$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00a5b76a-6e4a-3fb5-8ad7-0d46bb390fb5.roa File: 00a5b76a-6e4a-3fb5-8ad7-0d46bb390fb5.roa (raw, json) Hash identifier: yU5aVhISzumnZFh27FVVMeNaplA3BFyLAdDMh7xd0d0= Subject key identifier: 74:5B:11:8E:16:6F:73:16:DC:09:24:60:15:1B:90:93:41:C4:E5:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB3EE1531A459804A8E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00a5b76a-6e4a-3fb5-8ad7-0d46bb390fb5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b3:ee:15:31:a4:59:80:4a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b7e35c1b-dc7d-46a0-9259-c632c2f0bb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:64:45:a7:87:a6:ce:d7:68:65:51:7e:8b:b9: 04:e7:52:3a:e7:c8:4c:a2:82:c7:d6:b9:b6:d2:d0: 61:a1:d4:58:ff:9e:f4:ad:25:f1:0c:f4:37:bf:38: de:1a:b1:d5:39:22:d4:62:49:6e:67:7d:12:5c:6e: f9:51:20:9e:b4:2c:67:88:8e:ae:93:96:eb:f6:8a: 78:00:b3:61:2d:8e:1f:fc:3d:d3:40:c9:23:d7:e9: 85:10:38:a9:2f:72:8f:17:f0:06:f6:de:df:e4:15: 7f:be:89:a1:05:03:bc:32:38:34:0f:2a:f3:00:e8: 61:bf:aa:ba:79:46:5a:81:45:80:6b:cf:cb:4a:f0: be:d9:33:f5:ff:e0:9a:db:aa:56:12:5d:bc:8c:f7: 2c:6c:1d:66:ae:95:11:44:bf:b1:3c:33:6d:db:40: a2:1a:bf:5d:45:4e:ed:8e:10:a2:42:01:4c:fb:b7: eb:ca:f7:4e:e5:92:5e:19:01:d4:a6:65:b2:b6:42: 37:36:05:cc:44:de:28:a7:a1:ac:9e:d9:91:7f:5f: f4:f2:4c:4b:e4:46:8b:4b:f5:ad:2d:9f:e1:42:95: fb:28:1c:fd:4c:fa:da:82:d6:ba:06:62:4b:a1:94: f8:d9:18:9a:9c:6a:df:12:86:7c:f6:90:4f:65:c7: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5B:11:8E:16:6F:73:16:DC:09:24:60:15:1B:90:93:41:C4:E5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/00a5b76a-6e4a-3fb5-8ad7-0d46bb390fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ee:94:99:2c:e9:cc:cc:4c:bb:8e:73:95:fc:c9:08:2f:14: 23:26:66:97:d6:49:b7:8b:2c:f4:4a:4f:15:b4:e7:e0:af:de: 23:dd:0a:57:2f:c8:4f:62:30:e4:bb:e3:b9:41:08:96:4f:47: 82:e0:bd:a2:0a:8a:25:4b:41:de:66:8a:8e:d4:e2:64:c7:73: 0c:46:43:5e:bb:b2:33:c6:0b:c1:fb:77:7c:dd:8b:3e:c2:1d: aa:31:d4:c7:e1:7a:68:a2:a2:b9:77:9a:c2:56:91:ff:1d:02: fe:42:a5:e8:1c:24:3f:bd:b0:b6:79:c9:71:e8:b4:0f:7f:4d: b9:52:1c:da:5d:99:7e:68:83:a4:0b:12:72:53:c2:ac:66:21: 23:59:05:2e:1f:3d:72:63:9e:30:71:7c:d6:f0:27:b3:36:9f: 92:ef:1b:85:7c:2b:51:30:a8:d1:d5:19:10:00:df:a4:05:57: 27:10:08:90:53:4e:c7:69:1f:e0:4f:f5:e3:ed:31:c8:45:94: 95:4b:3a:af:09:f8:8c:59:ce:ed:10:b3:95:1c:e2:6a:15:c5: 0c:c6:86:b1:0e:7c:dd:f3:6d:b2:05:22:71:19:6f:98:f4:b0: 7d:48:37:1d:21:49:79:a3:c8:09:25:96:bc:cf:c1:0b:4c:c6: 3e:25:54:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37PuFTGkWYBKjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjdlMzVjMWItZGM3ZC00NmEwLTkyNTktYzYzMmMyZjBiYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2RFp4emztdoZVF+i7kE51I658hMooLH1rm2 0tBhodRY/570rSXxDPQ3vzjeGrHVOSLUYkluZ30SXG75USCetCxniI6uk5br9op4 ALNhLY4f/D3TQMkj1+mFEDipL3KPF/AG9t7f5BV/vomhBQO8Mjg0DyrzAOhhv6q6 eUZagUWAa8/LSvC+2TP1/+Ca26pWEl28jPcsbB1mrpURRL+xPDNt20CiGr9dRU7t jhCiQgFM+7fryvdO5ZJeGQHUpmWytkI3NgXMRN4op6GsntmRf1/08kxL5EaLS/Wt LZ/hQpX7KBz9TPragta6BmJLoZT42RianGrfEoZ89pBPZcddVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRbEY4Wb3MW3AkkYBUbkJNBxOU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDBhNWI3NmEtNmU0YS0z ZmI1LThhZDctMGQ0NmJiMzkwZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjulJks6czMTLuOc5X8yQgvFCMmZpfWSbeLLPRKTxW05+Cv3iPdClcv yE9iMOS747lBCJZPR4LgvaIKiiVLQd5mio7U4mTHcwxGQ167sjPGC8H7d3zdiz7C Haox1Mfhemiiorl3msJWkf8dAv5CpegcJD+9sLZ5yXHotA9/TblSHNpdmX5og6QL EnJTwqxmISNZBS4fPXJjnjBxfNbwJ7M2n5LvG4V8K1EwqNHVGRAA36QFVycQCJBT TsdpH+BP9ePtMchFlJVLOq8J+IxZzu0Qs5Uc4moVxQzGhrEOfN3zbbIFInEZb5j0 sH1INx0hSXmjyAkllrzPwQtMxj4lVC0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:02:23 2026 by rpki-client