1:59:ee:d7:ca:23:ba:7b:eb:d6: 9c:1c:12:7d:40:0f:48:de:ba:5b:23:f0:9a:2d:c7: e9:af:92:1f:2e:f3:6f:48:03:50:9c:8c:e8:0a:aa: 2d:23:7b:47:ab:ac:6f:ad:e1:c6:34:63:21:b7:bc: d0:54:4d:cf:84:0b:bc:86:4f:19:34:87:5b:2f:ff: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B9:FF:8B:C0:5C:71:37:22:59:66:7C:B3:4B:8A:E5:8D:04:6F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17beaaac-e961-30e1-89fd-dc056e3b1d78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0a:81:12:2f:71:fc:12:77:a4:0a:c1:aa:ab:50:64:26:fe: 60:63:b4:bb:4c:c3:70:69:66:e0:0a:75:b3:fc:40:6c:a5:d6: b0:54:c9:c5:fe:62:2e:53:5a:15:2a:b3:f7:c9:27:af:d3:2a: 54:e5:a1:8a:a8:84:2f:f6:88:81:1b:8b:25:05:78:2b:7b:b1: 7d:f2:53:99:be:b8:ee:92:d5:b4:38:93:6d:5f:fa:f0:f3:4c: 29:5c:35:0c:da:11:52:9d:c0:86:6d:88:94:54:3a:0d:06:05: 8c:e8:5e:67:a1:f5:01:33:91:9e:39:ae:96:4a:39:07:ce:96: 0e:5e:99:72:66:04:60:5d:5f:b1:9a:d6:38:9f:e1:66:42:77: 1d:21:60:3a:ab:f4:25:a4:a6:b1:a6:c1:2a:ad:d2:2e:da:bb: c8:b1:0b:06:f6:73:67:fc:7d:6b:ee:07:1c:55:2a:aa:2b:55: 39:2e:17:3f:50:6d:61:7c:75:07:39:52:9c:bb:9a:96:fc:23: 53:ce:42:70:99:08:23:22:86:c2:32:0c:5a:f6:3b:fa:77:6d: ff:d4:ea:42:f1:f0:70:57:e4:73:b8:cf:7f:57:7a:d8:83:d5: 62:29:f8:e2:ba:b9:bd:ce:a7:54:61:75:11:01:49:b9:72:dd: 49:bb:93:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYXYkdqCUPavwpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzliNGI2YTEtMDc2MS00ZWQ4LWI0OTctNzYzNzc0NWIyMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyC0OHfb+fAjlSWX9Lya6e6Jb/lOY/qUnl1J /eGFr7T72/e/LOg9N0Ez/EpK2VZGc4tIGBL1A+qJAdAPlu2RKpnW074YLHbFCzrI XAWoCSQU24PJI9Iy9G6+I0+PEtYzF0vu/o+G12hcp/32k7F1e+87tilA8JFJZovu Nju/zsS6rFap8FWlWAPGr8+19Lq6QV2tZa2u2MyYkS/30DrQOXqfTcK/jDoxW/PB LyPfQyjNydqkr6d5OvFZ7tfKI7p769acHBJ9QA9I3rpbI/CaLcfpr5IfLvNvSANQ nIzoCqotI3tHq6xvreHGNGMht7zQVE3PhAu8hk8ZNIdbL/999wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe5/4vAXHE3IllmfLNLiuWNBG8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdiZWFhYWMtZTk2MS0z MGUxLTg5ZmQtZGMwNTZlM2IxZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALIKgRIvcfwSd6QKwaqrUGQm/mBjtLtMw3BpZuAKdbP8QGyl1rBUycX+ Yi5TWhUqs/fJJ6/TKlTloYqohC/2iIEbiyUFeCt7sX3yU5m+uO6S1bQ4k21f+vDz TClcNQzaEVKdwIZtiJRUOg0GBYzoXmeh9QEzkZ45rpZKOQfOlg5emXJmBGBdX7Ga 1jif4WZCdx0hYDqr9CWkprGmwSqt0i7au8ixCwb2c2f8fWvuBxxVKqorVTkuFz9Q bWF8dQc5Upy7mpb8I1POQnCZCCMihsIyDFr2O/p3bf/U6kLx8HBX5HO4z39XetiD 1WIp+OK6ub3Op1RhdREBSbly3Um7k2k= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:52 2025 by rpki-client