$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf97215f-cb46-3d4d-a01f-9794fb5936a5.roa File: bf97215f-cb46-3d4d-a01f-9794fb5936a5.roa (raw, json) Hash identifier: VsVLubwqjhgk5PnDF/4mmz22ytkWSaq3LQGRoWQRCOg= Subject key identifier: 6D:43:F5:FE:1F:47:A5:F6:B3:A7:83:EC:08:92:B4:CB:7E:D8:36:6E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCCC624B6A40A131310940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf97215f-cb46-3d4d-a01f-9794fb5936a5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:cc:62:4b:6a:40:a1:31:31:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=fa741a6a-5543-4163-9d40-b2119f986829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:5d:57:3a:95:f5:f6:46:ad:94:8c:87:f5: ee:5c:22:73:0c:5a:f4:55:3f:d7:1d:b0:d2:c9:96: c8:9f:34:4f:23:f8:c0:c2:b8:fc:2b:0f:c4:55:84: 59:11:76:ea:9a:88:af:bc:e3:8a:c9:44:0e:9d:e3: f7:ba:a4:34:d3:71:2f:7b:ac:dd:5f:ae:51:86:74: 3c:1b:c3:fb:d5:37:d1:bd:ce:6c:3d:cf:1b:ad:89: 4f:ab:b1:71:b2:ff:a0:f0:17:2d:07:00:02:e6:c9: 66:39:fb:72:9f:ea:ef:8e:fe:0b:13:e8:d3:1b:16: 1b:b0:8f:2b:ad:a3:76:1c:1c:d1:51:e6:63:78:d4: ef:1b:2f:2e:2d:c1:01:83:7b:f0:b8:b4:c6:7e:72: 8a:70:ee:89:16:c8:f8:b3:33:bc:de:3d:e3:61:d3: 56:c9:52:7e:6f:aa:4e:b7:b4:bb:78:56:3e:e8:f7: cf:73:2c:67:d0:6d:4c:bc:47:4a:55:67:7b:90:3d: de:5b:47:6c:dc:1c:09:d5:45:b2:c4:e5:92:1b:e5: 03:1b:ff:2c:ee:e2:84:9c:c6:f7:de:1e:e0:62:9e: 20:94:67:36:f8:0a:7a:8a:df:a6:5b:87:94:1a:36: bb:b8:06:59:db:33:8d:e9:d9:b1:cd:87:e5:ee:91: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:F5:FE:1F:47:A5:F6:B3:A7:83:EC:08:92:B4:CB:7E:D8:36:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf97215f-cb46-3d4d-a01f-9794fb5936a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:03:ac:7f:0a:64:f8:7a:ee:54:ad:2d:48:69:b9:40:25:05: 3d:7f:a5:00:be:95:71:ec:b2:27:2a:2b:80:33:e0:e8:25:0e: f8:15:09:00:20:21:1a:40:61:c9:c1:94:9e:e6:04:c0:9f:d4: fd:f8:ed:4a:22:97:0c:70:61:5f:c1:59:f9:e1:b8:41:aa:9b: 78:ae:4f:40:da:2a:2e:2c:d2:9c:49:f4:87:2c:dd:ca:0a:45: 27:f5:05:4e:61:c6:ce:ae:22:93:14:49:dc:30:d6:10:bc:97: 0e:9a:50:8f:16:a9:5d:7d:93:a0:f6:75:d6:d7:69:45:4c:3b: 36:14:4a:42:80:57:78:ac:a5:ea:d3:21:c1:65:84:6d:bc:8e: 26:ca:10:ad:30:53:0f:8d:a6:dd:91:3b:74:08:2e:8a:06:a3: 36:e7:95:f9:d7:23:6a:d4:3a:11:46:7b:5a:fa:ca:85:60:e6: ca:19:26:76:e2:46:c6:97:9c:4a:2f:36:c0:e1:c3:cf:1b:a8: 16:a8:79:72:1d:d2:df:f8:d0:f9:c6:c2:fe:64:04:1b:5b:fd: 7b:fd:97:a7:e9:e9:72:81:fe:1c:fb:21:4c:93:d9:0b:2b:2f: 84:f0:14:6c:ca:37:db:a8:7f:73:15:57:64:c3:4e:41:e3:79: 05:e7:33:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzMxiS2pAoTExCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmE3NDFhNmEtNTU0My00MTYzLTlkNDAtYjIxMTlmOTg2ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYJdVzqV9fZGrZSMh/XuXCJzDFr0VT/XHbDS yZbInzRPI/jAwrj8Kw/EVYRZEXbqmoivvOOKyUQOneP3uqQ003Eve6zdX65RhnQ8 G8P71TfRvc5sPc8brYlPq7Fxsv+g8BctBwAC5slmOftyn+rvjv4LE+jTGxYbsI8r raN2HBzRUeZjeNTvGy8uLcEBg3vwuLTGfnKKcO6JFsj4szO83j3jYdNWyVJ+b6pO t7S7eFY+6PfPcyxn0G1MvEdKVWd7kD3eW0ds3BwJ1UWyxOWSG+UDG/8s7uKEnMb3 3h7gYp4glGc2+Ap6it+mW4eUGja7uAZZ2zON6dmxzYfl7pGMwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1D9f4fR6X2s6eD7AiStMt+2DZuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmY5NzIxNWYtY2I0Ni0z ZDRkLWEwMWYtOTc5NGZiNTkzNmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIADrH8KZPh67lStLUhpuUAlBT1/pQC+lXHssicqK4Az4OglDvgVCQAg IRpAYcnBlJ7mBMCf1P347UoilwxwYV/BWfnhuEGqm3iuT0DaKi4s0pxJ9Ics3coK RSf1BU5hxs6uIpMUSdww1hC8lw6aUI8WqV19k6D2ddbXaUVMOzYUSkKAV3isperT IcFlhG28jibKEK0wUw+Npt2RO3QILooGozbnlfnXI2rUOhFGe1r6yoVg5soZJnbi RsaXnEovNsDhw88bqBaoeXId0t/40PnGwv5kBBtb/Xv9l6fp6XKB/hz7IUyT2Qsr L4TwFGzKN9uof3MVV2TDTkHjeQXnMzw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:47 2025 by rpki-client