$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa File: 090d7b9a-cfa4-38dc-90ad-396577649ccd.roa (raw, json) Hash identifier: V2UWwnwiZA0IE+mf063+uL0ghcSEwERvM4mbq0j3aLc= Subject key identifier: 98:49:E1:6A:AC:1B:32:84:35:2A:8A:84:C4:58:B4:54:E9:60:CA:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFAF68AD0435DDF1CF48E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:af:68:ad:04:35:dd:f1:cf:48:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7c430991-000e-4241-a3bc-24ac7756eed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:bd:2b:36:83:52:f9:76:d2:9f:17:0d:46: 45:d9:0f:22:d4:31:06:9a:12:d3:24:6c:2b:bc:7c: a2:dc:44:07:93:cc:24:ae:f8:2f:92:d9:b6:89:c9: 06:08:03:5f:82:f2:59:40:7b:73:96:df:e0:a1:e7: ed:18:76:d6:bb:5a:c3:0a:43:b8:90:9b:ff:98:c5: 9c:3b:4b:01:c6:08:94:2e:1d:fa:92:73:e0:6b:15: c6:a2:0d:9c:cd:13:b3:2b:40:22:fd:a6:b3:ad:2d: d3:8a:2e:53:49:40:e8:7a:3e:1d:bc:dc:3a:4d:c0: 96:ac:7c:21:b4:6e:86:ee:b8:57:94:cb:f8:68:f0: 1a:1b:2f:36:9f:46:7b:e1:05:88:b2:d8:93:02:53: e0:af:68:0b:98:5d:b2:1b:91:0a:70:7c:64:7a:e7: 93:96:e3:96:34:27:70:10:29:85:53:75:7a:9a:d1: 58:21:40:64:75:73:70:4c:df:af:ec:92:7c:06:fb: c2:55:f1:37:91:08:a6:79:94:66:37:a8:f3:9a:66: c8:03:3b:98:28:13:31:5d:fa:1a:7b:ae:4c:c4:8f: 5b:94:ca:61:d8:43:d5:47:17:ab:fd:35:c5:6a:54: d1:be:4e:53:05:a1:ac:cf:9f:d4:6a:0a:2b:c4:86: 2e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:49:E1:6A:AC:1B:32:84:35:2A:8A:84:C4:58:B4:54:E9:60:CA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/090d7b9a-cfa4-38dc-90ad-396577649ccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c0:a3:3d:24:c0:d7:6c:eb:92:59:0f:ea:fe:f6:0d:f5:64: 0a:d9:49:88:42:44:d1:82:92:ce:d0:f9:0b:08:53:13:bc:85: 4f:5f:3f:5e:15:5c:eb:ff:05:6d:54:74:ed:80:be:43:61:77: 70:a4:5d:90:4c:95:fc:a0:8f:9b:f3:04:4f:03:1e:ca:2e:6d: c7:b1:91:7a:f5:54:f9:a2:03:64:b0:6a:d1:79:11:4a:12:e0: 6c:2e:f7:44:06:72:34:db:ce:ed:6d:b7:14:70:1d:b0:d2:8b: 23:b1:67:77:e6:43:99:36:19:45:39:12:0d:29:51:45:bb:b6: c2:a2:18:9c:17:17:c0:ab:39:c4:3c:2a:07:07:c6:da:cf:7d: 75:33:8e:fe:a7:7f:15:1e:b4:3f:b1:14:af:d5:5a:54:d2:c9: fe:cc:4f:c9:1a:d0:74:c3:05:e8:5a:03:16:36:32:72:5a:28: 83:ad:a8:db:6e:be:00:b1:5c:cf:56:ca:cd:5d:00:9c:a8:51: 7b:73:a2:61:09:70:90:92:2e:5b:a7:38:0f:34:36:3e:ba:85: 46:7d:7f:93:8d:61:b2:f2:3c:cf:9a:df:7e:e3:7e:1f:14:3f: bc:87:04:98:57:ad:65:97:d5:58:e9:fc:b8:ae:01:dc:0e:ca: 50:f6:19:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k369orQQ13fHPSOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2M0MzA5OTEtMDAwZS00MjQxLWEzYmMtMjRhYzc3NTZlZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYK9KzaDUvl20p8XDUZF2Q8i1DEGmhLTJGwr vHyi3EQHk8wkrvgvktm2ickGCANfgvJZQHtzlt/goeftGHbWu1rDCkO4kJv/mMWc O0sBxgiULh36knPgaxXGog2czROzK0Ai/aazrS3Tii5TSUDoej4dvNw6TcCWrHwh tG6G7rhXlMv4aPAaGy82n0Z74QWIstiTAlPgr2gLmF2yG5EKcHxkeueTluOWNCdw ECmFU3V6mtFYIUBkdXNwTN+v7JJ8BvvCVfE3kQimeZRmN6jzmmbIAzuYKBMxXfoa e65MxI9blMph2EPVRxer/TXFalTRvk5TBaGsz5/UagorxIYunQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhJ4WqsGzKENSqKhMRYtFTpYMoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDkwZDdiOWEtY2ZhNC0z OGRjLTkwYWQtMzk2NTc3NjQ5Y2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiklMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjAoz0kwNds65JZD+r+9g31ZArZSYhCRNGCks7Q+QsIUxO8hU9fP14V XOv/BW1UdO2AvkNhd3CkXZBMlfygj5vzBE8DHsoubcexkXr1VPmiA2SwatF5EUoS 4Gwu90QGcjTbzu1ttxRwHbDSiyOxZ3fmQ5k2GUU5Eg0pUUW7tsKiGJwXF8CrOcQ8 KgcHxtrPfXUzjv6nfxUetD+xFK/VWlTSyf7MT8ka0HTDBehaAxY2MnJaKIOtqNtu vgCxXM9Wys1dAJyoUXtzomEJcJCSLlunOA80Nj66hUZ9f5ONYbLyPM+a337jfh8U P7yHBJhXrWWX1Vjp/LiuAdwOylD2GXM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:15 2026 by rpki-client