$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa File: af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa (raw, json) Hash identifier: s6Ewc0A7bXOawnAhTuwjVrj7HPXXSOvtix3HO7LKiDs= Subject key identifier: 63:FE:70:94:17:34:A6:BF:43:C5:13:68:A5:E1:94:16:CA:8C:F9:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8308A8C6CD127212B2B0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:83:08:a8:c6:cd:12:72:12:b2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5aa84825-967a-44ad-9a3b-224040f2ff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:ef:00:ab:14:c2:f6:6c:09:23:a7:84:77: de:21:9d:eb:f5:09:28:3a:e0:56:2f:ad:6a:c8:5c: 12:22:85:f2:f4:4b:a6:c4:ba:1c:54:54:d7:97:ee: 8c:3d:e7:3b:f6:67:a2:8b:d9:6f:9f:7b:bf:f1:3a: e7:9e:10:44:37:ee:e4:7f:e7:7f:27:28:50:a5:48: 2e:0b:1a:d9:69:99:42:7c:49:48:a9:7a:a5:6c:e9: a2:c7:c9:62:a0:44:05:80:fa:61:c9:0c:29:80:10: 8e:40:47:e0:0c:70:7f:72:47:19:f5:c9:f3:52:45: b1:6c:37:ab:dc:c7:18:a4:44:32:eb:94:72:7a:1c: d6:88:3f:81:44:4a:74:23:44:cd:91:95:98:86:2a: bc:58:1b:76:9a:44:1e:ac:d0:69:80:85:36:5c:fe: 14:23:10:97:36:cc:09:52:fd:ab:75:af:d8:86:bd: 47:29:33:b3:c6:14:64:5a:a7:e0:ac:f5:7e:c4:96: 72:ae:cf:d7:74:08:c5:ea:ca:dc:87:c6:49:5d:a9: a1:a0:cb:1d:51:59:60:a8:14:dc:77:8f:0b:c9:83: d8:32:7f:6f:7d:da:0f:6a:ef:53:e5:f5:0c:5d:2d: df:33:01:0f:07:51:94:c0:cd:d1:10:23:7c:2d:ee: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:70:94:17:34:A6:BF:43:C5:13:68:A5:E1:94:16:CA:8C:F9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:17:a4:cf:fd:61:b0:52:f7:1f:f0:b7:e4:2b:dc:40:05:4b: 33:a8:ed:ea:73:ed:0f:ce:93:8c:05:5c:05:1d:80:ed:7f:90: b0:44:24:3b:c2:31:2a:24:35:44:ef:d6:4b:ea:5b:94:08:e5: a1:19:73:fa:ad:ad:fb:78:55:6f:f1:0a:2c:a8:07:ff:37:a0: 85:bf:08:f3:ed:f4:f9:68:41:12:7c:3f:69:07:76:20:04:70: da:d5:ce:0a:27:0a:f8:ae:cf:43:33:f6:90:58:f6:30:be:32: 64:b3:b9:d6:4a:a3:b4:65:c4:09:55:5e:11:88:11:35:48:5d: c2:f7:7d:60:3c:49:88:22:60:71:d5:24:6e:76:9f:18:cb:ab: f1:8a:53:68:29:62:28:56:76:6e:28:9e:d4:d7:40:59:82:e9: c0:75:92:42:00:88:b3:a6:28:7d:83:16:33:57:f8:86:8e:40: 09:e2:2e:2c:b9:c0:a5:87:73:a4:35:17:2e:0f:d8:30:1e:7f: 18:76:df:fa:1f:29:5a:79:f2:be:7c:23:e9:66:89:7e:e8:04: fb:c4:a0:3e:4d:4b:c7:74:df:35:33:6c:46:e2:49:1f:e4:a8: 9d:cd:24:22:3f:87:ed:86:ec:0d:d7:c5:d0:90:76:ed:f0:b4: 79:0e:3c:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYMIqMbNEnISsrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NWFhODQ4MjUtOTY3YS00NGFkLTlhM2ItMjI0MDQwZjJmZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTnvAKsUwvZsCSOnhHfeIZ3r9QkoOuBWL61q yFwSIoXy9EumxLocVFTXl+6MPec79meii9lvn3u/8TrnnhBEN+7kf+d/JyhQpUgu CxrZaZlCfElIqXqlbOmix8lioEQFgPphyQwpgBCOQEfgDHB/ckcZ9cnzUkWxbDer 3McYpEQy65RyehzWiD+BREp0I0TNkZWYhiq8WBt2mkQerNBpgIU2XP4UIxCXNswJ Uv2rda/Yhr1HKTOzxhRkWqfgrPV+xJZyrs/XdAjF6srch8ZJXamhoMsdUVlgqBTc d48LyYPYMn9vfdoPau9T5fUMXS3fMwEPB1GUwM3RECN8Le7hXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP+cJQXNKa/Q8UTaKXhlBbKjPkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY4MWE4YTAtMzg3NC0z YzFkLTk0NDUtN2FjMmFlMjBjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8XpM/9YbBS9x/wt+Qr3EAFSzOo7epz7Q/Ok4wFXAUdgO1/kLBEJDvC MSokNUTv1kvqW5QI5aEZc/qtrft4VW/xCiyoB/83oIW/CPPt9PloQRJ8P2kHdiAE cNrVzgonCviuz0Mz9pBY9jC+MmSzudZKo7RlxAlVXhGIETVIXcL3fWA8SYgiYHHV JG52nxjLq/GKU2gpYihWdm4ontTXQFmC6cB1kkIAiLOmKH2DFjNX+IaOQAniLiy5 wKWHc6Q1Fy4P2DAefxh23/ofKVp58r58I+lmiX7oBPvEoD5NS8d03zUzbEbiSR/k qJ3NJCI/h+2G7A3XxdCQdu3wtHkOPGM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:30 2025 by rpki-client