$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa File: 1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa (raw, json) Hash identifier: agi9bB5hd0A2wmHrJghZThylnnY8rg5GvlBj7CR7l/c= Subject key identifier: 7E:EC:47:98:16:19:CF:72:0D:6D:46:89:57:51:C8:7B:F1:35:3C:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD0118C71D6930C989940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d0:11:8c:71:d6:93:0c:98:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=14941da7-197e-4ce1-9318-3134ca30cb7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:52:78:f8:7e:4b:52:c8:21:0f:64:fa:9a:ff: 8a:a8:9c:88:3b:66:30:cd:92:ac:03:4d:10:50:2c: 9c:83:ba:48:bf:a8:cb:7c:c2:37:08:85:22:b0:36: df:62:65:e1:d7:3c:4c:87:7e:b7:24:54:a1:00:54: 93:33:62:1e:70:76:d3:d0:41:90:ba:6a:7e:dc:d1: 18:a8:20:2d:5d:4e:7e:b3:b2:32:63:81:fd:89:5b: 86:f4:29:be:4f:74:81:1f:94:96:b6:75:63:d6:14: bd:d3:c4:49:cb:ae:e3:9d:2a:34:13:f8:0d:03:e5: 0f:27:bd:85:aa:1e:06:0e:47:22:a1:22:93:66:f0: 9d:88:bd:eb:23:a1:96:8c:14:45:4a:e9:e2:01:84: 22:f4:f3:b3:6d:5a:4a:2d:e1:74:bb:ca:af:ad:cb: 64:cd:d3:fc:90:0e:44:42:61:61:6f:91:3f:01:c0: 9b:05:28:2b:61:e4:9b:1c:ad:0d:24:b6:28:cc:e3: 7f:d9:48:fc:9e:e3:9f:06:f8:8c:66:e1:e6:84:9d: 13:a7:80:4e:52:6f:26:83:b2:88:a5:12:dc:53:91: c2:ee:2f:2c:e4:ce:d3:e1:03:f0:37:f7:41:ae:92: 16:22:a3:cd:c4:14:5f:d6:27:f8:d4:e4:2b:3d:1b: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EC:47:98:16:19:CF:72:0D:6D:46:89:57:51:C8:7B:F1:35:3C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f4c1b2e-ddbf-353c-98e1-715cbe69e029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:14:4d:7f:a9:c8:82:cf:1b:e0:0e:47:f5:3d:2b:b3:b5:fd: be:6c:4b:1a:54:d7:ff:13:e5:a3:fd:bb:a5:7c:a1:1c:e9:85: 5e:53:55:4c:11:55:f8:84:27:a6:48:0b:f2:fb:06:70:c3:f2: bf:b7:a8:40:a0:8f:f2:50:5a:3f:15:b4:84:86:26:a3:78:19: d7:80:be:be:86:b9:7b:c4:68:41:8f:3a:cf:e1:89:f9:20:39: 3c:cb:d0:fc:82:21:c7:43:68:03:fa:3a:14:78:bb:04:09:c1: 1a:19:00:6d:e9:d3:24:a6:84:14:5b:71:c7:39:e6:f2:b0:49: bc:61:f8:64:0a:0e:88:c8:74:45:06:db:20:de:56:c2:da:5d: 04:dc:6a:b1:e0:e9:8d:10:4a:72:44:09:9a:75:92:6b:c6:90: 24:0b:89:99:a6:01:e8:5f:27:d3:5e:89:4b:ec:9d:a9:c8:3a: f8:3b:06:73:a6:17:d3:11:b0:c9:90:86:6b:9a:f6:3a:da:9c: 5e:62:38:76:f5:84:58:37:2d:5f:e9:88:83:de:3e:03:fc:05: 1b:9e:f1:df:15:4f:bf:60:92:26:ff:39:3f:06:6c:51:29:98: 46:98:a2:f0:02:dc:75:49:f0:25:de:ce:a9:72:da:4f:40:e0: 4e:f8:12:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNARjHHWkwyYmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTQ5NDFkYTctMTk3ZS00Y2UxLTkzMTgtMzEzNGNhMzBjYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFJ4+H5LUsghD2T6mv+KqJyIO2YwzZKsA00Q UCycg7pIv6jLfMI3CIUisDbfYmXh1zxMh363JFShAFSTM2IecHbT0EGQump+3NEY qCAtXU5+s7IyY4H9iVuG9Cm+T3SBH5SWtnVj1hS908RJy67jnSo0E/gNA+UPJ72F qh4GDkcioSKTZvCdiL3rI6GWjBRFSuniAYQi9POzbVpKLeF0u8qvrctkzdP8kA5E QmFhb5E/AcCbBSgrYeSbHK0NJLYozON/2Uj8nuOfBviMZuHmhJ0Tp4BOUm8mg7KI pRLcU5HC7i8s5M7T4QPwN/dBrpIWIqPNxBRf1if41OQrPRtYlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7sR5gWGc9yDW1GiVdRyHvxNTz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWY0YzFiMmUtZGRiZi0z NTNjLTk4ZTEtNzE1Y2JlNjllMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMUTX+pyILPG+AOR/U9K7O1/b5sSxpU1/8T5aP9u6V8oRzphV5TVUwR VfiEJ6ZIC/L7BnDD8r+3qECgj/JQWj8VtISGJqN4GdeAvr6GuXvEaEGPOs/hifkg OTzL0PyCIcdDaAP6OhR4uwQJwRoZAG3p0ySmhBRbccc55vKwSbxh+GQKDojIdEUG 2yDeVsLaXQTcarHg6Y0QSnJECZp1kmvGkCQLiZmmAehfJ9NeiUvsnanIOvg7BnOm F9MRsMmQhmua9jranF5iOHb1hFg3LV/piIPePgP8BRue8d8VT79gkib/OT8GbFEp mEaYovAC3HVJ8CXezqly2k9A4E74Eos= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:37 2025 by rpki-client