$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa File: 25029d37-43ee-3276-a7b3-9d35698102a8.roa (raw, json) Hash identifier: Dq46ef+bTFnYzZuri472RzvnbsA+TXGZaPOolWbXIBw= Subject key identifier: 17:39:2A:00:FA:DA:36:9F:84:27:BE:0D:A8:9E:A5:2D:99:67:71:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AFBB8AF2F86185BF99308 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:fb:b8:af:2f:86:18:5b:f9:93:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8196a7f2-c01d-4ff9-88c9-ecd7f51a9afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:0c:a1:ee:0b:c8:55:82:59:f4:19:7a:8f: 7e:cc:45:d8:e1:c9:52:c2:58:65:63:ca:44:cb:1b: 43:bb:54:d8:0a:7e:8d:02:1c:bd:be:de:9f:d2:14: 9e:81:91:38:b1:9f:b4:52:ab:1f:e8:9f:fa:22:48: 38:b3:98:b9:58:d8:2d:e0:63:9b:04:52:f2:0d:09: e3:bc:aa:b6:89:2b:e5:3a:40:c0:b3:f4:74:1b:0d: ce:16:14:e3:64:c9:8c:b6:06:64:7a:6f:1a:0c:c4: 9f:2f:30:6b:38:dd:8b:48:ee:5d:f5:d5:74:40:be: 2d:23:8f:05:bd:21:8a:8c:2f:69:37:1e:d5:bb:34: 83:e1:8c:8f:97:d3:47:62:5e:03:df:e3:98:0b:2f: 60:f4:f9:dd:a5:40:37:b8:a7:ac:96:54:24:c9:7d: 5e:67:d0:d1:47:0e:78:7e:65:90:2d:42:34:c1:90: 34:32:07:45:5e:08:b7:4c:d2:ca:61:25:55:c6:4f: a4:79:b6:02:ad:32:34:4d:9a:08:c5:d8:67:47:ff: f5:3b:08:ed:21:32:a5:7c:53:38:06:b5:b1:aa:c0: 5d:8f:31:d1:b2:96:ea:8c:d5:3b:09:7d:b3:f9:b3: b3:7e:29:08:39:c7:45:35:d7:e1:2e:0f:8b:9e:02: 92:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:39:2A:00:FA:DA:36:9F:84:27:BE:0D:A8:9E:A5:2D:99:67:71:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25029d37-43ee-3276-a7b3-9d35698102a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:2f:60:de:86:35:64:41:ae:0d:40:10:5c:fe:cb:17:0e:fe: 38:45:92:24:dc:88:a3:5f:0a:48:44:41:ef:45:9c:1d:cb:25: 53:1b:82:c2:38:21:da:e4:dd:86:ee:f5:26:45:e9:a4:8b:63: 6b:a5:52:6a:b0:45:aa:35:0c:9c:38:a9:36:d3:7b:6a:03:cd: 48:6e:ba:57:4a:39:78:8d:e3:92:40:f8:fa:2a:b7:c7:c8:2d: 49:f7:df:6c:b3:37:7c:d3:88:e1:fb:2c:f9:a4:ce:e9:24:59: 6a:49:6b:60:64:ec:a7:6b:83:ec:e4:bf:5e:05:5f:21:ac:45: 27:9e:57:20:70:bd:04:27:8b:56:d6:51:44:3b:de:d2:c0:5f: df:61:e8:61:e7:4a:f1:1c:60:63:34:37:ad:11:10:7d:7b:7d: be:93:af:88:7c:af:7e:01:c4:49:2a:a1:5b:4a:0a:cd:48:80: f5:be:02:25:8e:85:80:78:d4:5e:39:26:a7:c8:f9:e6:68:b4: fb:eb:4f:30:e1:87:19:2c:9f:68:17:c4:06:0f:b5:f7:92:30: 85:a4:5e:70:9d:e3:ce:d2:57:a6:24:65:6a:6a:41:71:38:8d: 80:bd:d8:1d:b2:8c:2d:e5:72:34:aa:3b:43:de:06:9d:36:13: 07:23:e7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jevu4ry+GGFv5kwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODE5NmE3ZjItYzAxZC00ZmY5LTg4YzktZWNkN2Y1MWE5YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfIMoe4LyFWCWfQZeo9+zEXY4clSwlhlY8pE yxtDu1TYCn6NAhy9vt6f0hSegZE4sZ+0Uqsf6J/6Ikg4s5i5WNgt4GObBFLyDQnj vKq2iSvlOkDAs/R0Gw3OFhTjZMmMtgZkem8aDMSfLzBrON2LSO5d9dV0QL4tI48F vSGKjC9pNx7VuzSD4YyPl9NHYl4D3+OYCy9g9PndpUA3uKesllQkyX1eZ9DRRw54 fmWQLUI0wZA0MgdFXgi3TNLKYSVVxk+kebYCrTI0TZoIxdhnR//1OwjtITKlfFM4 BrWxqsBdjzHRspbqjNU7CX2z+bOzfikIOcdFNdfhLg+LngKSEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc5KgD62jafhCe+DaiepS2ZZ3H0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjUwMjlkMzctNDNlZS0z Mjc2LWE3YjMtOWQzNTY5ODEwMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwvYN6GNWRBrg1AEFz+yxcO/jhFkiTciKNfCkhEQe9FnB3LJVMbgsI4 Idrk3Ybu9SZF6aSLY2ulUmqwRao1DJw4qTbTe2oDzUhuuldKOXiN45JA+Poqt8fI LUn332yzN3zTiOH7LPmkzukkWWpJa2Bk7Kdrg+zkv14FXyGsRSeeVyBwvQQni1bW UUQ73tLAX99h6GHnSvEcYGM0N60REH17fb6Tr4h8r34BxEkqoVtKCs1IgPW+AiWO hYB41F45JqfI+eZotPvrTzDhhxksn2gXxAYPtfeSMIWkXnCd487SV6YkZWpqQXE4 jYC92B2yjC3lcjSqO0PeBp02Ewcj53c= -----END CERTIFICATE-----Generated at Sun Oct 4 18:30:59 2026 by rpki-client