$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa File: f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa (raw, json) Hash identifier: p8J72gquQU9x442ekmLBHzSfR3/dvYQYNR4//yoHmmY= Subject key identifier: 56:4C:1B:C3:C5:FB:4D:4E:A4:7A:52:5D:40:15:83:CA:3A:59:E3:BD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD7A7F784915F8BE7F9240 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 40306 IP address blocks: 70.41.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:7a:7f:78:49:15:f8:be:7f:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2e504580-43ed-4b30-91e3-b3abf1125dff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:51:ff:2a:1b:52:4d:fb:b3:d0:14:37:68: 00:5e:6c:32:07:c0:e4:58:de:25:b4:be:33:4f:ae: 3d:09:10:99:be:22:44:52:b0:c3:fe:ca:91:1b:90: 0c:1e:ed:0e:de:ba:ba:ec:99:af:82:cf:81:ff:e4: d0:cf:17:d0:79:31:48:be:c8:38:fa:52:33:91:1d: 67:c2:25:10:51:40:a7:b4:6c:86:90:e6:6d:7e:a3: 7d:9c:72:da:a1:fe:2f:10:14:3e:c2:18:bc:da:44: eb:7f:f2:78:17:ad:c1:5f:15:f0:05:14:82:2a:2e: c5:5e:66:29:cf:32:ae:ce:f1:37:e3:33:d6:a4:74: fc:0b:38:58:a4:d2:38:20:70:25:f4:9b:39:ee:34: 07:a0:35:43:7e:9e:e0:a6:3d:3a:05:5e:a5:5b:1b: 3a:c6:f8:62:1f:1b:18:92:fa:1e:56:ca:ef:cf:70: 48:7b:5f:a1:10:8b:51:91:bc:bc:70:6a:c4:cf:b5: 35:f6:55:e6:cc:d1:c2:27:e5:61:59:f4:25:20:e9: 8c:7b:82:88:bc:8f:56:63:f0:71:6d:5d:94:31:f2: 18:ce:3d:56:4e:d3:60:30:3a:32:c5:62:36:57:f1: a2:e2:81:06:2d:1e:b0:3a:d2:32:84:38:77:8e:b7: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4C:1B:C3:C5:FB:4D:4E:A4:7A:52:5D:40:15:83:CA:3A:59:E3:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2c29b15-cd11-35c8-acf6-cd212e61e8c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b9:08:60:7d:44:6a:a6:d9:00:6d:4c:73:c3:c6:50:b8:c3: bc:9b:f0:94:dc:90:1b:d0:d9:4e:d0:da:32:d0:14:99:e6:e0: a0:60:58:61:41:89:1d:1d:ed:71:a3:36:3b:fa:d8:ed:5c:c8: 9e:6d:d4:6e:ab:37:0f:5c:f0:44:30:dc:c0:b1:49:c4:92:c4: 82:b6:63:50:e1:60:3f:b9:77:12:8a:f6:6c:cc:fe:33:d9:74: 31:32:ee:b0:fb:19:fd:d1:d5:68:b2:a6:c4:79:9d:9f:ad:24: 05:2a:c0:08:b1:ae:76:37:1f:d6:06:2d:45:6e:c8:d9:47:53: 60:c0:ca:c1:ff:e2:cc:02:20:22:83:16:a7:92:b4:4b:a8:12: b3:69:db:64:bc:ea:e2:da:e3:0f:73:6c:0d:a0:f7:5b:50:c2: 55:73:a2:fb:3f:8c:22:81:f5:b0:06:3b:5f:48:e6:52:5a:99: 39:20:d5:14:06:2b:89:44:a8:40:a1:56:8b:c9:f9:61:35:da: aa:a0:fa:a8:36:01:e9:ac:09:b8:12:93:bf:f9:bc:c8:08:65: 1b:36:24:dd:0a:e0:69:27:5c:b3:59:07:39:31:a9:73:9f:7d: b1:fd:3e:82:35:95:dd:25:9b:b5:07:9c:aa:e2:ff:67:a6:ea: fa:06:43:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzXp/eEkV+L5/kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmU1MDQ1ODAtNDNlZC00YjMwLTkxZTMtYjNhYmYxMTI1ZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljBR/yobUk37s9AUN2gAXmwyB8DkWN4ltL4z T649CRCZviJEUrDD/sqRG5AMHu0O3rq67Jmvgs+B/+TQzxfQeTFIvsg4+lIzkR1n wiUQUUCntGyGkOZtfqN9nHLaof4vEBQ+whi82kTrf/J4F63BXxXwBRSCKi7FXmYp zzKuzvE34zPWpHT8CzhYpNI4IHAl9Js57jQHoDVDfp7gpj06BV6lWxs6xvhiHxsY kvoeVsrvz3BIe1+hEItRkby8cGrEz7U19lXmzNHCJ+VhWfQlIOmMe4KIvI9WY/Bx bV2UMfIYzj1WTtNgMDoyxWI2V/Gi4oEGLR6wOtIyhDh3jrcIJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZMG8PF+01OpHpSXUAVg8o6WeO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJjMjliMTUtY2QxMS0z NWM4LWFjZjYtY2QyMTJlNjFlOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG5CGB9RGqm2QBtTHPDxlC4w7yb8JTckBvQ2U7Q2jLQFJnm4KBgWGFB iR0d7XGjNjv62O1cyJ5t1G6rNw9c8EQw3MCxScSSxIK2Y1DhYD+5dxKK9mzM/jPZ dDEy7rD7Gf3R1WiypsR5nZ+tJAUqwAixrnY3H9YGLUVuyNlHU2DAysH/4swCICKD FqeStEuoErNp22S86uLa4w9zbA2g91tQwlVzovs/jCKB9bAGO19I5lJamTkg1RQG K4lEqEChVovJ+WE12qqg+qg2AemsCbgSk7/5vMgIZRs2JN0K4GknXLNZBzkxqXOf fbH9PoI1ld0lm7UHnKri/2em6voGQ3s= -----END CERTIFICATE-----Generated at Wed Nov 5 10:47:51 2025 by rpki-client