$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cb98666-f8a1-379d-ad9f-16fd6cb49380.roa File: 2cb98666-f8a1-379d-ad9f-16fd6cb49380.roa (raw, json) Hash identifier: M6CoT6aDOg7Uz0N8AhM07AhMLUhPPF3iKwYk9hOgofQ= Subject key identifier: AA:65:5A:61:95:45:94:3B:56:53:F1:8E:20:DA:D6:36:11:37:D9:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD98EC64091A8C021D1C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cb98666-f8a1-379d-ad9f-16fd6cb49380.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 75.104.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:98:ec:64:09:1a:8c:02:1d:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3a10cb63-f460-406f-8b0f-91f0377d9d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:a8:61:6f:85:f3:f8:b1:96:6c:c7:b9:a3: fc:ce:78:a9:1d:3d:37:e4:e4:8b:c9:30:f8:da:61: 6b:22:9c:c2:30:b2:47:60:39:74:d9:8f:4f:84:7c: 3c:1a:7d:66:d3:74:f5:65:e4:7d:c8:29:1d:9e:17: 94:a4:5b:a1:c5:ed:9d:3d:cb:da:ba:bf:9e:2b:60: e0:98:f1:81:7d:68:d1:88:f7:86:b9:23:54:6f:eb: 5e:98:3e:75:38:e8:86:e7:30:a8:0c:20:57:6f:3a: 93:85:cd:de:a0:c9:f6:1c:ce:e9:f0:93:94:69:5b: 97:bd:ee:7b:1c:41:ff:ff:72:e7:0a:5f:77:b1:97: ec:3d:03:23:74:9e:2b:f2:5b:f2:15:93:8b:fb:38: 4b:af:8c:11:49:6e:b6:96:31:a4:f1:21:e2:ee:a7: 31:bc:4b:97:da:3c:26:ea:4a:ee:84:37:89:09:61: b8:a5:9e:34:c5:d1:43:af:69:bc:80:09:df:d7:2c: ba:90:7c:95:11:f1:88:e1:cc:50:17:39:48:7a:49: 10:ef:19:e9:61:a4:8d:9d:f8:6a:ce:79:11:b4:1f: a9:3e:8f:52:ed:c4:c5:70:9b:d1:cb:20:3c:7a:a9: 3a:36:de:c3:1a:e0:48:85:3a:e9:1e:93:e5:94:98: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:65:5A:61:95:45:94:3B:56:53:F1:8E:20:DA:D6:36:11:37:D9:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cb98666-f8a1-379d-ad9f-16fd6cb49380.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:65:5f:a6:44:be:e9:78:5f:5d:cf:07:21:c5:f5:79:78:ab: 0a:de:77:b2:29:60:10:22:8e:05:c1:9a:47:a7:a3:00:61:69: 88:0c:19:ad:ec:2d:dc:a7:40:e4:87:3f:ff:7e:38:df:32:3e: 97:2d:31:7f:d3:ea:00:20:09:95:60:38:c1:47:1c:ad:1c:ab: 23:2c:15:e5:e5:92:f3:3e:be:d7:68:c5:92:76:72:b5:c4:5d: 55:42:3a:11:2e:51:82:e8:42:f4:92:7d:32:e4:0b:06:c8:1d: e6:82:82:9d:98:ac:8a:6c:68:4f:94:a6:81:8a:57:a2:af:1e: 79:1b:3b:a9:f2:c3:c1:e8:81:f0:51:a1:f4:21:90:9e:d4:90: 15:11:13:33:fb:32:44:68:e8:05:ef:70:de:19:ad:f7:11:fd: 35:7b:ef:d2:0f:cf:3f:b9:51:c4:57:1e:da:dc:42:1a:7f:56: ef:a1:2a:61:ae:cd:b8:dc:39:6d:a4:c6:ab:0f:3d:50:76:c3: 70:28:57:16:d6:a6:3c:27:ec:a3:ac:fe:2a:fa:1a:29:a3:22: 72:4a:a7:26:a9:38:f1:73:c6:54:96:1c:a9:c8:f6:da:24:c9: 59:74:21:ae:11:71:81:88:06:05:92:9a:a6:33:70:47:00:b3: fe:66:7e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZjsZAkajAIdHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2ExMGNiNjMtZjQ2MC00MDZmLThiMGYtOTFmMDM3N2Q5ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYuoYW+F8/ixlmzHuaP8znipHT035OSLyTD4 2mFrIpzCMLJHYDl02Y9PhHw8Gn1m03T1ZeR9yCkdnheUpFuhxe2dPcvaur+eK2Dg mPGBfWjRiPeGuSNUb+temD51OOiG5zCoDCBXbzqThc3eoMn2HM7p8JOUaVuXve57 HEH//3LnCl93sZfsPQMjdJ4r8lvyFZOL+zhLr4wRSW62ljGk8SHi7qcxvEuX2jwm 6kruhDeJCWG4pZ40xdFDr2m8gAnf1yy6kHyVEfGI4cxQFzlIekkQ7xnpYaSNnfhq znkRtB+pPo9S7cTFcJvRyyA8eqk6Nt7DGuBIhTrpHpPllJhaNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKplWmGVRZQ7VlPxjiDa1jYRN9kwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmNiOTg2NjYtZjhhMS0z NzlkLWFkOWYtMTZmZDZjYjQ5MzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNlX6ZEvul4X13PByHF9Xl4qwred7IpYBAijgXBmkenowBhaYgMGa3s LdynQOSHP/9+ON8yPpctMX/T6gAgCZVgOMFHHK0cqyMsFeXlkvM+vtdoxZJ2crXE XVVCOhEuUYLoQvSSfTLkCwbIHeaCgp2YrIpsaE+UpoGKV6KvHnkbO6nyw8HogfBR ofQhkJ7UkBUREzP7MkRo6AXvcN4ZrfcR/TV779IPzz+5UcRXHtrcQhp/Vu+hKmGu zbjcOW2kxqsPPVB2w3AoVxbWpjwn7KOs/ir6GimjInJKpyapOPFzxlSWHKnI9tok yVl0Ia4RcYGIBgWSmqYzcEcAs/5mft8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:44 2025 by rpki-client