$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/824dda80-9290-32fb-8986-75ba5cac6d68.roa File: 824dda80-9290-32fb-8986-75ba5cac6d68.roa (raw, json) Hash identifier: 0Sg0zX7KGUIxXXUVBykkPcu9MdHv9su0Edq6DMLEIxk= Subject key identifier: 01:C5:06:87:80:BD:55:62:B7:E5:C0:71:23:C3:D8:F9:5E:56:77:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD85CA7C1341413B4C3D40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/824dda80-9290-32fb-8986-75ba5cac6d68.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:85:ca:7c:13:41:41:3b:4c:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2ce4cdcc-3de8-45c2-86f5-a9518d7d6532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b6:45:18:a1:aa:97:e8:e9:96:cd:6d:65:a7: e3:79:27:34:35:61:04:cc:d7:76:ed:93:8f:3d:11: b7:58:aa:32:53:20:a9:7d:24:16:2f:bf:3b:14:52: 9d:e9:61:e1:a2:aa:50:d1:36:2d:cb:0d:30:49:18: 0d:b7:1e:8c:a5:9d:52:a0:41:d7:ca:57:36:ad:ea: 65:5e:b3:90:bd:bc:c1:76:da:5a:a8:92:8e:5a:fc: 2a:a5:8d:74:d1:30:21:35:e0:2c:8e:10:52:c1:d0: b8:62:e2:32:e6:9c:41:43:ab:b0:82:6c:48:38:5e: 20:31:1f:09:d4:5b:8d:10:4e:42:5e:e1:d5:13:b8: 55:bc:9d:0e:d1:0f:0b:d6:ef:8c:78:22:42:3f:4d: 1a:fc:99:68:dd:17:93:32:59:02:05:04:f8:62:82: 68:13:b0:d9:78:92:22:f7:ad:70:d0:ee:46:67:42: cb:09:24:a7:41:41:e4:a2:f9:b4:8d:bd:c0:90:63: c0:6e:81:eb:00:8f:43:f5:65:93:4f:07:3c:2b:28: 15:b0:5f:06:24:ef:3b:0a:77:62:1f:53:9f:94:47: 2a:39:69:c2:15:22:8e:f9:06:d3:82:97:f5:f8:83: db:e8:a6:2e:c7:d5:59:5d:96:4e:d4:98:af:17:cf: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C5:06:87:80:BD:55:62:B7:E5:C0:71:23:C3:D8:F9:5E:56:77:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/824dda80-9290-32fb-8986-75ba5cac6d68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:2e:b4:95:98:81:17:5f:91:d4:62:28:34:74:64:fe:bc:7f: e9:f6:5a:fb:55:c9:07:8b:82:15:eb:27:bd:6b:3a:46:f6:52: 46:3f:32:72:d9:17:f9:5f:19:c8:73:13:96:51:bf:65:28:1b: 4a:e2:d0:4a:b5:71:8d:ca:c4:e5:cc:31:81:37:a0:0c:bc:f6: 57:47:3a:53:ff:dd:ec:e2:15:15:62:d3:9f:a8:f1:14:d9:b3: 8c:21:5c:b8:6b:0c:b0:0d:cf:c0:0c:6d:f5:47:4f:71:e2:d1: 6e:04:e5:80:6a:29:28:fc:de:4e:9a:3d:e6:24:b0:b6:f7:f4: 93:7e:3d:39:2a:61:5d:cf:93:ec:1b:4b:fb:a2:a4:5a:07:0f: 58:64:7c:27:06:bf:17:40:88:74:e6:9f:83:32:7f:33:7b:c5: f5:6d:27:69:34:cd:69:14:11:81:e3:93:b1:00:0a:35:c5:c8: c6:6b:22:f8:7c:de:27:77:5c:e8:63:13:0f:5f:d1:70:1f:eb: ca:15:10:f5:92:68:5e:90:94:8c:f4:55:ff:dd:4b:b7:52:2b: 0c:04:41:39:10:3e:af:3a:e4:2e:07:a8:ee:22:b8:28:2b:88: 7c:f6:b8:4b:6d:a6:a7:de:67:ad:e4:99:5f:cc:44:97:d6:25: e2:c2:95:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYXKfBNBQTtMPUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmNlNGNkY2MtM2RlOC00NWMyLTg2ZjUtYTk1MThkN2Q2NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrZFGKGql+jpls1tZafjeSc0NWEEzNd27ZOP PRG3WKoyUyCpfSQWL787FFKd6WHhoqpQ0TYtyw0wSRgNtx6MpZ1SoEHXylc2repl XrOQvbzBdtpaqJKOWvwqpY100TAhNeAsjhBSwdC4YuIy5pxBQ6uwgmxIOF4gMR8J 1FuNEE5CXuHVE7hVvJ0O0Q8L1u+MeCJCP00a/Jlo3ReTMlkCBQT4YoJoE7DZeJIi 961w0O5GZ0LLCSSnQUHkovm0jb3AkGPAboHrAI9D9WWTTwc8KygVsF8GJO87Cndi H1OflEcqOWnCFSKO+QbTgpf1+IPb6KYux9VZXZZO1JivF885PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHFBoeAvVVit+XAcSPD2PleVndLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODI0ZGRhODAtOTI5MC0z MmZiLTg5ODYtNzViYTVjYWM2ZDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQutJWYgRdfkdRiKDR0ZP68f+n2WvtVyQeLghXrJ71rOkb2UkY/MnLZ F/lfGchzE5ZRv2UoG0ri0Eq1cY3KxOXMMYE3oAy89ldHOlP/3eziFRVi05+o8RTZ s4whXLhrDLANz8AMbfVHT3Hi0W4E5YBqKSj83k6aPeYksLb39JN+PTkqYV3Pk+wb S/uipFoHD1hkfCcGvxdAiHTmn4MyfzN7xfVtJ2k0zWkUEYHjk7EACjXFyMZrIvh8 3id3XOhjEw9f0XAf68oVEPWSaF6QlIz0Vf/dS7dSKwwEQTkQPq865C4HqO4iuCgr iHz2uEttpqfeZ63kmV/MRJfWJeLClco= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:00 2025 by rpki-client