$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa File: bfb37e32-2356-3716-b3a3-042ad3762687.roa (raw, json) Hash identifier: AwN9i5xHunZrDBfknt5rlHGO9UNIJgvbsfHdgEbxwMg= Subject key identifier: 31:B7:DB:59:43:32:22:DF:A9:F2:C3:10:8E:B3:11:45:91:76:A9:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841197E1E9291E09E9AFDF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 70.41.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:97:e1:e9:29:1e:09:e9:af:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=51556fba-ebfc-4e65-ac8d-d941807f1d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a2:db:e5:0f:1f:64:33:be:ca:ba:b4:24:81: 2c:73:5f:dd:81:c3:34:4d:60:12:46:e5:a3:cc:70: 02:29:b8:a1:1b:ac:90:00:21:d1:e2:58:4d:81:cd: 98:4a:cc:79:b5:c9:59:02:e7:2b:e6:9c:81:03:71: bb:04:60:c1:9d:65:17:38:42:5b:f9:5b:8c:28:1e: d1:65:e0:c6:e6:75:77:0a:ad:11:e3:88:c6:8c:a8: 0b:d3:61:56:25:fe:4b:8d:4b:18:2f:09:b1:8a:90: 07:5e:da:5b:f6:d9:85:13:68:de:45:24:6c:61:82: dc:8d:d8:55:6d:2e:35:12:bb:70:45:30:68:eb:58: 55:b2:c1:02:d3:76:d8:eb:41:45:1b:fd:51:71:36: 5f:52:1e:c1:eb:6f:80:2f:fa:b0:b1:e9:ed:77:40: 94:df:9f:86:dd:c6:0e:d2:21:05:69:33:fb:d9:b9: f3:83:5c:1d:1d:36:21:02:d3:d9:91:53:87:3b:d6: 97:ad:d6:b8:81:d8:2a:44:18:3f:aa:b9:a8:b3:f9: 6f:28:4a:bf:ff:04:90:fb:34:e1:43:fc:a3:67:ee: f8:cb:5b:18:03:ab:1d:bc:52:67:35:4e:41:6a:da: 45:83:fd:41:b7:4d:f2:fe:86:2d:aa:a0:a8:2f:ed: 06:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:DB:59:43:32:22:DF:A9:F2:C3:10:8E:B3:11:45:91:76:A9:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfb37e32-2356-3716-b3a3-042ad3762687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:6c:18:82:b0:62:ab:70:fe:8e:2e:18:c9:b0:fb:ba:11: 74:85:a3:bb:65:f1:cd:40:91:f5:c0:bb:33:39:8d:60:1e:e6: a9:28:6e:25:d1:0d:76:8a:f3:e4:ef:21:75:ba:e2:7f:44:89: 9a:f3:71:56:86:1c:8b:bd:2d:98:9a:90:6d:22:c1:55:a1:9b: 4c:62:02:78:b1:0f:00:1d:5d:48:8a:20:07:41:13:85:2c:7e: df:74:d4:01:bd:d9:54:b4:61:dc:39:dd:3f:a3:4a:fd:79:ac: 31:60:2c:47:59:04:3a:fd:0a:4b:07:b6:fd:75:63:3b:d8:87: 92:7a:8b:76:d2:92:e5:88:68:22:8e:65:a2:78:29:ec:27:8a: 43:b1:ef:08:c0:be:0f:95:c8:cd:98:12:69:f3:23:af:ee:2a: ea:8d:71:4a:21:ee:fb:ec:e8:10:a1:a5:96:19:e8:9d:8b:f9: b8:7d:70:ef:ee:bf:00:7e:cf:47:19:da:1f:93:54:3b:de:f5: 52:00:9a:f9:9c:76:c3:95:cd:2e:dd:ab:39:ca:46:6d:bc:d8: ff:9e:36:42:88:fb:ce:c5:ec:5c:bd:60:f8:55:90:ab:dc:18: 26:1c:fd:e5:d4:65:49:e0:10:aa:fa:c9:23:69:f2:b9:e2:80: af:65:e8:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZfh6SkeCemv3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTE1NTZmYmEtZWJmYy00ZTY1LWFjOGQtZDk0MTgwN2YxZDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KLb5Q8fZDO+yrq0JIEsc1/dgcM0TWASRuWj zHACKbihG6yQACHR4lhNgc2YSsx5tclZAucr5pyBA3G7BGDBnWUXOEJb+VuMKB7R ZeDG5nV3Cq0R44jGjKgL02FWJf5LjUsYLwmxipAHXtpb9tmFE2jeRSRsYYLcjdhV bS41ErtwRTBo61hVssEC03bY60FFG/1RcTZfUh7B62+AL/qwsentd0CU35+G3cYO 0iEFaTP72bnzg1wdHTYhAtPZkVOHO9aXrda4gdgqRBg/qrmos/lvKEq//wSQ+zTh Q/yjZ+74y1sYA6sdvFJnNU5BatpFg/1Bt03y/oYtqqCoL+0GVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG321lDMiLfqfLDEI6zEUWRdqlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZiMzdlMzItMjM1Ni0z NzE2LWIzYTMtMDQyYWQzNzYyNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRilIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQmbBiCsGKrcP6OLhjJsPu6EXSFo7tl8c1AkfXAuzM5jWAe5qkobiXR DXaK8+TvIXW64n9EiZrzcVaGHIu9LZiakG0iwVWhm0xiAnixDwAdXUiKIAdBE4Us ft901AG92VS0Ydw53T+jSv15rDFgLEdZBDr9CksHtv11YzvYh5J6i3bSkuWIaCKO ZaJ4KewnikOx7wjAvg+VyM2YEmnzI6/uKuqNcUoh7vvs6BChpZYZ6J2L+bh9cO/u vwB+z0cZ2h+TVDve9VIAmvmcdsOVzS7dqznKRm282P+eNkKI+87F7Fy9YPhVkKvc GCYc/eXUZUngEKr6ySNp8rnigK9l6MM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:26:21 2025 by rpki-client