$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa File: 22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa (raw, json) Hash identifier: iWwDm5Xq4H3z+kkG32KAAO1xajp6op3MLhlHHMicuVk= Subject key identifier: DD:29:14:66:3D:0A:14:41:A6:DE:0B:66:C4:36:C0:8E:B5:C3:ED:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AECA8359A1A4CE1072B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:ec:a8:35:9a:1a:4c:e1:07:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4815607-1a67-4461-8f91-725a53ab7dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:80:58:4e:1b:98:84:82:91:20:a6:cb:8d:31: 66:54:eb:12:5b:1a:b0:5d:25:8f:bf:ed:74:52:fb: e3:96:84:71:7f:93:08:a8:69:9c:fd:f9:c1:ac:a1: 25:d9:25:ab:08:aa:37:3d:22:de:30:77:e4:9c:8b: b1:9a:f2:5a:39:a2:53:32:09:23:cb:2d:ce:68:81: f7:28:b9:14:26:30:f9:85:b2:f7:82:95:f0:f0:3c: 1a:f2:1d:66:fe:b0:95:72:90:36:68:ef:f8:18:3a: 66:1a:77:89:e1:93:39:0f:2d:f0:a3:2d:33:df:3d: 0f:0f:48:7c:68:01:b6:62:8e:fd:ca:2e:f6:04:8b: 70:b8:72:02:73:d2:07:31:96:f1:7b:8b:04:df:21: a1:41:d5:ff:21:5c:fa:53:df:31:a0:de:f2:82:3a: 59:eb:46:84:77:c5:57:79:d8:ef:37:9b:15:91:6b: 91:88:ec:89:f6:10:cd:90:b3:b4:bc:fc:6a:41:74: 9f:c9:f3:b7:c1:32:9d:b5:5c:3c:24:c1:52:bb:e5: fb:44:dc:23:f1:00:52:fd:51:4e:b1:5b:55:57:5b: 31:3d:25:21:8f:b0:06:c6:aa:6c:bc:26:20:c0:a2: fe:1f:7c:7c:5f:d5:68:f7:3c:98:e2:cc:e0:c8:e2: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:29:14:66:3D:0A:14:41:A6:DE:0B:66:C4:36:C0:8E:B5:C3:ED:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/22858fdd-4c38-3dc4-a695-f9d80cf7853a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d1:f6:50:75:c2:e1:ed:28:1d:b8:a3:01:72:9e:50:85:41: 57:c6:02:2a:30:df:b6:5e:8d:19:c3:b5:b0:ab:19:2b:24:ec: 93:5f:f7:f1:d5:82:95:a9:6c:db:ee:db:d4:2c:49:ec:a3:96: 81:76:a1:91:c2:f4:4a:f9:78:04:f8:ae:23:9e:ec:51:1a:16: e2:2e:c8:08:c3:3a:e5:8f:27:64:82:d6:a9:10:88:7f:3a:ca: f9:07:09:66:c5:55:95:25:3c:34:ac:92:7f:bf:73:04:ec:e3: 83:ad:88:2e:37:84:78:d8:82:74:2c:58:7f:d2:43:90:63:0f: 27:a2:82:6d:da:37:28:c0:c6:84:37:e3:1a:47:d7:15:be:21: c7:bd:84:dc:0a:a5:11:e6:9d:d9:13:b8:5d:4f:d5:7d:19:7d: c7:1a:c3:de:20:e7:58:33:65:d0:df:2a:91:ca:38:1e:78:3f: 84:d3:29:08:96:13:e6:c9:09:86:65:1f:02:b9:26:2a:62:7a: d1:30:00:82:6d:fb:97:a7:53:31:43:c5:f7:5e:d8:d0:29:7e: 84:f1:13:ac:65:69:63:14:22:00:bf:ea:15:71:38:02:90:b2: 12:a6:69:3e:18:9b:4a:1a:57:e8:a7:23:14:6a:0a:c1:73:5b: f0:01:17:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeuyoNZoaTOEHK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ4MTU2MDctMWE2Ny00NDYxLThmOTEtNzI1YTUzYWI3ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4BYThuYhIKRIKbLjTFmVOsSWxqwXSWPv+10 UvvjloRxf5MIqGmc/fnBrKEl2SWrCKo3PSLeMHfknIuxmvJaOaJTMgkjyy3OaIH3 KLkUJjD5hbL3gpXw8Dwa8h1m/rCVcpA2aO/4GDpmGneJ4ZM5Dy3woy0z3z0PD0h8 aAG2Yo79yi72BItwuHICc9IHMZbxe4sE3yGhQdX/IVz6U98xoN7ygjpZ60aEd8VX edjvN5sVkWuRiOyJ9hDNkLO0vPxqQXSfyfO3wTKdtVw8JMFSu+X7RNwj8QBS/VFO sVtVV1sxPSUhj7AGxqpsvCYgwKL+H3x8X9Vo9zyY4szgyOJmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0pFGY9ChRBpt4LZsQ2wI61w+16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjI4NThmZGQtNGMzOC0z ZGM0LWE2OTUtZjlkODBjZjc4NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPR9lB1wuHtKB24owFynlCFQVfGAiow37ZejRnDtbCrGSsk7JNf9/HV gpWpbNvu29QsSeyjloF2oZHC9Er5eAT4riOe7FEaFuIuyAjDOuWPJ2SC1qkQiH86 yvkHCWbFVZUlPDSskn+/cwTs44OtiC43hHjYgnQsWH/SQ5BjDyeigm3aNyjAxoQ3 4xpH1xW+Ice9hNwKpRHmndkTuF1P1X0Zfccaw94g51gzZdDfKpHKOB54P4TTKQiW E+bJCYZlHwK5JipietEwAIJt+5enUzFDxfde2NApfoTxE6xlaWMUIgC/6hVxOAKQ shKmaT4Ym0oaV+inIxRqCsFzW/ABF0g= -----END CERTIFICATE-----Generated at Tue Oct 6 23:24:17 2026 by rpki-client