$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa File: a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa (raw, json) Hash identifier: 9/DJ1e6Pm5d1+kSZIFuu+fIkN4/6qt8fXfbFnknrXug= Subject key identifier: 4A:D7:95:E9:72:A4:4A:5A:DE:DB:47:80:45:8F:4D:18:F7:C1:CF:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD82D5BB7EE0BB1804C580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:82:d5:bb:7e:e0:bb:18:04:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ba74872c-e062-4e5e-8567-d54c929f8a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:91:a0:2c:61:59:ef:ce:76:40:ea:73:92: 4c:07:57:3a:2d:ab:b2:db:ce:e5:27:ed:d6:4a:30: 17:48:1e:be:b4:87:4d:5f:de:df:b1:f6:30:10:3e: 95:cd:fa:5f:c9:5d:96:77:2b:96:9c:88:90:b2:ea: 74:f1:e8:21:5f:ba:d4:63:fc:7a:05:d3:02:c5:92: ae:b9:71:e2:4a:0e:a4:d3:7f:a9:8c:86:99:6c:8a: 34:1e:13:a0:82:e7:44:34:2c:4b:64:ec:c7:94:b7: 52:85:47:d2:7e:18:e4:8f:68:a3:2f:27:90:be:5d: 4a:6e:0c:5a:71:7b:86:a1:0f:eb:f9:cc:25:5a:a5: 28:95:46:e5:d4:bc:c6:18:11:7b:b2:2e:55:12:93: 84:8c:80:50:a9:20:02:94:07:bd:94:40:29:91:3e: 50:4c:be:ae:7b:e3:22:80:29:47:a9:83:fa:f8:ae: 04:5d:98:34:0b:69:12:eb:bf:a6:a4:59:a6:08:fa: 0a:39:77:c0:3d:6d:24:fe:8f:54:9d:77:b6:84:aa: 82:c1:33:af:b1:0d:88:4d:99:ae:eb:49:f4:3b:6c: e9:d2:46:0e:fa:5d:b1:95:4e:cb:83:f5:ea:4c:84: 40:a7:a6:86:11:fc:1d:45:0b:20:58:b9:00:20:3d: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:95:E9:72:A4:4A:5A:DE:DB:47:80:45:8F:4D:18:F7:C1:CF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8f:f5:a3:73:ce:c9:f9:66:d2:ff:62:73:ff:53:fb:d3:d4: 99:95:85:b9:79:45:9e:85:49:7b:43:b7:2a:a5:09:93:c9:70: 03:82:d8:ac:66:5b:36:33:04:f9:46:72:94:64:0c:f1:5a:44: a9:ad:05:c4:c3:47:60:eb:5b:f0:b6:d5:e3:b0:d8:ce:4e:d9: 34:0e:54:cf:72:79:b7:fb:bf:16:1c:4e:b4:aa:be:cc:bb:21: 86:8b:34:dd:34:6a:2c:52:65:41:77:e1:24:18:81:9a:62:ad: 4f:d0:d5:d2:87:51:06:d1:29:11:cf:b0:28:2b:54:5a:c1:94: f4:ea:62:72:f3:29:96:d7:02:61:17:57:fc:c0:59:47:b2:4e: 2e:8c:62:8f:bd:e3:1e:f0:4c:e5:74:4c:6b:97:3c:fc:d4:bf: 54:cb:1b:f0:46:f9:2f:09:eb:be:6e:29:c8:c5:55:28:03:6e: 49:f8:5d:3b:34:3f:c2:32:90:4f:da:9b:89:e9:15:0c:e5:f1: ff:82:92:8b:5f:2d:18:f9:fa:67:81:f1:f7:60:12:59:c7:ba: c4:61:18:75:ac:fa:68:12:14:e2:16:3c:9a:b7:a7:fb:77:e6: e4:2f:d0:05:d6:33:0f:b6:04:b6:51:45:dc:ec:c8:41:0b:20: de:ef:16:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYLVu37guxgExYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmE3NDg3MmMtZTA2Mi00ZTVlLTg1NjctZDU0YzkyOWY4YTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy6RoCxhWe/OdkDqc5JMB1c6Lauy287lJ+3W SjAXSB6+tIdNX97fsfYwED6VzfpfyV2WdyuWnIiQsup08eghX7rUY/x6BdMCxZKu uXHiSg6k03+pjIaZbIo0HhOggudENCxLZOzHlLdShUfSfhjkj2ijLyeQvl1Kbgxa cXuGoQ/r+cwlWqUolUbl1LzGGBF7si5VEpOEjIBQqSAClAe9lEApkT5QTL6ue+Mi gClHqYP6+K4EXZg0C2kS67+mpFmmCPoKOXfAPW0k/o9UnXe2hKqCwTOvsQ2ITZmu 60n0O2zp0kYO+l2xlU7Lg/XqTIRAp6aGEfwdRQsgWLkAID3NIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErXlelypEpa3ttHgEWPTRj3wc+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkMzljNGQtMDhlYy0z MmY3LWFhY2YtM2E5MWY3ZTUzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiP9aNzzsn5ZtL/YnP/U/vT1JmVhbl5RZ6FSXtDtyqlCZPJcAOC2Kxm WzYzBPlGcpRkDPFaRKmtBcTDR2DrW/C21eOw2M5O2TQOVM9yebf7vxYcTrSqvsy7 IYaLNN00aixSZUF34SQYgZpirU/Q1dKHUQbRKRHPsCgrVFrBlPTqYnLzKZbXAmEX V/zAWUeyTi6MYo+94x7wTOV0TGuXPPzUv1TLG/BG+S8J675uKcjFVSgDbkn4XTs0 P8IykE/am4npFQzl8f+CkotfLRj5+meB8fdgElnHusRhGHWs+mgSFOIWPJq3p/t3 5uQv0AXWMw+2BLZRRdzsyEELIN7vFhI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:41:53 2025 by rpki-client