$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa File: 658111e8-f53f-36d8-aae4-50c258e0a34e.roa (raw, json) Hash identifier: yxfM29eHjNWwb/H0LlJQ3TeLGThYVt0L5Mw7uxmG0gE= Subject key identifier: 2B:37:E9:B2:2F:A0:35:85:DA:0E:0D:BD:B6:3A:83:80:AF:D3:33:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD81C251210D685295D4A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:81:c2:51:21:0d:68:52:95:d4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=76ada1fa-97b7-4e36-b5fe-b7209f43fb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:fa:01:54:0c:06:74:81:4c:fc:51:a6:ba: 06:66:a9:fe:e2:3f:c0:28:e5:45:2f:cf:53:32:1d: f6:41:71:39:f6:9c:7a:bc:20:35:4d:ee:5b:e4:08: b6:9d:23:b7:4b:35:f5:6a:4e:a6:db:be:6c:ce:7b: 4b:10:48:0e:64:f6:55:f9:95:d3:e3:bb:99:2a:d0: a1:e7:0e:74:d6:79:15:e4:1d:13:a6:ac:b3:28:9c: 14:7a:be:ae:e8:a7:7d:fc:8f:aa:2c:f7:0c:8e:a3: c5:66:52:ec:6a:45:9a:c5:9d:42:89:7b:7d:a8:2c: 9c:f8:d0:6b:fb:0e:20:80:98:f5:65:44:8d:7b:de: 6e:56:c2:da:b9:2c:05:03:ee:79:2a:0f:8d:ef:66: d6:b6:02:fa:79:fb:66:95:1b:f0:ff:2e:6a:71:b8: 69:1c:76:79:16:75:5c:a4:00:57:fc:c8:bb:1a:92: e4:98:4e:d0:fd:a6:87:71:b5:4b:35:61:b9:e7:7d: f7:7d:2c:e6:e5:8c:cd:fd:3a:73:7c:a7:ed:8d:9a: c9:6b:70:8f:a9:92:ed:07:db:14:c8:16:21:99:45: 9a:bb:ef:f2:91:09:33:b6:7a:76:5d:cf:41:85:e6: de:24:42:03:8f:50:d1:49:22:31:1e:9e:ea:f6:9e: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:E9:B2:2F:A0:35:85:DA:0E:0D:BD:B6:3A:83:80:AF:D3:33:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/658111e8-f53f-36d8-aae4-50c258e0a34e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b7:c6:91:8d:6c:03:58:ed:a9:72:6f:24:96:7d:b9:5e:0e: 56:83:9e:f9:91:c7:d7:7c:1d:fd:17:f6:99:a5:5e:9f:4c:70: cb:ba:bc:e5:0c:e6:5d:09:77:ee:49:c0:37:9f:4f:b1:c3:d8: 60:22:4d:71:ed:75:2e:2c:30:cd:f7:08:15:33:0b:d3:57:09: 1a:3a:05:dc:f1:ec:31:ff:00:a6:8f:a7:0e:81:84:3e:28:76: 33:3a:ed:82:ea:0d:dd:4e:a5:d3:b6:d0:5a:df:84:1c:51:89: 03:21:e0:d8:0b:1c:5f:72:39:b7:41:b4:7e:14:f5:b8:92:f3: 67:e9:5d:89:67:aa:18:13:b0:84:df:ca:65:d7:df:99:2b:84: 2c:18:16:32:59:0e:62:47:9f:18:75:e4:55:d6:39:5f:ba:61: 1d:02:61:11:38:c4:56:4b:0f:41:90:b8:f8:0c:69:2f:1c:c7: 68:48:5e:52:71:47:1a:25:0b:2f:57:9d:f6:df:b1:0d:7f:06: 01:f7:ef:7a:c9:6b:05:e8:70:dc:44:5f:33:7b:ae:34:78:25: 2a:fe:f3:8d:e5:f8:e6:d2:99:3d:44:31:e3:10:49:ce:41:38: 3f:75:db:c4:f4:b6:56:f9:07:f0:99:2e:21:bd:ec:51:f5:30: 96:6e:fd:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYHCUSENaFKV1KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzZhZGExZmEtOTdiNy00ZTM2LWI1ZmUtYjcyMDlmNDNmYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG76AVQMBnSBTPxRproGZqn+4j/AKOVFL89T Mh32QXE59px6vCA1Te5b5Ai2nSO3SzX1ak6m275szntLEEgOZPZV+ZXT47uZKtCh 5w501nkV5B0TpqyzKJwUer6u6Kd9/I+qLPcMjqPFZlLsakWaxZ1CiXt9qCyc+NBr +w4ggJj1ZUSNe95uVsLauSwFA+55Kg+N72bWtgL6eftmlRvw/y5qcbhpHHZ5FnVc pABX/Mi7GpLkmE7Q/aaHcbVLNWG55333fSzm5YzN/TpzfKftjZrJa3CPqZLtB9sU yBYhmUWau+/ykQkztnp2Xc9BhebeJEIDj1DRSSIxHp7q9p6JpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs36bIvoDWF2g4NvbY6g4Cv0zMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjU4MTExZTgtZjUzZi0z NmQ4LWFhZTQtNTBjMjU4ZTBhMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADS3xpGNbANY7alybySWfbleDlaDnvmRx9d8Hf0X9pmlXp9McMu6vOUM 5l0Jd+5JwDefT7HD2GAiTXHtdS4sMM33CBUzC9NXCRo6Bdzx7DH/AKaPpw6BhD4o djM67YLqDd1OpdO20FrfhBxRiQMh4NgLHF9yObdBtH4U9biS82fpXYlnqhgTsITf ymXX35krhCwYFjJZDmJHnxh15FXWOV+6YR0CYRE4xFZLD0GQuPgMaS8cx2hIXlJx RxolCy9XnfbfsQ1/BgH373rJawXocNxEXzN7rjR4JSr+843l+ObSmT1EMeMQSc5B OD9128T0tlb5B/CZLiG97FH1MJZu/e4= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:26 2025 by rpki-client