$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa File: 3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa (raw, json) Hash identifier: jpCDJhMpe1ITiNIcTfey2iYcSy+3XtcGXufg0OG9qC0= Subject key identifier: 31:17:93:AC:EA:BE:CD:B8:BE:14:74:0A:82:28:19:69:BB:85:2A:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD88429B9AB13026305A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:88:42:9b:9a:b1:30:26:30:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=067f5940-4443-48a1-bdb0-79f360c717d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:cd:8d:e4:89:ce:c8:ed:1f:86:84:11:24: 03:66:64:55:0d:38:2f:31:4b:81:74:4a:47:3a:70: 2f:b8:52:1b:d3:40:38:6f:82:c2:c0:e5:6b:39:18: d7:29:8e:57:ac:10:e9:b6:85:14:c9:5d:a3:fa:38: 6a:d4:dc:c3:b2:44:e5:6e:7a:8f:24:79:b6:3f:ee: cc:89:ee:d6:90:9a:90:46:cf:b2:e1:b8:aa:ee:f5: a3:71:46:fc:10:5a:33:5d:e0:15:b6:97:d0:67:fc: ab:0f:35:ce:b5:c0:ac:8b:9c:9a:e1:56:c3:85:0a: e2:7f:40:93:3f:ce:4f:34:0e:68:3e:14:48:f7:ab: ad:c4:40:ff:ff:61:f9:5b:50:c8:5d:ad:0c:95:4d: 3b:41:44:1a:0a:37:03:02:f7:31:d0:1e:0b:79:ab: 2e:7a:de:00:d0:89:f5:00:34:9c:2b:bd:17:9d:13: 1e:83:d0:64:62:04:f8:0d:c8:ee:50:60:3d:03:e9: ab:bb:08:c9:96:2b:55:55:4c:6e:9d:f6:cf:82:cd: c2:9f:47:e8:9b:c3:10:19:bf:8f:9f:6d:ab:59:2e: a6:b0:65:88:c3:9d:bf:9a:b8:f3:6d:6c:db:cd:9f: 27:68:fb:8c:c9:e9:f3:d8:ad:6b:e4:94:76:b9:34: 83:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:17:93:AC:EA:BE:CD:B8:BE:14:74:0A:82:28:19:69:BB:85:2A:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:9e:d4:39:c2:b0:e8:d1:92:d3:e1:b5:f6:60:b8:53:62: 96:25:a8:1a:56:d7:f6:c4:35:a0:44:7d:6a:5f:e0:0b:70:65: be:6e:9d:39:9b:39:b6:fb:05:ea:a4:6c:20:90:e3:9d:dd:76: de:50:58:58:ce:9f:29:b6:29:aa:8d:84:1c:fa:59:53:29:1f: 5a:c3:2b:a0:34:2e:a7:90:d3:a1:4f:d5:73:3e:62:f7:94:27: 9c:db:d9:95:55:b4:10:3a:cc:10:01:47:ea:56:14:27:dc:cc: f9:7d:ad:4d:1d:d0:14:c6:b0:b9:32:ba:12:6d:20:b4:7b:fe: 7f:3a:c2:3e:64:be:b2:49:f8:7e:55:c5:e4:88:01:3a:0b:7f: ba:13:13:79:dd:ca:bf:c2:0c:89:0e:ac:cf:ca:5f:9f:89:57: 4c:a5:e9:1f:37:ba:42:51:6d:8c:2b:be:d7:84:00:e7:98:32: 9b:43:5e:9c:64:4d:74:e3:36:06:86:58:75:e3:f1:c6:5f:e8: e6:4b:93:e0:3e:b9:88:3d:7d:4c:90:ad:e6:e6:a5:32:ec:b2: d8:7b:4b:0e:a5:f9:ca:7d:b6:86:08:f1:2e:c2:dc:ae:fc:76: b9:c7:3b:ab:af:8d:14:a0:2e:ab:36:44:1a:c1:11:42:d9:00: 40:fa:3e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYhCm5qxMCYwWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDY3ZjU5NDAtNDQ0My00OGExLWJkYjAtNzlmMzYwYzcxN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicPNjeSJzsjtH4aEESQDZmRVDTgvMUuBdEpH OnAvuFIb00A4b4LCwOVrORjXKY5XrBDptoUUyV2j+jhq1NzDskTlbnqPJHm2P+7M ie7WkJqQRs+y4biq7vWjcUb8EFozXeAVtpfQZ/yrDzXOtcCsi5ya4VbDhQrif0CT P85PNA5oPhRI96utxED//2H5W1DIXa0MlU07QUQaCjcDAvcx0B4Leasuet4A0In1 ADScK70XnRMeg9BkYgT4DcjuUGA9A+mruwjJlitVVUxunfbPgs3Cn0fom8MQGb+P n22rWS6msGWIw52/mrjzbWzbzZ8naPuMyenz2K1r5JR2uTSDvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEXk6zqvs24vhR0CoIoGWm7hSpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YwZjg0ODUtMWRiYi0z Y2IxLWI0YzctNGQ3ZmQzOWM3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc9ntQ5wrDo0ZLT4bX2YLhTYpYlqBpW1/bENaBEfWpf4AtwZb5unTmb Obb7BeqkbCCQ453ddt5QWFjOnym2KaqNhBz6WVMpH1rDK6A0LqeQ06FP1XM+YveU J5zb2ZVVtBA6zBABR+pWFCfczPl9rU0d0BTGsLkyuhJtILR7/n86wj5kvrJJ+H5V xeSIAToLf7oTE3ndyr/CDIkOrM/KX5+JV0yl6R83ukJRbYwrvteEAOeYMptDXpxk TXTjNgaGWHXj8cZf6OZLk+A+uYg9fUyQrebmpTLssth7Sw6l+cp9toYI8S7C3K78 drnHO6uvjRSgLqs2RBrBEULZAED6Pg4= -----END CERTIFICATE-----Generated at Mon Oct 20 20:33:07 2025 by rpki-client