$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa File: 1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa (raw, json) Hash identifier: +IA4ilbuzntePiletbE9ZqXP3/iWPTCz1YICi3MIf24= Subject key identifier: 88:DF:59:45:02:A7:D9:FF:C8:4F:4E:C0:6B:26:D8:78:91:51:64:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF82148A4DB7DAF8CC390 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f8:21:48:a4:db:7d:af:8c:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4140dcfa-3df3-42b0-ad20-08c36fc0c8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a9:7f:5f:c5:4d:5e:4b:5e:72:55:8a:85:cf: 51:68:94:37:4d:34:b3:0f:8e:8c:83:f2:08:30:d2: 22:8d:00:f0:38:23:01:1b:1e:dd:e5:64:b1:29:28: 78:bf:1c:87:b9:85:ae:75:02:99:2a:8b:0d:ef:6c: 62:92:07:72:1e:50:65:9d:8c:01:3f:1c:94:c1:d8: 96:0b:8b:ac:78:a6:b2:6a:33:4c:a9:36:ad:1f:d1: cb:4f:df:ad:09:36:b9:a9:29:fd:c8:ae:46:dd:5a: 12:5b:9c:08:75:25:05:d5:fd:fc:7b:53:ff:69:6a: c2:14:b7:fc:f0:86:ad:fa:25:37:aa:67:d9:10:85: b1:9b:7b:78:29:d2:85:db:d1:af:11:6a:e5:8c:f4: c3:1c:0c:78:9d:87:0a:f9:5c:96:74:2b:be:c8:ff: 0e:dd:34:d3:82:43:03:5b:74:c6:8c:98:86:40:fa: c5:15:22:63:76:e6:80:e2:0b:41:c5:1f:8e:64:8d: 34:94:25:c7:d7:61:2f:2a:e2:8d:86:ba:9d:83:58: bc:03:12:af:99:65:43:53:77:ac:30:fb:fc:4a:3b: eb:d0:44:ef:1a:81:c7:3d:42:aa:66:97:9e:3b:eb: 96:83:c4:e5:92:1f:97:90:8d:00:c1:23:ae:46:da: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:59:45:02:A7:D9:FF:C8:4F:4E:C0:6B:26:D8:78:91:51:64:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1b:79:7f:5f:ed:02:0c:2f:97:b3:8b:51:be:a1:81:86:f3: 35:d1:aa:fe:4b:45:59:84:96:22:37:44:9e:39:c9:0b:55:b1: 45:41:a6:03:30:f6:52:f7:3a:38:e7:13:62:e3:8a:35:28:03: d6:e9:68:7a:e1:67:f6:6c:17:7c:4a:d2:24:40:7f:05:a7:53: d2:39:fb:0d:27:39:33:87:91:e1:c7:f7:39:be:28:87:d6:22: f1:20:fd:f7:b5:9a:9c:67:06:a2:c0:fb:81:21:6e:e4:f9:19: e4:a0:6a:1c:4b:70:75:34:c9:2c:94:2f:1a:f9:5b:bc:07:84: 10:3a:06:63:6c:6a:8c:d2:05:99:63:2f:98:4b:36:0d:24:5f: 8e:30:be:07:bd:6e:10:5e:94:db:e1:8a:03:94:8d:31:95:04: c0:8c:6d:af:d6:5b:18:d3:15:e5:20:8c:f8:a8:62:b3:f1:ea: 3a:7f:9f:8e:1a:64:2f:b8:0e:55:21:07:86:03:7f:9f:78:4b: 5f:bc:8c:32:af:1e:18:79:3a:b1:9e:29:75:ed:4b:7b:50:bb: 03:f5:ae:44:65:3b:80:4a:c5:04:5e:42:45:10:d6:d8:6b:3c: 74:0f:8d:19:4b:77:47:4d:61:e6:e9:15:56:6f:bb:f1:d0:8b: 3c:4f:84:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevghSKTbfa+Mw5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDE0MGRjZmEtM2RmMy00MmIwLWFkMjAtMDhjMzZmYzBjOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKl/X8VNXkteclWKhc9RaJQ3TTSzD46Mg/II MNIijQDwOCMBGx7d5WSxKSh4vxyHuYWudQKZKosN72xikgdyHlBlnYwBPxyUwdiW C4useKayajNMqTatH9HLT9+tCTa5qSn9yK5G3VoSW5wIdSUF1f38e1P/aWrCFLf8 8Iat+iU3qmfZEIWxm3t4KdKF29GvEWrljPTDHAx4nYcK+VyWdCu+yP8O3TTTgkMD W3TGjJiGQPrFFSJjduaA4gtBxR+OZI00lCXH12EvKuKNhrqdg1i8AxKvmWVDU3es MPv8Sjvr0ETvGoHHPUKqZpeeO+uWg8Tlkh+XkI0AwSOuRtqywwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjfWUUCp9n/yE9OwGsm2HiRUWQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWM2OWNhMGYtYjMwOS0z OTM1LWI2N2MtNzQ0M2JkNGVhYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQbeX9f7QIML5ezi1G+oYGG8zXRqv5LRVmEliI3RJ45yQtVsUVBpgMw 9lL3OjjnE2LjijUoA9bpaHrhZ/ZsF3xK0iRAfwWnU9I5+w0nOTOHkeHH9zm+KIfW IvEg/fe1mpxnBqLA+4EhbuT5GeSgahxLcHU0ySyULxr5W7wHhBA6BmNsaozSBZlj L5hLNg0kX44wvge9bhBelNvhigOUjTGVBMCMba/WWxjTFeUgjPioYrPx6jp/n44a ZC+4DlUhB4YDf594S1+8jDKvHhh5OrGeKXXtS3tQuwP1rkRlO4BKxQReQkUQ1thr PHQPjRlLd0dNYebpFVZvu/HQizxPhPw= -----END CERTIFICATE-----Generated at Sat Sep 26 14:47:30 2026 by rpki-client