$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa File: afc85658-0cf7-3600-a645-0617e49b0ac0.roa (raw, json) Hash identifier: O6rK+ZosW/uPiyOiXLh4AjbPLSL0EAV9P6/2x5NOEsE= Subject key identifier: A1:28:D6:98:06:13:63:1C:95:34:01:B6:10:38:CE:81:B3:A6:9D:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8C70D01BA65EABC485EF4B52 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 70.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:d0:1b:a6:5e:ab:c4:85:ef:4b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=a300f19b-75a7-4335-8cad-355ca213498b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:39:83:09:52:d2:42:34:a2:f7:44:12:a8: d2:84:c1:7b:26:b8:72:68:8d:86:d8:2f:52:fe:c4: 73:96:c6:68:6e:a6:a8:e3:af:e9:7a:db:c5:70:66: 70:e1:69:25:70:b1:de:89:08:23:24:07:20:94:28: 25:18:ee:96:96:d4:b0:a6:63:e8:cb:66:f1:eb:1f: 88:b8:dc:9f:6a:86:db:4c:07:a8:68:d0:25:6e:ad: 7c:8a:77:16:8b:5b:b8:25:d0:50:ff:56:36:6c:64: 52:48:3e:4a:e4:6f:92:f1:04:e2:07:47:74:3c:6c: b6:1d:b7:76:3e:d3:04:c9:bb:88:97:40:fc:0c:a2: 0a:67:27:d4:73:fe:53:f8:6f:19:ab:d8:02:8a:a1: c4:9c:eb:b3:60:e3:06:36:87:b8:6d:c7:ff:eb:9c: bc:05:07:f3:4c:c3:e8:7a:43:a7:55:3c:e0:e1:b4: 57:eb:91:5b:0e:b1:96:9b:9b:fc:6c:85:c1:54:3a: a6:93:20:13:a3:88:0b:ca:22:3b:d4:9b:c2:ba:d5: 0f:98:2d:c9:41:95:4e:53:bc:57:1f:9d:e0:01:16: 48:d8:00:9f:f0:fe:43:10:b9:3d:a4:bc:69:be:24: b7:4a:cd:57:47:53:50:ac:0c:b6:75:6c:d6:8f:22: 63:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:28:D6:98:06:13:63:1C:95:34:01:B6:10:38:CE:81:B3:A6:9D:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afc85658-0cf7-3600-a645-0617e49b0ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:8b:fc:70:0a:fe:bb:09:dd:11:ee:d0:33:2e:fd:01:6b:b5: 52:4d:13:c9:0b:72:25:ca:bb:11:c8:f8:79:82:f7:18:2e:6e: ac:df:50:40:7b:c3:22:de:86:8f:6b:b2:b9:7b:74:09:20:52: c0:38:0d:55:76:0c:d9:9e:36:90:cb:14:9c:5e:e5:bc:61:7c: 9d:a2:5b:05:56:a5:ac:38:3a:ae:37:dd:28:2e:d7:fb:9f:2f: ac:c4:27:04:57:48:a1:85:b4:7e:ff:1e:1e:ef:c0:27:7e:d4: ec:bf:fc:7b:42:e5:f1:bc:39:54:30:1c:4f:c6:a8:d4:34:92: 6b:e4:d6:da:8c:09:4f:24:c7:3f:cf:7b:4b:dc:9a:d7:4c:20: d5:c5:02:05:f3:b2:36:1b:2a:2e:c7:60:93:9d:ec:f8:43:9c: be:88:fd:da:d6:df:21:91:2d:cd:87:6b:74:8f:a7:d8:48:04: 55:29:de:b9:07:2b:53:2c:30:e6:e8:e6:d1:9d:74:ba:61:25: be:5a:e8:ce:91:c4:c6:11:07:5c:5a:07:dd:aa:7f:d7:80:01: 99:74:21:ee:01:fc:a5:ac:1c:54:ef:a4:59:ee:04:08:8c:41: f3:b0:cc:4e:2c:3a:df:6b:71:1a:31:ba:ff:46:2d:99:73:6f: 58:fb:43:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNAbpl6rxIXvS1IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk YTMwMGYxOWItNzVhNy00MzM1LThjYWQtMzU1Y2EyMTM0OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm05gwlS0kI0ovdEEqjShMF7JrhyaI2G2C9S /sRzlsZobqao46/petvFcGZw4WklcLHeiQgjJAcglCglGO6WltSwpmPoy2bx6x+I uNyfaobbTAeoaNAlbq18incWi1u4JdBQ/1Y2bGRSSD5K5G+S8QTiB0d0PGy2Hbd2 PtMEybuIl0D8DKIKZyfUc/5T+G8Zq9gCiqHEnOuzYOMGNoe4bcf/65y8BQfzTMPo ekOnVTzg4bRX65FbDrGWm5v8bIXBVDqmkyATo4gLyiI71JvCutUPmC3JQZVOU7xX H53gARZI2ACf8P5DELk9pLxpviS3Ss1XR1NQrAy2dWzWjyJjtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEo1pgGE2MclTQBthA4zoGzpp2IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWZjODU2NTgtMGNmNy0z NjAwLWE2NDUtMDYxN2U0OWIwYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARineMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaL/HAK/rsJ3RHu0DMu/QFrtVJNE8kLciXKuxHI+HmC9xgubqzfUEB7 wyLeho9rsrl7dAkgUsA4DVV2DNmeNpDLFJxe5bxhfJ2iWwVWpaw4Oq433Sgu1/uf L6zEJwRXSKGFtH7/Hh7vwCd+1Oy//HtC5fG8OVQwHE/GqNQ0kmvk1tqMCU8kxz/P e0vcmtdMINXFAgXzsjYbKi7HYJOd7PhDnL6I/drW3yGRLc2Ha3SPp9hIBFUp3rkH K1MsMObo5tGddLphJb5a6M6RxMYRB1xaB92qf9eAAZl0Ie4B/KWsHFTvpFnuBAiM QfOwzE4sOt9rcRoxuv9GLZlzb1j7Q4Y= -----END CERTIFICATE-----Generated at Wed Aug 6 16:04:35 2025 by rpki-client