$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa File: 2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa (raw, json) Hash identifier: 09Q4mMjQMWnfgt2VOLZTxrGg2ghMffTP8n1vJV9OBVE= Subject key identifier: AC:AB:BF:40:2D:09:D0:23:C0:81:DE:BD:88:CF:D7:74:5E:4E:3D:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB302CDB3D2AC115E6480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b3:02:cd:b3:d2:ac:11:5e:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=306502d6-e67f-49cf-a910-4a9bb828dca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:58:83:2f:6b:a4:0e:9a:16:7d:bb:d1:68: fb:d1:9c:86:2f:22:83:ad:3e:0d:77:23:e1:76:ef: f3:3f:05:44:c1:5d:71:2e:ef:d3:3e:0b:51:2b:b2: a7:0f:54:4d:12:21:34:94:ad:36:98:eb:00:0c:2c: af:70:c6:c0:fa:2a:53:67:7f:1f:ef:e6:16:91:3b: 31:58:0f:8d:b5:46:dd:6d:fd:bd:76:6c:4e:68:e3: 84:32:dc:6e:2b:c7:6a:41:a1:26:cf:51:c2:16:db: dc:28:ca:76:3d:9b:70:0a:14:e3:32:33:1f:d2:74: 0e:4d:4c:1a:69:98:23:88:fc:8e:17:fd:62:bc:93: 15:75:06:b9:cc:65:d7:f4:87:d4:ae:f2:6c:41:db: 9a:58:d8:5b:a6:d6:80:42:d4:31:c2:df:55:4e:2f: b2:cb:90:95:fd:32:f3:7a:9f:64:a3:a7:82:1e:3a: 53:3a:4d:90:30:8f:9e:eb:0a:1b:4f:16:68:43:44: c8:85:9f:2b:f6:29:48:ea:c1:b3:81:27:9f:c1:e1: 2b:51:22:99:ef:f7:2e:91:03:38:90:c8:39:56:d1: cc:eb:76:34:22:fa:36:57:61:24:d7:b7:5d:c4:e3: 0c:bd:ac:f5:5d:02:0c:f5:1a:bd:e9:11:64:7a:fb: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:BF:40:2D:09:D0:23:C0:81:DE:BD:88:CF:D7:74:5E:4E:3D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a41768a-2aa7-3734-a2c2-a3f8ab6c4add.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fc:81:6c:ca:11:2f:3f:a4:a1:cc:46:c9:cd:75:5c:76:25: 12:90:1b:b6:52:f1:ee:10:fe:98:0f:e9:69:ad:55:e3:3f:09: 87:f4:64:d6:87:3a:81:4d:e8:eb:55:d4:62:5b:a0:3b:85:dd: bd:e0:5d:bb:d9:57:46:62:f4:e0:d1:13:5f:7e:a1:ba:0d:61: 0e:9c:c4:5b:5d:07:d5:95:26:93:6f:7f:51:6b:97:10:49:2c: 81:8f:5b:eb:b4:b2:04:32:c6:0e:ef:21:7e:b5:0c:9c:1d:ef: 4e:bf:ce:e2:b7:55:f4:fc:a1:8f:ae:4e:dd:b8:44:51:dd:82: 46:86:cd:7e:5a:11:ee:f4:dd:8b:11:1e:3e:2b:d0:7a:7f:40: c2:b1:19:f8:a4:5d:5a:06:62:6c:48:3c:ec:04:01:ba:6b:3d: 46:ab:4f:32:83:a7:47:1f:ed:25:37:d8:28:db:de:9a:a1:0d: 0f:31:0e:1d:48:ed:9f:56:6b:2f:e4:9f:a3:19:6b:50:56:8d: 99:0f:bd:a2:82:a2:b6:15:77:0c:9e:12:36:fa:71:0e:b4:55: 27:0a:cd:7e:ba:4b:a3:d7:aa:c2:a5:53:f5:45:b9:dd:56:e8: 87:73:f7:1b:1a:a1:de:b0:de:e3:1b:67:b1:ed:c0:31:98:64: 12:ec:a0:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37MCzbPSrBFeZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzA2NTAyZDYtZTY3Zi00OWNmLWE5MTAtNGE5YmI4MjhkY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBNYgy9rpA6aFn270Wj70ZyGLyKDrT4NdyPh du/zPwVEwV1xLu/TPgtRK7KnD1RNEiE0lK02mOsADCyvcMbA+ipTZ38f7+YWkTsx WA+NtUbdbf29dmxOaOOEMtxuK8dqQaEmz1HCFtvcKMp2PZtwChTjMjMf0nQOTUwa aZgjiPyOF/1ivJMVdQa5zGXX9IfUrvJsQduaWNhbptaAQtQxwt9VTi+yy5CV/TLz ep9ko6eCHjpTOk2QMI+e6wobTxZoQ0TIhZ8r9ilI6sGzgSefweErUSKZ7/cukQM4 kMg5VtHM63Y0Ivo2V2Ek17ddxOMMvaz1XQIM9Rq96RFkevsr3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyrv0AtCdAjwIHevYjP13ReTj3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE0MTc2OGEtMmFhNy0z NzM0LWEyYzItYTNmOGFiNmM0YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD8gWzKES8/pKHMRsnNdVx2JRKQG7ZS8e4Q/pgP6WmtVeM/CYf0ZNaH OoFN6OtV1GJboDuF3b3gXbvZV0Zi9ODRE19+oboNYQ6cxFtdB9WVJpNvf1FrlxBJ LIGPW+u0sgQyxg7vIX61DJwd706/zuK3VfT8oY+uTt24RFHdgkaGzX5aEe703YsR Hj4r0Hp/QMKxGfikXVoGYmxIPOwEAbprPUarTzKDp0cf7SU32Cjb3pqhDQ8xDh1I 7Z9Way/kn6MZa1BWjZkPvaKCorYVdwyeEjb6cQ60VScKzX66S6PXqsKlU/VFud1W 6Idz9xsaod6w3uMbZ7HtwDGYZBLsoCI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:37 2026 by rpki-client