$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa File: c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa (raw, json) Hash identifier: VYwrOnUAYDafX4XL1+JGZeSwLCNUpFCEcRlkokzkydY= Subject key identifier: 28:6B:D3:3A:2B:FB:CD:64:35:3C:48:DB:62:4F:ED:2C:C9:91:5E:A5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD85F8073A456F9E576680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:85:f8:07:3a:45:6f:9e:57:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9876420e-b6e9-4019-8cfd-ee38b4700e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b1:5a:8d:f2:fa:32:66:56:92:b6:f1:20:4b: 35:a2:72:66:74:9b:ee:a6:7a:25:fa:d0:67:e0:3a: 03:cc:6e:c6:59:c1:1d:aa:58:3e:a9:e3:93:62:83: 52:9e:12:68:5f:22:1c:ba:37:72:20:ec:3e:a0:c7: 39:f7:47:fc:62:b8:18:8c:92:a5:08:fb:25:27:78: ce:02:b5:10:5a:ab:22:9a:f8:91:36:1a:98:91:27: 5f:52:0c:d4:86:d1:12:fe:a4:72:7c:07:64:52:71: 3b:c4:f7:6a:e0:68:ca:3c:34:cb:7b:48:c9:aa:8e: a3:02:6c:dc:ab:d3:bb:23:5e:cd:3f:a3:8b:7e:34: 5e:45:f4:58:1a:5d:41:3a:2a:18:44:59:75:cc:3e: cc:90:f1:27:00:af:e0:68:ff:7a:46:64:10:5d:5e: 0a:17:cc:8e:57:69:52:ea:9c:7a:e3:d7:d9:6d:e9: 57:0b:20:41:4c:5e:cc:a5:fb:95:92:ab:df:d0:ef: 58:d4:db:dc:71:b4:e8:44:99:77:fb:62:d5:29:c2: d5:84:45:bf:d4:92:2f:a9:b5:e9:a7:58:3e:e1:80: 8f:83:5e:ed:ba:26:b9:04:e8:f2:ff:29:75:26:c2: 80:c6:22:d6:0e:ca:06:58:e8:c6:16:f3:ae:07:f7: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:D3:3A:2B:FB:CD:64:35:3C:48:DB:62:4F:ED:2C:C9:91:5E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c8fd7e56-ea2c-37ac-bc6a-2ce40197d110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:86:68:f0:db:18:a3:26:6f:d8:77:80:1a:ff:3e:e7:04:85: f2:f8:f7:85:7e:42:ab:66:47:bd:43:15:9e:fa:05:59:4a:c6: ee:05:63:ee:bb:1e:70:d1:79:f4:66:0e:ef:1d:0a:09:ac:95: d2:19:ef:c2:8f:54:4d:cd:05:66:3d:16:7d:95:b2:85:70:d5: 19:c2:f5:d8:af:6d:17:f7:9f:8a:0d:27:70:56:30:12:29:8b: ce:9c:bb:5f:78:54:7b:9b:b9:07:dd:a3:93:54:94:ca:a8:da: 43:c6:08:84:28:50:d2:ce:42:f3:43:06:7f:49:94:90:19:6d: 5a:d4:46:8b:44:3c:3c:f4:b7:8c:23:4d:a3:e8:b5:15:04:9e: a2:fa:8a:ee:d2:e6:f5:38:0e:12:c4:1a:1e:e3:a3:d7:86:ce: 5d:26:94:04:ec:5d:4f:ac:36:46:a9:bc:ab:9f:db:25:90:76: 82:fb:c9:3c:19:b8:7d:60:af:45:b1:1c:5c:cb:0d:15:55:51: f1:15:f4:c3:36:31:5d:eb:09:4d:ee:9a:29:d1:9f:cc:e0:28: a2:1f:4a:0a:2e:64:73:64:6f:a5:59:6d:c5:8d:77:6c:a0:e1: 8b:d7:d1:2e:58:77:bd:dc:97:9a:a8:83:10:79:54:37:68:4c: cb:a4:4f:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYX4BzpFb55XZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTg3NjQyMGUtYjZlOS00MDE5LThjZmQtZWUzOGI0NzAwZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7FajfL6MmZWkrbxIEs1onJmdJvupnol+tBn 4DoDzG7GWcEdqlg+qeOTYoNSnhJoXyIcujdyIOw+oMc590f8YrgYjJKlCPslJ3jO ArUQWqsimviRNhqYkSdfUgzUhtES/qRyfAdkUnE7xPdq4GjKPDTLe0jJqo6jAmzc q9O7I17NP6OLfjReRfRYGl1BOioYRFl1zD7MkPEnAK/gaP96RmQQXV4KF8yOV2lS 6px649fZbelXCyBBTF7MpfuVkqvf0O9Y1NvccbToRJl3+2LVKcLVhEW/1JIvqbXp p1g+4YCPg17tuia5BOjy/yl1JsKAxiLWDsoGWOjGFvOuB/ehHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChr0zor+81kNTxI22JP7SzJkV6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzhmZDdlNTYtZWEyYy0z N2FjLWJjNmEtMmNlNDAxOTdkMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmGaPDbGKMmb9h3gBr/PucEhfL494V+QqtmR71DFZ76BVlKxu4FY+67 HnDRefRmDu8dCgmsldIZ78KPVE3NBWY9Fn2VsoVw1RnC9divbRf3n4oNJ3BWMBIp i86cu194VHubuQfdo5NUlMqo2kPGCIQoUNLOQvNDBn9JlJAZbVrURotEPDz0t4wj TaPotRUEnqL6iu7S5vU4DhLEGh7jo9eGzl0mlATsXU+sNkapvKuf2yWQdoL7yTwZ uH1gr0WxHFzLDRVVUfEV9MM2MV3rCU3uminRn8zgKKIfSgouZHNkb6VZbcWNd2yg 4YvX0S5Yd73cl5qogxB5VDdoTMukT4Y= -----END CERTIFICATE-----Generated at Sun Oct 19 23:43:40 2025 by rpki-client