$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa File: e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa (raw, json) Hash identifier: OfTHqG9Y3lRyUvuQ7anlueZdH1cNSU1jfYXHxjYjhww= Subject key identifier: D1:E1:22:DE:0B:0B:00:CC:03:B0:D5:CA:CF:47:1E:C2:82:E4:F9:CD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCCE795CCA9ED1B64D1B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 70.41.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:ce:79:5c:ca:9e:d1:b6:4d:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8cb21ba7-7c5d-4839-b798-345968fa932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:97:7f:81:7d:09:20:41:e1:35:b5:48:a9:ce: 29:0d:53:1a:da:e2:e0:7b:28:23:4e:85:d0:3d:62: 2a:dd:66:fd:67:95:e3:db:5f:bc:b6:4d:2b:0c:df: 58:15:fd:f1:e3:24:09:d1:ee:98:e2:8f:9d:d6:b1: 4f:89:60:da:9d:09:71:55:ab:cd:fd:43:ad:05:92: 68:7a:a7:ff:03:e0:a9:12:89:d1:4d:4b:06:f2:f0: b5:28:44:a8:40:06:32:c0:54:24:19:9f:1a:d7:ac: 1b:d7:ff:33:a7:33:8b:32:e1:f0:d5:74:7e:35:8f: ff:f2:25:82:c8:24:e3:75:de:30:87:d5:4e:13:a0: ec:10:70:7e:0a:43:4f:7f:26:f8:10:f5:c7:2c:63: 6b:4c:ce:dc:22:82:fd:0d:44:32:d8:9f:bc:c0:a5: 95:6b:03:4b:9e:79:e5:7f:c0:88:58:d1:94:4a:78: f4:ae:0f:f7:16:b3:d9:b9:a4:c8:5e:0e:b6:fd:e4: bf:d3:be:31:cc:8d:30:d1:ef:40:fa:19:cd:a7:0b: da:91:ec:65:69:54:d2:ee:ef:53:57:b8:d4:73:69: b7:2d:79:de:cd:a2:27:a9:a7:7a:28:92:fd:63:de: 99:6c:9b:85:ad:71:5e:c6:d8:42:ba:2b:71:62:92: f4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E1:22:DE:0B:0B:00:CC:03:B0:D5:CA:CF:47:1E:C2:82:E4:F9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e620e2fd-02a1-39ae-aa3f-6fe650e2a4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:a7:ba:ba:b1:62:f3:86:5a:9c:7b:3e:63:9a:4a:45:46:e8: bf:fa:db:53:16:d1:2c:0a:fe:81:e1:1a:fd:f1:06:d1:ae:d0: 2b:e7:a8:94:dc:64:13:ab:79:3d:6b:8e:8a:d2:18:70:23:90: 5e:f6:7a:e6:a7:53:4d:5d:a6:75:1a:b3:e7:88:e4:b0:4d:1d: 76:8e:da:c4:ed:ba:68:01:1c:38:36:91:af:48:fb:45:77:f2: ae:3f:6a:74:67:0c:88:61:5f:32:a2:da:5d:09:47:1c:0c:d3: 99:5a:aa:b7:d2:5c:bd:ba:11:1c:a9:da:17:58:1a:23:18:42: aa:95:d5:5f:ab:40:7a:00:52:5b:b9:09:d5:a5:9f:48:a3:2f: 8d:8e:bc:a8:37:2e:55:c7:f2:fd:7d:cf:eb:67:9f:0d:3b:31: ce:16:9b:e5:66:17:65:ac:6d:7f:c7:17:21:9d:75:24:c6:49: 0e:54:ad:a5:b1:fd:d2:1a:4d:d4:f2:2e:67:68:55:e7:ec:bf: bd:f0:96:40:39:aa:ce:c0:94:63:da:c2:0c:3a:46:2a:04:ad: 1d:0e:d7:12:f6:76:55:0e:88:2a:f0:25:79:d0:8d:9f:82:05: bb:c8:af:9c:df:6e:55:16:0f:6d:df:cd:11:af:c5:cc:d0:2b: 73:16:cc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzM55XMqe0bZNGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGNiMjFiYTctN2M1ZC00ODM5LWI3OTgtMzQ1OTY4ZmE5MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJd/gX0JIEHhNbVIqc4pDVMa2uLgeygjToXQ PWIq3Wb9Z5Xj21+8tk0rDN9YFf3x4yQJ0e6Y4o+d1rFPiWDanQlxVavN/UOtBZJo eqf/A+CpEonRTUsG8vC1KESoQAYywFQkGZ8a16wb1/8zpzOLMuHw1XR+NY//8iWC yCTjdd4wh9VOE6DsEHB+CkNPfyb4EPXHLGNrTM7cIoL9DUQy2J+8wKWVawNLnnnl f8CIWNGUSnj0rg/3FrPZuaTIXg62/eS/074xzI0w0e9A+hnNpwvakexlaVTS7u9T V7jUc2m3LXnezaInqad6KJL9Y96ZbJuFrXFexthCuitxYpL0LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHhIt4LCwDMA7DVys9HHsKC5PnNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTYyMGUyZmQtMDJhMS0z OWFlLWFhM2YtNmZlNjUwZTJhNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWnurqxYvOGWpx7PmOaSkVG6L/621MW0SwK/oHhGv3xBtGu0CvnqJTc ZBOreT1rjorSGHAjkF72euanU01dpnUas+eI5LBNHXaO2sTtumgBHDg2ka9I+0V3 8q4/anRnDIhhXzKi2l0JRxwM05laqrfSXL26ERyp2hdYGiMYQqqV1V+rQHoAUlu5 CdWln0ijL42OvKg3LlXH8v19z+tnnw07Mc4Wm+VmF2WsbX/HFyGddSTGSQ5UraWx /dIaTdTyLmdoVefsv73wlkA5qs7AlGPawgw6RioErR0O1xL2dlUOiCrwJXnQjZ+C BbvIr5zfblUWD23fzRGvxczQK3MWzL0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:56 2025 by rpki-client