$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa File: 2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa (raw, json) Hash identifier: WoPUBVf1iMhk4xz3QApQDqW2epxPSUwUUw3Mbhbyc9A= Subject key identifier: 3F:EA:C9:65:D8:17:6B:32:57:E8:FE:8C:8F:C8:34:76:87:98:90:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF690253784D3B9404A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f6:90:25:37:84:d3:b9:40:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=071285aa-a0ca-45ec-9635-8288f0eaaa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1c:28:35:8a:6f:6c:55:b4:88:d7:a6:13:86: e6:d4:de:f8:d7:11:e4:a7:ca:68:2d:5a:58:cb:47: 2c:92:8c:c0:af:ef:f1:79:bc:0d:da:0f:86:cc:e9: f7:d9:90:8c:70:d1:d8:22:2d:69:42:fc:47:c9:8c: dc:39:f7:5b:1d:dd:53:18:3a:fe:70:f7:fa:7e:d2: 03:79:d4:2d:36:71:4f:8b:ff:32:44:a2:9f:b3:fa: 6b:a7:c2:74:bb:45:b7:76:69:49:90:30:ee:66:45: 50:07:b3:11:52:4c:17:d9:05:13:ce:d7:2f:86:18: ba:d1:56:17:63:9a:b2:2f:48:75:85:a7:cf:7c:e7: ae:d5:5a:ae:bd:63:31:55:ac:b1:f9:9c:17:52:ad: 60:70:e9:58:80:4c:46:ff:86:e3:ab:d7:f2:24:72: c7:8a:d2:a1:6f:ee:af:ee:d2:24:57:79:be:da:d2: 81:12:97:ff:bc:cf:0d:78:bf:c8:4d:6c:87:90:57: f1:8b:fa:e2:a6:6a:ab:1b:5b:da:8d:5b:f1:f6:21: ab:6e:7b:5e:a7:b3:31:a0:b4:ac:48:36:53:de:94: 70:33:e0:80:35:49:b7:71:bb:34:37:4a:69:87:93: 03:2b:f7:52:9e:b1:90:b1:c0:94:3e:32:b4:07:34: 4a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:C9:65:D8:17:6B:32:57:E8:FE:8C:8F:C8:34:76:87:98:90:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:49:76:5f:bb:d2:99:db:c7:54:24:01:e0:82:a8:ae:44:e9: 55:9a:c1:3b:2f:17:19:41:f9:89:96:24:3d:65:34:7a:f0:ff: 24:ba:be:44:fb:68:29:02:62:6c:6b:3f:71:b8:48:de:5d:08: 6e:34:fa:5f:36:ed:bc:13:b6:76:55:d8:10:0b:7e:c9:49:23: 55:04:ea:2d:cc:4b:fb:e9:b8:f3:c4:0a:58:03:13:88:69:3f: 10:e7:c8:e2:2d:34:2e:a4:f5:16:a7:5a:54:65:e0:b0:43:42: 2d:7e:41:1d:4b:91:9e:01:de:fa:a4:d7:6e:c2:d8:0c:35:9a: bc:02:8c:86:c0:e5:5c:4e:9c:0d:cd:da:33:d8:ef:4e:2b:4d: 03:2a:33:c5:1e:e9:03:3f:c2:51:1d:20:80:6b:c3:bc:86:90: e8:4b:f9:6e:8a:f9:72:17:ad:c1:08:16:cf:4e:e4:ae:e5:f6: 1a:9e:84:f1:f0:3d:62:0c:29:b1:e8:36:71:10:52:9d:d2:50: 6e:90:a1:ab:84:94:57:96:2b:bb:7c:33:21:5f:50:8a:64:c6: 50:2d:49:d3:04:ed:86:93:5f:34:2e:35:a8:7a:69:0d:db:b0: 71:b4:97:a4:65:cf:5c:37:eb:e1:d2:dd:c7:98:e6:a3:93:1c: 38:43:82:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevaQJTeE07lASgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDcxMjg1YWEtYTBjYS00NWVjLTk2MzUtODI4OGYwZWFhYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRwoNYpvbFW0iNemE4bm1N741xHkp8poLVpY y0cskozAr+/xebwN2g+GzOn32ZCMcNHYIi1pQvxHyYzcOfdbHd1TGDr+cPf6ftID edQtNnFPi/8yRKKfs/prp8J0u0W3dmlJkDDuZkVQB7MRUkwX2QUTztcvhhi60VYX Y5qyL0h1hafPfOeu1VquvWMxVayx+ZwXUq1gcOlYgExG/4bjq9fyJHLHitKhb+6v 7tIkV3m+2tKBEpf/vM8NeL/ITWyHkFfxi/ripmqrG1vajVvx9iGrbntep7MxoLSs SDZT3pRwM+CANUm3cbs0N0pph5MDK/dSnrGQscCUPjK0BzRKFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/qyWXYF2syV+j+jI/INHaHmJBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE0MTc2OGEtMmFhNy0z NzM0LWEyYzItYTNmOGFiNmM0YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlJdl+70pnbx1QkAeCCqK5E6VWawTsvFxlB+YmWJD1lNHrw/yS6vkT7 aCkCYmxrP3G4SN5dCG40+l827bwTtnZV2BALfslJI1UE6i3MS/vpuPPEClgDE4hp PxDnyOItNC6k9RanWlRl4LBDQi1+QR1LkZ4B3vqk127C2Aw1mrwCjIbA5VxOnA3N 2jPY704rTQMqM8Ue6QM/wlEdIIBrw7yGkOhL+W6K+XIXrcEIFs9O5K7l9hqehPHw PWIMKbHoNnEQUp3SUG6QoauElFeWK7t8MyFfUIpkxlAtSdME7YaTXzQuNah6aQ3b sHG0l6Rlz1w36+HS3ceY5qOTHDhDgr8= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:25 2026 by rpki-client