$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b391b3-dee9-3d03-a856-2245f30e4fdf.roa File: 18b391b3-dee9-3d03-a856-2245f30e4fdf.roa (raw, json) Hash identifier: 4RXlfHVwTv7CgSw5JZ3XbuidE6+lPU51AR9DcNG88wU= Subject key identifier: CF:0F:A7:41:6C:1A:11:01:6C:F1:5F:0A:AC:2A:A3:00:D5:7F:C1:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB164A78C4549CF5DC380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b391b3-dee9-3d03-a856-2245f30e4fdf.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b1:64:a7:8c:45:49:cf:5d:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=acb8d1da-5764-4c95-b0e3-44426785f544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0a:e7:0c:c7:9a:2f:37:a8:44:cf:96:17:54: af:42:02:57:79:51:38:4a:0f:3c:ca:40:f9:c6:c5: 51:5d:e2:f6:37:b0:1a:3e:5f:f4:2d:28:c6:85:ca: 79:da:dc:f4:2a:bb:52:7c:67:cd:68:9e:04:4e:7d: d0:a8:20:11:28:ea:a5:c1:7d:6a:31:4c:fe:7c:d1: b4:75:d1:c5:c8:4c:99:34:98:a1:74:48:7e:d2:48: 5e:be:60:ac:35:ea:cc:6a:c0:d8:05:66:b0:13:eb: 35:d1:b6:4a:70:34:43:ad:c6:c9:3f:b1:bc:eb:b3: 43:ac:0e:11:68:92:51:04:9e:f3:6b:60:be:9b:e1: 67:c7:e6:44:ba:a0:7c:d9:40:8f:a9:b8:ff:07:18: e4:a0:cd:1f:ba:ba:57:37:32:e5:4f:70:13:45:a4: 75:60:b8:3d:3d:58:48:76:db:4a:6c:5e:bd:96:f6: fb:98:e5:4d:a4:cf:ea:7d:f9:90:26:84:38:cb:0e: 98:35:7b:0e:b6:00:51:de:3f:72:ae:1d:c8:f5:46: 9c:6e:cc:ed:58:a3:a6:aa:b2:fe:92:88:c3:b4:03: 7e:03:13:af:03:71:78:a6:c5:3a:68:4b:0f:0f:0f: 5b:47:2d:82:0b:5f:3b:68:65:c3:31:3f:e5:e0:eb: fe:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0F:A7:41:6C:1A:11:01:6C:F1:5F:0A:AC:2A:A3:00:D5:7F:C1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/18b391b3-dee9-3d03-a856-2245f30e4fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:39:58:01:06:f4:d0:f7:1f:74:61:16:be:e1:55:34:0a:7b: b7:d1:cb:43:f0:c4:e5:10:47:bb:6b:dc:ae:4a:c3:5e:10:91: 29:8a:10:dc:e2:a1:71:30:d8:f2:2f:ec:ab:da:00:5b:7d:45: f3:88:98:66:05:32:8d:3c:41:43:05:3c:ec:5f:5e:6f:3b:b9: 00:f4:9f:49:6a:8b:40:27:62:21:e8:39:2d:75:7a:13:ce:8e: a7:8b:da:7c:ca:64:4c:4f:a9:53:15:3e:b7:93:38:b9:1f:b4: 1b:05:03:f2:18:2a:67:c0:a9:0f:1c:b8:01:a2:3b:a0:10:5f: 35:72:40:84:ff:4a:e4:0e:1d:df:9d:57:c7:cb:9e:f2:4b:64: 88:88:88:42:d9:ee:c4:1b:6b:1f:b1:27:0f:a5:db:50:45:11: 5a:cb:6e:0a:4a:bb:0d:65:a7:a4:6d:b4:3d:d9:eb:73:9e:4b: 55:26:77:30:af:1b:9c:a1:54:6f:88:5e:ad:c2:42:f6:fe:81: 41:fa:c0:94:8e:f5:a8:85:e1:61:e7:d4:79:81:e7:f7:fc:28: 8e:a4:74:da:15:ea:2a:87:1f:3b:69:a5:11:6e:cd:d5:58:04: fc:6a:a5:00:1c:42:e3:22:2e:a1:c8:93:5c:c3:4b:47:88:04: ce:1a:91:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37Fkp4xFSc9dw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWNiOGQxZGEtNTc2NC00Yzk1LWIwZTMtNDQ0MjY3ODVmNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwrnDMeaLzeoRM+WF1SvQgJXeVE4Sg88ykD5 xsVRXeL2N7AaPl/0LSjGhcp52tz0KrtSfGfNaJ4ETn3QqCARKOqlwX1qMUz+fNG0 ddHFyEyZNJihdEh+0khevmCsNerMasDYBWawE+s10bZKcDRDrcbJP7G867NDrA4R aJJRBJ7za2C+m+Fnx+ZEuqB82UCPqbj/BxjkoM0furpXNzLlT3ATRaR1YLg9PVhI dttKbF69lvb7mOVNpM/qffmQJoQ4yw6YNXsOtgBR3j9yrh3I9UacbsztWKOmqrL+ kojDtAN+AxOvA3F4psU6aEsPDw9bRy2CC187aGXDMT/l4Ov+swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8Pp0FsGhEBbPFfCqwqowDVf8HAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMThiMzkxYjMtZGVlOS0z ZDAzLWE4NTYtMjI0NWYzMGU0ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE05WAEG9ND3H3RhFr7hVTQKe7fRy0PwxOUQR7tr3K5Kw14QkSmKENzi oXEw2PIv7KvaAFt9RfOImGYFMo08QUMFPOxfXm87uQD0n0lqi0AnYiHoOS11ehPO jqeL2nzKZExPqVMVPreTOLkftBsFA/IYKmfAqQ8cuAGiO6AQXzVyQIT/SuQOHd+d V8fLnvJLZIiIiELZ7sQbax+xJw+l21BFEVrLbgpKuw1lp6RttD3Z63OeS1UmdzCv G5yhVG+IXq3CQvb+gUH6wJSO9aiF4WHn1HmB5/f8KI6kdNoV6iqHHztppRFuzdVY BPxqpQAcQuMiLqHIk1zDS0eIBM4akeo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:17 2026 by rpki-client