$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa File: 3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa (raw, json) Hash identifier: SttQYl0CiMQi9nfbDtwwoINYegp8itOe5Pl5cZUKQKs= Subject key identifier: 6E:46:1B:4C:5E:97:85:E5:C0:C1:BA:70:0F:1E:A3:9A:8B:C8:E5:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCCF3944DCEADA9542C100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:cf:39:44:dc:ea:da:95:42:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f504f1eb-6d3b-4b35-8544-bfd4189b2f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:f0:8f:51:d7:b3:64:b6:69:fb:7b:f0:67: 44:3f:f0:c6:4a:ad:18:45:ae:b5:2d:6c:69:bc:9b: b8:a7:82:0a:33:87:55:55:10:c6:8c:75:83:3b:e5: a0:94:b3:c0:3f:d0:ba:bf:f9:0a:92:99:e3:e0:b9: 10:99:f1:22:5b:d5:a7:34:31:ce:cc:b6:21:8f:f2: 54:86:a8:55:fc:87:02:5e:9b:0a:f1:09:b6:da:74: 25:80:56:5d:49:39:34:f4:a9:6f:d1:54:e6:e4:20: eb:fa:c5:fe:bc:48:8d:14:7d:63:cc:53:f4:4b:b1: f2:e7:e2:24:13:0e:73:59:b5:01:2d:21:8e:68:9a: 6f:72:7a:b3:a5:fb:f4:44:1c:f7:44:04:fc:4b:ee: c2:f9:02:77:31:e0:07:96:61:ab:84:4f:91:9b:b9: 41:d6:97:09:19:be:96:8b:9d:7c:ad:d1:d6:64:dd: 1b:e0:6a:8c:fe:7c:84:ed:ff:ec:46:27:ef:19:98: bc:9f:fa:de:3d:5a:3a:f4:29:c1:43:69:ee:8c:69: 21:62:27:3f:d6:22:64:ba:7d:7c:2f:7f:8f:84:fc: 6c:7e:08:7b:5d:b1:77:70:70:c2:7b:e1:a1:49:9f: e2:ec:5a:92:32:ce:80:18:9e:8f:de:46:bd:90:31: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:1B:4C:5E:97:85:E5:C0:C1:BA:70:0F:1E:A3:9A:8B:C8:E5:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3aac6ddf-25bc-3471-95d4-ced84ad90e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b5:ed:78:6d:23:3d:71:eb:36:95:69:1f:51:4b:b9:a8:f5: 25:d2:21:9c:a9:3f:04:9f:3e:af:dd:e0:e9:70:96:5e:15:f6: ca:86:16:e7:c7:33:af:53:09:8d:2d:ce:e4:d1:8b:a3:c7:a0: 29:83:fa:29:91:2a:79:9d:1e:76:10:80:83:ae:5c:37:d9:df: 86:aa:0b:3a:7a:2a:47:d7:f1:26:af:b3:38:3f:40:94:eb:2d: 90:5f:9d:df:38:c4:45:ad:65:d1:70:3e:a9:b4:17:e1:57:58: 69:e6:90:05:c0:24:2f:9e:a8:c1:4a:cc:d5:6d:19:d2:6f:78: a7:33:5e:b2:f4:6f:ac:c4:89:a4:91:3b:55:b5:49:18:9d:b5: 6d:2e:bc:bf:f2:2c:05:b5:3c:c6:28:c3:fc:1f:a1:a9:95:aa: ae:10:ae:92:60:8d:46:1d:77:e4:83:21:28:c7:47:8f:86:1e: 5a:f4:cd:23:c6:3c:c8:2d:e0:31:69:d1:1d:65:af:4c:d4:c9: a3:58:6c:7f:ed:5a:c1:b4:71:dd:29:9c:36:0a:6f:f3:5b:eb: 58:11:9e:6c:a4:78:83:7b:78:68:e7:f7:a0:1d:20:99:e8:45: 64:cd:f1:7b:cc:ff:17:e3:38:ef:a3:d4:9b:21:82:5c:c6:bc: 3f:13:bd:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzM85RNzq2pVCwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjUwNGYxZWItNmQzYi00YjM1LTg1NDQtYmZkNDE4OWIyZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2/wj1HXs2S2aft78GdEP/DGSq0YRa61LWxp vJu4p4IKM4dVVRDGjHWDO+WglLPAP9C6v/kKkpnj4LkQmfEiW9WnNDHOzLYhj/JU hqhV/IcCXpsK8Qm22nQlgFZdSTk09Klv0VTm5CDr+sX+vEiNFH1jzFP0S7Hy5+Ik Ew5zWbUBLSGOaJpvcnqzpfv0RBz3RAT8S+7C+QJ3MeAHlmGrhE+Rm7lB1pcJGb6W i518rdHWZN0b4GqM/nyE7f/sRifvGZi8n/rePVo69CnBQ2nujGkhYic/1iJkun18 L3+PhPxsfgh7XbF3cHDCe+GhSZ/i7FqSMs6AGJ6P3ka9kDF9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5GG0xel4XlwMG6cA8eo5qLyOU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FhYzZkZGYtMjViYy0z NDcxLTk1ZDQtY2VkODRhZDkwZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW17XhtIz1x6zaVaR9RS7mo9SXSIZypPwSfPq/d4Olwll4V9sqGFufH M69TCY0tzuTRi6PHoCmD+imRKnmdHnYQgIOuXDfZ34aqCzp6KkfX8Savszg/QJTr LZBfnd84xEWtZdFwPqm0F+FXWGnmkAXAJC+eqMFKzNVtGdJveKczXrL0b6zEiaSR O1W1SRidtW0uvL/yLAW1PMYow/wfoamVqq4QrpJgjUYdd+SDISjHR4+GHlr0zSPG PMgt4DFp0R1lr0zUyaNYbH/tWsG0cd0pnDYKb/Nb61gRnmykeIN7eGjn96AdIJno RWTN8XvM/xfjOO+j1JshglzGvD8Tveg= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:15 2025 by rpki-client