$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa File: b139f623-0d4a-3094-9459-6e9aecf27d12.roa (raw, json) Hash identifier: ReHnN9QJDr2pLbl1OS3KmFWsZP8ULWnrzrnDduX8TSM= Subject key identifier: 69:02:4B:A2:C5:5A:B2:FA:97:59:E8:79:8A:4C:0A:3C:98:38:76:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8460624E6759BEB03D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:84:60:62:4e:67:59:be:b0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b464d3ef-e9db-4346-842f-866d2befa9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:31:57:13:1d:13:6c:51:9b:ad:93:61:03:50: 4d:e1:03:14:cf:d6:72:8c:9f:c6:d9:60:50:00:10: 3f:40:9f:56:2e:d2:22:34:d4:9e:e7:d3:1d:d0:a8: 0f:e4:a2:9a:4e:83:80:46:4c:1a:fa:e5:4d:69:14: ee:16:b4:9a:0c:52:63:1c:ec:00:02:cc:a7:90:bc: ef:7a:fc:cf:0e:b2:b9:af:75:86:6f:41:cd:e2:fd: 93:f5:b1:95:8a:de:9c:1c:5a:9e:f4:e9:9d:70:a6: 9e:a4:98:e0:ea:83:a7:34:ab:f9:09:45:fe:25:8f: 18:41:84:df:1a:ad:08:0e:13:d9:51:d8:0d:2c:e6: 03:45:dd:94:0d:de:b2:30:d5:51:2d:77:88:09:8e: d4:93:2c:83:fb:ef:c3:0f:6f:cf:34:a7:0b:32:d9: 50:d7:70:ae:48:e5:b9:b2:66:65:b0:c3:5e:f1:c0: ce:30:b0:dc:ef:ec:a8:58:7d:3a:cd:98:47:2d:f0: 04:5f:35:3f:9a:1e:72:f7:19:98:b9:b4:68:39:85: af:c6:f5:19:ed:c8:bc:e1:38:56:84:fb:54:41:8a: ad:e9:be:71:dc:e6:de:cc:bb:dc:38:a7:ac:10:ab: e2:ec:6f:95:f1:00:9d:da:b5:0b:dd:db:c8:1a:cf: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:02:4B:A2:C5:5A:B2:FA:97:59:E8:79:8A:4C:0A:3C:98:38:76:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b139f623-0d4a-3094-9459-6e9aecf27d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:6a:7f:4c:b2:8a:1e:5b:cf:12:7a:67:78:67:5d:b3:e4:d1: 1e:52:60:3b:c1:b4:02:63:21:13:3b:93:a2:e7:a9:73:53:a3: 77:08:5b:f2:77:ee:ef:b4:40:e3:be:5f:be:06:f0:f7:1a:91: e3:8a:90:cb:ca:e0:03:75:aa:1c:50:98:a7:4e:94:95:7e:15: fe:64:88:ac:bb:f1:fb:1a:52:d9:19:10:1d:d4:f8:5a:5b:da: f8:81:07:71:de:ca:1c:2b:30:aa:0b:24:0a:ac:c5:10:61:69: 09:d4:1b:3c:01:b3:82:2d:9f:63:a1:43:78:31:e7:7c:c4:a4: 2b:2e:b3:85:4e:f4:a3:40:aa:ff:98:f0:d3:12:43:22:36:b0: 08:d2:56:4b:97:00:92:b8:ba:98:a1:2a:83:dc:65:51:df:6a: 18:4e:dc:0b:9d:f9:e5:06:6a:45:0d:cd:da:18:01:00:2d:3c: 04:44:f5:2d:4c:b7:95:4b:c7:d8:0f:89:bc:6d:d2:0b:4e:95: 12:b4:b1:7b:0d:08:18:b7:22:d0:0b:20:2e:c8:46:c8:98:49: b2:de:33:3b:c2:01:15:4a:28:8d:38:ba:91:f3:51:f3:18:9b: 4d:e8:b9:88:d8:1b:2d:79:dc:0a:1e:fe:d8:28:1b:a2:5d:65: a3:d2:39:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYRgYk5nWb6wPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjQ2NGQzZWYtZTlkYi00MzQ2LTg0MmYtODY2ZDJiZWZhOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTFXEx0TbFGbrZNhA1BN4QMUz9ZyjJ/G2WBQ ABA/QJ9WLtIiNNSe59Md0KgP5KKaToOARkwa+uVNaRTuFrSaDFJjHOwAAsynkLzv evzPDrK5r3WGb0HN4v2T9bGVit6cHFqe9OmdcKaepJjg6oOnNKv5CUX+JY8YQYTf Gq0IDhPZUdgNLOYDRd2UDd6yMNVRLXeICY7UkyyD++/DD2/PNKcLMtlQ13CuSOW5 smZlsMNe8cDOMLDc7+yoWH06zZhHLfAEXzU/mh5y9xmYubRoOYWvxvUZ7ci84ThW hPtUQYqt6b5x3ObezLvcOKesEKvi7G+V8QCd2rUL3dvIGs+yJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkCS6LFWrL6l1noeYpMCjyYOHb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjEzOWY2MjMtMGQ0YS0z MDk0LTk0NTktNmU5YWVjZjI3ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1qf0yyih5bzxJ6Z3hnXbPk0R5SYDvBtAJjIRM7k6LnqXNTo3cIW/J3 7u+0QOO+X74G8PcakeOKkMvK4AN1qhxQmKdOlJV+Ff5kiKy78fsaUtkZEB3U+Fpb 2viBB3HeyhwrMKoLJAqsxRBhaQnUGzwBs4Itn2OhQ3gx53zEpCsus4VO9KNAqv+Y 8NMSQyI2sAjSVkuXAJK4upihKoPcZVHfahhO3Aud+eUGakUNzdoYAQAtPARE9S1M t5VLx9gPibxt0gtOlRK0sXsNCBi3ItALIC7IRsiYSbLeMzvCARVKKI04upHzUfMY m03ouYjYGy153Aoe/tgoG6JdZaPSObE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:29:04 2025 by rpki-client