$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa File: 591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa (raw, json) Hash identifier: zKlNod0ChJ9eSnNiZzyEaX2406FnhymMupVhoIo5OWE= Subject key identifier: E2:8D:7B:8D:63:2F:89:D1:78:96:31:31:B6:C5:87:F4:41:B7:00:EA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8745FAB0AC972A24DC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:87:45:fa:b0:ac:97:2a:24:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=73d0eedf-ce7f-4672-af2e-4f0f18c2194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:db:75:5e:9a:be:5a:82:d3:37:02:0c:e5:8b: c7:2b:7a:3e:dc:a4:05:2f:98:ad:2c:de:ef:61:d7: c1:1f:a8:6c:49:bb:24:e5:87:66:35:20:0d:d1:b2: b5:66:36:c6:1c:43:4b:de:23:c1:22:dd:c7:b6:a0: e3:bd:f0:54:8d:dd:6d:f9:08:d1:84:90:e0:eb:29: f3:55:8d:f0:10:f4:ad:6b:26:5f:c0:b0:1a:14:40: b1:49:87:8a:c9:24:c6:f4:2f:ae:0a:ab:4e:c7:91: 62:5b:c1:aa:39:58:4d:fc:28:cb:98:2a:7d:d5:c1: 79:0d:6e:94:8b:c6:56:e0:a2:c1:9e:e1:a7:ea:11: 0c:88:28:7d:e9:5a:08:6a:ad:9a:d8:26:1c:89:5a: b3:a2:d1:a1:ab:2e:0d:4f:df:85:22:33:ec:87:83: 0d:53:84:bc:1e:ab:bc:2f:dc:ec:e0:e3:62:96:bf: 03:3c:0e:38:0c:3f:a1:b2:cb:84:dd:ad:69:7f:d1: bb:59:53:56:c2:a8:bc:92:7e:00:35:7e:5e:41:e4: 3c:3c:a2:9a:c1:ce:ce:b6:9c:1c:64:9a:fe:8e:af: c7:90:e3:9e:fa:5d:4a:f8:7d:66:27:85:4d:78:f2: 6a:8f:5f:1c:b3:2f:3e:27:bd:01:e1:f1:09:b8:e2: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8D:7B:8D:63:2F:89:D1:78:96:31:31:B6:C5:87:F4:41:B7:00:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/591ae5de-c246-3f60-a2e9-6c7bf6e11477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e8:6f:44:4e:17:ac:cc:52:67:c6:47:63:09:bd:c7:b7:89: ed:8a:2d:09:9c:df:30:ca:a1:57:18:37:58:33:49:76:77:5a: 40:6f:40:9c:d6:73:40:77:ef:1a:55:67:d6:21:d4:4d:d1:99: 1f:28:54:55:43:6d:d2:4e:2f:af:fa:6b:c6:f8:65:6c:10:10: 81:3b:02:2e:c2:0e:97:3d:22:3e:7a:81:96:5f:ca:8e:5c:f1: b9:0a:bc:e2:ed:7a:1b:ce:07:02:a5:4e:be:ce:81:d9:55:15: eb:50:3a:7c:e1:49:4f:f1:45:44:01:0c:ca:16:1c:74:48:b9: 10:0e:30:e3:b0:98:ba:40:85:df:61:74:f2:50:fb:11:a5:58: 17:86:98:1d:12:cd:38:f0:e3:bb:4d:31:11:0f:4a:2e:5c:e6: 43:82:39:ea:5f:57:fb:7e:1e:95:6a:c3:dd:57:9f:f2:99:9b: e4:01:a3:56:06:57:22:ed:08:01:8a:ae:18:55:12:5f:e3:f1: 23:2a:31:e2:00:c4:77:52:16:2f:25:ff:b3:4f:a1:c5:42:70: 61:54:37:74:6d:90:25:95:83:8d:7f:9b:8a:1c:2f:8f:15:c1: 78:3d:64:61:86:14:7a:86:d4:25:6c:9c:0f:18:1b:a5:cf:da: 54:ad:50:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYdF+rCslyok3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzNkMGVlZGYtY2U3Zi00NjcyLWFmMmUtNGYwZjE4YzIxOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39t1Xpq+WoLTNwIM5YvHK3o+3KQFL5itLN7v YdfBH6hsSbsk5YdmNSAN0bK1ZjbGHENL3iPBIt3HtqDjvfBUjd1t+QjRhJDg6ynz VY3wEPStayZfwLAaFECxSYeKySTG9C+uCqtOx5FiW8GqOVhN/CjLmCp91cF5DW6U i8ZW4KLBnuGn6hEMiCh96VoIaq2a2CYciVqzotGhqy4NT9+FIjPsh4MNU4S8Hqu8 L9zs4ONilr8DPA44DD+hssuE3a1pf9G7WVNWwqi8kn4ANX5eQeQ8PKKawc7Otpwc ZJr+jq/HkOOe+l1K+H1mJ4VNePJqj18csy8+J70B4fEJuOLNOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKNe41jL4nReJYxMbbFh/RBtwDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTkxYWU1ZGUtYzI0Ni0z ZjYwLWEyZTktNmM3YmY2ZTExNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnob0ROF6zMUmfGR2MJvce3ie2KLQmc3zDKoVcYN1gzSXZ3WkBvQJzW c0B37xpVZ9Yh1E3RmR8oVFVDbdJOL6/6a8b4ZWwQEIE7Ai7CDpc9Ij56gZZfyo5c 8bkKvOLtehvOBwKlTr7OgdlVFetQOnzhSU/xRUQBDMoWHHRIuRAOMOOwmLpAhd9h dPJQ+xGlWBeGmB0SzTjw47tNMREPSi5c5kOCOepfV/t+HpVqw91Xn/KZm+QBo1YG VyLtCAGKrhhVEl/j8SMqMeIAxHdSFi8l/7NPocVCcGFUN3RtkCWVg41/m4ocL48V wXg9ZGGGFHqG1CVsnA8YG6XP2lStUEM= -----END CERTIFICATE-----Generated at Mon Oct 20 00:06:07 2025 by rpki-client