$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa File: d14f496f-135d-3316-bf2e-70d16e643666.roa (raw, json) Hash identifier: gGbN4mzDoP7CtTzOC8wTjt5bZ4AEWPoqyMFKx66wKFw= Subject key identifier: 82:2C:98:D2:80:5A:2B:55:55:42:F3:83:8A:6E:A0:7E:3D:9A:21:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD85B9B4A0208445458100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:85:b9:b4:a0:20:84:45:45:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4c237ee1-ab3d-4841-af36-5e58a4028aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:2b:24:9a:06:4b:45:b1:1a:ff:c4:7d:60: 60:9e:16:a0:3a:e8:07:8f:33:cc:32:72:8b:8a:ef: 04:fe:ae:5e:b1:03:6f:b6:7a:e9:14:ac:df:3a:75: 2d:5f:64:be:86:98:77:8e:cf:7e:a8:6f:79:e5:13: 16:e9:ec:5c:19:69:d0:d9:87:58:94:4a:06:13:42: 60:36:e3:45:82:0f:8f:87:54:8d:f2:be:29:97:52: 30:c0:71:b4:d6:24:ae:44:7e:aa:47:0e:e3:82:b6: 81:14:e9:8b:d5:6a:6a:34:71:45:af:76:6d:54:67: 3a:60:71:f2:1c:4d:ec:7a:69:b9:21:70:0c:6a:d3: 3c:52:b1:23:c7:65:c9:8d:2d:a4:ee:c4:1f:2b:f4: bc:fa:84:2a:0d:e1:a5:33:73:03:1a:e3:ab:b9:fe: 82:17:2a:d1:b9:a9:15:a9:9d:47:ad:a0:3c:cb:6c: 84:02:82:51:93:0e:ee:9b:ff:f0:d2:49:89:84:65: fd:26:17:6b:64:c7:15:50:4f:65:fb:f0:55:80:08: 12:0b:d4:55:f7:67:d8:b3:71:84:fc:43:d7:3f:6c: 08:e4:df:28:97:00:8f:07:d2:96:b5:c0:c9:8d:8c: 82:31:22:77:4e:0e:1c:96:ff:3a:8e:19:9f:e9:e4: 99:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:98:D2:80:5A:2B:55:55:42:F3:83:8A:6E:A0:7E:3D:9A:21:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d14f496f-135d-3316-bf2e-70d16e643666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:a1:4c:d2:d7:9a:45:d3:94:ae:27:48:fc:30:7d:a0:16:0a: aa:bb:84:8a:69:45:75:30:99:80:d1:fa:94:d1:04:07:e2:40: 43:1c:e8:9c:7a:69:03:0b:da:57:d8:f6:61:f4:d4:79:d0:1e: e7:5c:76:34:99:c8:41:34:e9:46:7c:fb:e8:ae:b4:11:0b:20: fe:2f:4a:1a:e3:85:9b:6f:46:0d:36:3b:fd:10:27:63:37:2e: af:ec:6f:1a:4d:d8:e2:7f:d2:2e:dc:6f:5e:d0:da:ba:2a:09: d5:82:93:c4:33:ba:af:c6:79:d3:61:b6:6c:23:ee:3b:f6:fa: 74:82:dc:84:7c:d2:85:a0:8e:64:5a:52:e4:0c:d8:61:24:db: 84:bf:8a:c7:7e:df:80:e7:4f:4a:95:12:39:46:69:9d:c5:e6: 62:dd:a2:74:f0:c5:2b:b3:e0:79:bc:19:7c:29:bf:71:1f:65: 55:b3:21:08:7c:40:20:2a:5c:b3:95:d7:18:04:22:ee:e4:6a: d5:10:07:b7:7b:3d:ec:e4:f9:81:53:4e:b5:60:ce:4b:92:07: ca:e6:f5:55:79:b1:59:fd:64:8c:fe:4c:de:1d:ba:dd:a4:bb: 2f:fa:d2:e4:44:a0:a6:d7:15:b8:5e:bc:f1:12:ae:88:b4:1a: 4a:aa:5b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYW5tKAghEVFgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGMyMzdlZTEtYWIzZC00ODQxLWFmMzYtNWU1OGE0MDI4YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzUrJJoGS0WxGv/EfWBgnhagOugHjzPMMnKL iu8E/q5esQNvtnrpFKzfOnUtX2S+hph3js9+qG955RMW6excGWnQ2YdYlEoGE0Jg NuNFgg+Ph1SN8r4pl1IwwHG01iSuRH6qRw7jgraBFOmL1WpqNHFFr3ZtVGc6YHHy HE3semm5IXAMatM8UrEjx2XJjS2k7sQfK/S8+oQqDeGlM3MDGuOruf6CFyrRuakV qZ1HraA8y2yEAoJRkw7um//w0kmJhGX9JhdrZMcVUE9l+/BVgAgSC9RV92fYs3GE /EPXP2wI5N8olwCPB9KWtcDJjYyCMSJ3Tg4clv86jhmf6eSZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIsmNKAWitVVULzg4puoH49miGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDE0ZjQ5NmYtMTM1ZC0z MzE2LWJmMmUtNzBkMTZlNjQzNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALehTNLXmkXTlK4nSPwwfaAWCqq7hIppRXUwmYDR+pTRBAfiQEMc6Jx6 aQML2lfY9mH01HnQHudcdjSZyEE06UZ8++iutBELIP4vShrjhZtvRg02O/0QJ2M3 Lq/sbxpN2OJ/0i7cb17Q2roqCdWCk8Qzuq/GedNhtmwj7jv2+nSC3IR80oWgjmRa UuQM2GEk24S/isd+34DnT0qVEjlGaZ3F5mLdonTwxSuz4Hm8GXwpv3EfZVWzIQh8 QCAqXLOV1xgEIu7katUQB7d7Pezk+YFTTrVgzkuSB8rm9VV5sVn9ZIz+TN4dut2k uy/60uREoKbXFbhevPESroi0GkqqW68= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:48 2025 by rpki-client