$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa File: 245c4e93-80b2-3747-ba45-f754ff2f763b.roa (raw, json) Hash identifier: IT1AoonNtHvEROxg+X4InVAwwjCSDjEJRs1KC8ZaIXY= Subject key identifier: 85:D3:F8:92:9A:DB:4C:92:C9:80:8B:96:E9:C4:DE:4B:8F:0D:F2:41 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD89DAC2BCF19B1E0DC238 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:89:da:c2:bc:f1:9b:1e:0d:c2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cdd1c3a2-5881-4bf8-a35d-a0c5780f4564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:9a:9c:bd:9f:5e:02:45:b3:1d:5b:8e:66: ed:1f:b1:79:88:09:a7:17:73:21:10:fe:10:be:66: a4:6d:0f:bd:4e:7b:30:12:e4:b7:17:0f:1a:3a:5a: 07:d9:61:d0:1a:45:5b:af:d2:19:27:e7:09:b8:9d: 37:17:08:ae:31:e3:5d:14:56:ed:c6:ac:1d:92:21: 97:bd:25:a8:b4:0b:06:5c:98:3a:ed:13:3d:ca:1c: 72:40:d5:ad:0f:bb:9f:e1:58:1f:45:c2:12:69:61: 8b:b8:ab:43:4d:30:39:53:c5:52:aa:64:83:4a:d7: 8d:ef:fa:fd:de:de:33:92:ca:a2:6c:48:a4:d8:1b: 2e:9b:b6:d9:df:c8:60:de:13:93:88:64:f6:92:b5: 00:fd:fa:e2:0d:6a:6b:f1:16:7e:64:63:58:40:13: 9d:45:03:a5:28:08:98:b3:a9:55:db:8d:4f:e2:5a: a4:01:10:54:be:0f:e9:d2:4f:1e:80:5d:0b:38:18: d9:fb:1d:bc:5f:f4:20:24:b6:38:95:1f:14:a0:00: 29:a2:d1:a5:72:b6:fa:20:a0:7e:48:79:a1:37:ac: 54:c5:e2:bc:be:2d:4e:a1:73:92:b7:c1:1a:07:d7: 64:83:2d:67:45:ed:44:9f:f0:af:c9:79:95:50:4a: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:F8:92:9A:DB:4C:92:C9:80:8B:96:E9:C4:DE:4B:8F:0D:F2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/245c4e93-80b2-3747-ba45-f754ff2f763b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:31:5f:9f:f7:4b:0d:ed:73:6d:17:80:b3:8b:19:1e:1a:f8: 55:42:43:08:eb:90:52:f8:32:8e:6f:4a:b0:af:10:35:73:70: 97:28:7c:7f:af:01:93:59:55:f0:0b:09:e5:46:cf:9c:c0:e0: 9d:5d:cf:28:af:63:f0:e6:20:c4:d6:f8:98:69:24:b8:42:90: 6b:69:a9:dd:67:c4:33:d5:53:99:7e:2f:b6:6c:b1:b1:f8:16: a7:6c:82:3d:eb:5e:68:84:44:b1:af:72:a1:fe:e1:8e:d9:b2: 15:12:fa:66:97:8f:51:1d:0c:d1:dd:7a:8a:01:5b:e6:18:27: e9:31:6c:a1:1f:00:77:d2:33:94:04:a7:6d:95:13:69:bb:31: 81:53:f2:de:75:a1:57:2c:84:30:a8:be:34:3e:e1:2b:54:17: d5:c3:f0:0f:e2:d4:45:31:fa:2f:e6:ae:4d:a8:f1:c3:b9:4b: 46:a5:a4:29:90:9f:f9:02:91:51:3b:93:c0:f9:fa:7a:68:12: 21:93:2d:e9:b7:ee:f1:c4:ae:f4:79:2a:a3:86:6a:33:d6:39: 22:4b:4e:ec:46:a1:94:44:b4:34:88:41:c1:f1:65:48:e7:05: 34:3c:e5:15:98:31:80:a3:49:28:37:0e:9d:ba:60:5f:9d:8f: 13:60:5a:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYnawrzxmx4NwjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2RkMWMzYTItNTg4MS00YmY4LWEzNWQtYTBjNTc4MGY0NTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1SanL2fXgJFsx1bjmbtH7F5iAmnF3MhEP4Q vmakbQ+9TnswEuS3Fw8aOloH2WHQGkVbr9IZJ+cJuJ03FwiuMeNdFFbtxqwdkiGX vSWotAsGXJg67RM9yhxyQNWtD7uf4VgfRcISaWGLuKtDTTA5U8VSqmSDSteN7/r9 3t4zksqibEik2Bsum7bZ38hg3hOTiGT2krUA/friDWpr8RZ+ZGNYQBOdRQOlKAiY s6lV241P4lqkARBUvg/p0k8egF0LOBjZ+x28X/QgJLY4lR8UoAApotGlcrb6IKB+ SHmhN6xUxeK8vi1OoXOSt8EaB9dkgy1nRe1En/CvyXmVUEoCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXT+JKa20ySyYCLlunE3kuPDfJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQ1YzRlOTMtODBiMi0z NzQ3LWJhNDUtZjc1NGZmMmY3NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcxX5/3Sw3tc20XgLOLGR4a+FVCQwjrkFL4Mo5vSrCvEDVzcJcofH+v AZNZVfALCeVGz5zA4J1dzyivY/DmIMTW+JhpJLhCkGtpqd1nxDPVU5l+L7ZssbH4 Fqdsgj3rXmiERLGvcqH+4Y7ZshUS+maXj1EdDNHdeooBW+YYJ+kxbKEfAHfSM5QE p22VE2m7MYFT8t51oVcshDCovjQ+4StUF9XD8A/i1EUx+i/mrk2o8cO5S0alpCmQ n/kCkVE7k8D5+npoEiGTLem37vHErvR5KqOGajPWOSJLTuxGoZREtDSIQcHxZUjn BTQ85RWYMYCjSSg3Dp26YF+djxNgWk8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:25 2025 by rpki-client