$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e203dd47-5250-3894-b533-b6bb526a24ff.roa File: e203dd47-5250-3894-b533-b6bb526a24ff.roa (raw, json) Hash identifier: HC3M+h1XuBf0voRgps/jG9Cu2Rz6GxeIsZQyMO3kQo0= Subject key identifier: F8:58:87:72:93:FB:20:1B:B4:35:77:99:69:43:BC:3F:A1:C7:E0:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD3AE5C9E4EF93DC4B680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e203dd47-5250-3894-b533-b6bb526a24ff.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d3:ae:5c:9e:4e:f9:3d:c4:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5033f038-9d05-413a-94bd-d3880abb56c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:30:5f:6c:6f:22:ec:61:75:02:40:11:c3: 47:11:69:56:11:21:84:ea:08:a3:c8:45:d7:28:81: 0a:87:3c:fc:e7:03:37:1d:d0:60:cc:59:d8:50:57: b4:49:cc:7a:85:8f:15:10:8f:e6:09:d4:2f:57:02: 7a:20:86:9b:54:ea:fe:b4:0c:26:50:f2:65:64:06: 42:85:92:7c:ff:3b:cd:66:c8:21:5b:8e:7d:8e:43: 64:97:8f:05:57:16:c9:82:bc:a5:2d:f1:84:31:ff: a3:e7:4a:c9:db:20:ea:45:d3:00:3c:ea:e7:0f:cc: d4:32:64:dc:9c:66:c8:7e:12:e2:6f:70:d4:e6:d0: 15:8f:ae:67:b2:ef:c6:f4:a4:04:15:28:f7:c3:d1: b7:63:60:56:fa:c1:dc:1e:6a:f7:99:74:25:5a:fe: ec:70:a9:44:98:a4:a0:b9:af:d8:98:ea:a8:e3:d4: c6:f9:d8:94:3a:9f:4e:4d:8a:af:61:6e:4a:51:6f: f0:9e:1a:79:3f:70:05:7f:a1:b0:6f:06:b0:4d:5b: 76:e0:78:3c:5d:79:71:d3:93:bc:c9:c4:74:26:8d: 9d:60:ed:45:3d:77:3c:3a:15:90:9a:d7:37:56:2f: a9:77:50:fd:c5:49:aa:cb:0d:2e:d3:e0:5e:69:aa: df:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:87:72:93:FB:20:1B:B4:35:77:99:69:43:BC:3F:A1:C7:E0:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e203dd47-5250-3894-b533-b6bb526a24ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:eb:e5:b9:fd:b3:e5:be:56:9a:ed:8c:d8:cd:0b:40:84:59: 2c:f5:7f:53:2e:6d:94:a0:01:b5:90:12:11:22:e7:43:94:4e: e2:8c:64:2f:a0:14:01:84:86:61:22:03:35:e8:0a:8f:a8:34: 00:b1:b6:9e:b4:84:26:94:80:1c:01:31:54:6c:a5:70:fc:0e: 1f:26:3e:d1:dc:bf:af:e7:cb:be:f8:20:c6:01:30:a3:32:bc: 03:57:98:b2:70:a0:5a:db:f2:4f:6a:c0:ec:94:15:af:1a:39: bb:b4:f6:7b:e9:83:89:21:45:1c:0f:01:de:e7:e3:4e:00:5a: 26:5e:7c:bf:60:50:b3:48:19:dc:64:35:0a:9d:14:c4:9e:4e: 08:ad:f1:00:7d:3f:6a:e9:3d:40:4d:73:d1:67:04:c9:ef:ce: b0:17:90:fc:4d:e6:8a:fa:22:0a:1b:d4:03:60:6a:c1:97:51: cd:16:c3:33:bb:5f:1e:48:94:1a:94:6c:87:19:b4:7b:a8:aa: 5b:3f:44:b4:2a:bd:87:2f:b6:dc:d5:ca:7c:fc:a5:f3:48:0f: 72:43:24:dc:a2:a0:96:de:e7:ea:ee:c7:44:7e:9a:24:73:2e: 54:be:50:19:26:4c:15:20:f7:ef:b5:3d:5c:8f:8a:25:cf:23: 34:c1:7b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNOuXJ5O+T3EtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTAzM2YwMzgtOWQwNS00MTNhLTk0YmQtZDM4ODBhYmI1NmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTowX2xvIuxhdQJAEcNHEWlWESGE6gijyEXX KIEKhzz85wM3HdBgzFnYUFe0Scx6hY8VEI/mCdQvVwJ6IIabVOr+tAwmUPJlZAZC hZJ8/zvNZsghW459jkNkl48FVxbJgrylLfGEMf+j50rJ2yDqRdMAPOrnD8zUMmTc nGbIfhLib3DU5tAVj65nsu/G9KQEFSj3w9G3Y2BW+sHcHmr3mXQlWv7scKlEmKSg ua/YmOqo49TG+diUOp9OTYqvYW5KUW/wnhp5P3AFf6GwbwawTVt24Hg8XXlx05O8 ycR0Jo2dYO1FPXc8OhWQmtc3Vi+pd1D9xUmqyw0u0+Beaarf0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhYh3KT+yAbtDV3mWlDvD+hx+CqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIwM2RkNDctNTI1MC0z ODk0LWI1MzMtYjZiYjUyNmEyNGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3r5bn9s+W+VprtjNjNC0CEWSz1f1MubZSgAbWQEhEi50OUTuKMZC+g FAGEhmEiAzXoCo+oNACxtp60hCaUgBwBMVRspXD8Dh8mPtHcv6/ny774IMYBMKMy vANXmLJwoFrb8k9qwOyUFa8aObu09nvpg4khRRwPAd7n404AWiZefL9gULNIGdxk NQqdFMSeTgit8QB9P2rpPUBNc9FnBMnvzrAXkPxN5or6Igob1ANgasGXUc0WwzO7 Xx5IlBqUbIcZtHuoqls/RLQqvYcvttzVynz8pfNID3JDJNyioJbe5+rux0R+miRz LlS+UBkmTBUg9++1PVyPiiXPIzTBeyk= -----END CERTIFICATE-----Generated at Sun Oct 19 23:55:48 2025 by rpki-client