$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b256f124-cc56-3cdd-803f-81655b779fd1.roa File: b256f124-cc56-3cdd-803f-81655b779fd1.roa (raw, json) Hash identifier: r9nsS4mhHx+Bff8nkXqaLU6HSTllwKtekzehNsLKSKY= Subject key identifier: 54:6C:41:E6:2B:50:93:12:DF:31:F2:C5:80:9E:10:FE:F6:B7:33:A4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD20D7F3BB04BF6FB8680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b256f124-cc56-3cdd-803f-81655b779fd1.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d2:0d:7f:3b:b0:4b:f6:fb:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4c6b4ebb-3053-48a4-a570-bb600797be23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:b8:10:21:d4:d5:c7:51:23:5b:23:8e:9c: f1:17:2d:fa:30:1f:5b:cc:ca:94:5c:0e:60:c3:db: 12:23:aa:90:9e:fe:53:42:3f:99:8d:06:17:8b:1e: 4d:03:65:2e:cf:e7:5f:7a:4f:1b:42:db:fa:94:ce: 3b:e1:89:f4:a9:04:c2:14:40:fd:f4:ab:e0:bb:ed: 25:e9:d3:f2:18:0f:16:e2:90:7c:ad:ca:2b:6c:fd: 77:09:86:a2:d5:99:67:b5:d8:c2:b2:c5:2c:bd:16: 68:af:1e:6c:2e:d1:25:a6:66:cd:a4:2c:4a:56:92: f9:b4:5d:7e:e3:84:3a:9c:6e:c0:96:10:73:4e:59: 5e:27:0d:c1:2d:cb:61:1a:4f:e2:1f:92:36:58:bd: e4:92:70:58:f4:35:bb:97:cc:35:d8:9e:05:7c:d4: 4e:e2:75:75:fb:20:8c:e6:28:6a:e1:0c:21:13:51: 15:44:00:07:6c:97:28:fd:c5:d0:8e:f1:ff:11:8b: 33:c1:2f:4e:81:d8:39:3b:c2:3c:77:84:cb:f0:4c: 86:4b:2c:fa:46:bc:83:6c:ce:ee:15:c4:9d:81:a2: cf:a0:c3:e5:90:97:60:a4:e9:87:e1:32:b7:d1:55: 2a:89:d3:ac:3f:79:4b:38:08:2d:69:c9:c3:a3:6b: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6C:41:E6:2B:50:93:12:DF:31:F2:C5:80:9E:10:FE:F6:B7:33:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b256f124-cc56-3cdd-803f-81655b779fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1b:8d:35:a9:f7:7b:54:48:82:37:31:0c:05:f3:fd:fa:55: 0f:39:2d:dc:91:f8:f4:b7:64:95:0e:7c:20:51:4e:18:28:b2: 96:17:5d:19:a4:0b:cb:6a:e3:8e:0d:11:0f:c6:e7:f2:e5:38: 46:b0:3b:8a:59:de:70:04:ba:3a:b2:cc:97:f1:4b:02:a9:da: 61:eb:6e:86:f6:94:a1:22:2d:a2:33:df:f0:fc:92:78:4d:33: cd:d9:2e:75:2c:99:74:71:5c:ca:27:a2:92:a5:98:b7:d7:05: 42:61:a0:5e:87:08:bd:09:0e:71:9e:50:17:23:8a:28:74:af: 6f:53:63:8c:34:ed:0b:16:1f:5f:3f:df:66:11:33:e9:a5:7e: b3:fe:1b:1f:5e:21:c3:1f:4f:8c:3c:d8:7b:fe:a8:84:c2:ca: 53:7f:f5:e8:2e:fb:1a:a0:34:49:3f:0f:4d:99:3b:47:e9:6a: e6:85:28:79:0b:77:03:be:86:d6:12:8f:4c:1e:36:a8:b8:80: 1b:d2:94:e7:4b:7d:06:6b:49:02:c3:10:26:bc:e7:10:57:dd: 82:f2:84:a0:4b:06:17:e8:f6:ca:f0:02:02:2a:41:bc:19:fa: 16:29:9e:cc:a4:54:a0:f0:2c:0a:57:09:73:35:45:20:55:46: ea:9a:a6:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNINfzuwS/b7hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGM2YjRlYmItMzA1My00OGE0LWE1NzAtYmI2MDA3OTdiZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6W4ECHU1cdRI1sjjpzxFy36MB9bzMqUXA5g w9sSI6qQnv5TQj+ZjQYXix5NA2Uuz+dfek8bQtv6lM474Yn0qQTCFED99Kvgu+0l 6dPyGA8W4pB8rcorbP13CYai1ZlntdjCssUsvRZorx5sLtElpmbNpCxKVpL5tF1+ 44Q6nG7AlhBzTlleJw3BLcthGk/iH5I2WL3kknBY9DW7l8w12J4FfNRO4nV1+yCM 5ihq4QwhE1EVRAAHbJco/cXQjvH/EYszwS9Ogdg5O8I8d4TL8EyGSyz6RryDbM7u FcSdgaLPoMPlkJdgpOmH4TK30VUqidOsP3lLOAgtacnDo2v6VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRsQeYrUJMS3zHyxYCeEP72tzOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjI1NmYxMjQtY2M1Ni0z Y2RkLTgwM2YtODE2NTViNzc5ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0bjTWp93tUSII3MQwF8/36VQ85LdyR+PS3ZJUOfCBRThgospYXXRmk C8tq444NEQ/G5/LlOEawO4pZ3nAEujqyzJfxSwKp2mHrbob2lKEiLaIz3/D8knhN M83ZLnUsmXRxXMonopKlmLfXBUJhoF6HCL0JDnGeUBcjiih0r29TY4w07QsWH18/ 32YRM+mlfrP+Gx9eIcMfT4w82Hv+qITCylN/9egu+xqgNEk/D02ZO0fpauaFKHkL dwO+htYSj0weNqi4gBvSlOdLfQZrSQLDECa85xBX3YLyhKBLBhfo9srwAgIqQbwZ +hYpnsykVKDwLApXCXM1RSBVRuqaptY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:58:18 2025 by rpki-client