$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa File: 2a528825-cc34-395a-a8fe-a399eadad177.roa (raw, json) Hash identifier: ag1vVr82BDbjYCWr2fJ84E83WsCLqlpAz2soZI2ss1k= Subject key identifier: 1B:CD:6B:64:09:39:0D:86:EB:D8:68:5E:6D:20:E2:15:3D:E7:BF:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F51D2B1398C22BE6678CB32C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 70.41.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:b1:39:8c:22:be:66:78:cb:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=8067fb28-d1ca-4c8f-9441-530dc48844c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:72:5b:49:8b:46:bf:92:14:29:95:04:ea:3b: a3:46:77:f1:9d:f4:0c:c3:ef:36:ce:a2:25:08:49: 76:e2:a8:1d:2e:48:d5:5c:0a:e1:2f:21:ff:ec:e3: e1:d3:5f:78:12:d8:a6:f1:76:82:b7:df:3b:3e:4c: 28:9d:49:39:ea:44:4d:43:b3:77:1e:53:9f:ca:d4: 5c:a6:d7:01:92:fa:4d:93:b9:1c:43:ad:77:7b:f1: e3:95:57:cd:f6:a5:9a:33:7f:90:67:cc:49:1e:ca: be:9c:e7:8f:15:75:bd:a4:f5:12:98:a1:fd:a0:99: f2:1b:85:69:b1:79:83:6c:58:f2:f8:42:88:18:69: 2e:8b:22:41:b4:f9:c7:3f:a6:ab:50:6a:40:51:29: 31:d5:df:d7:f2:3c:d2:0a:cf:d0:6b:0a:41:ac:cb: 84:6b:80:94:52:5b:c6:87:38:39:af:bf:c8:cb:61: 32:e0:41:d9:5e:6a:00:d1:3f:22:0a:fa:e4:c1:5b: f5:b6:57:5e:0e:c4:f9:a9:1f:29:f5:b3:99:ca:f0: 0f:5f:7e:b8:55:b1:54:b6:ac:f9:25:b7:73:df:a5: 0c:f7:87:db:d7:7f:83:92:07:5a:e3:80:1a:b3:75: 78:da:a2:65:4d:1e:78:91:30:43:41:bb:48:ad:22: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:6B:64:09:39:0D:86:EB:D8:68:5E:6D:20:E2:15:3D:E7:BF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:96:98:df:48:a1:a3:39:d6:04:27:64:e7:f4:ab:9c:15:0e: b9:74:6f:62:98:7a:6f:66:a8:25:9c:94:a0:0b:ed:4e:b0:6d: 50:d4:39:5d:7d:f4:16:af:2d:fa:d6:78:96:1e:42:f9:c8:9e: 39:d8:c2:90:04:6d:62:03:47:12:3e:8d:2d:1f:c1:fe:4c:fd: d0:16:c0:f7:b5:ce:1f:4c:58:6e:b8:86:b7:8d:9e:87:62:2a: 27:81:a7:b3:2d:b4:dd:8f:f3:09:42:58:b5:2b:a5:60:03:aa: ec:d6:de:ff:18:b3:c1:fc:2f:69:6f:cb:c6:bb:55:7e:da:77: 6a:da:46:ed:79:d8:30:f6:4e:d7:58:3c:57:47:8e:4c:87:3b: a9:92:c1:5e:84:cc:34:76:c7:db:50:70:12:dc:94:c7:39:85: cd:67:87:27:5a:60:57:62:97:19:a6:9b:5a:84:cd:74:0e:a5: 49:ba:67:4b:19:1a:30:b3:cb:8b:9d:78:a6:ee:50:66:73:0f: 2f:8d:38:bb:38:18:0e:6b:4c:22:24:6c:f7:8e:c9:44:9a:02: 9e:5a:87:79:6f:26:9f:d0:bf:77:c5:8e:b2:b1:a9:53:c2:5e: fd:77:08:d1:20:01:21:f8:90:f5:cf:06:72:f8:b1:8b:73:fd: 9b:d4:65:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0rE5jCK+ZnjLMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODA2N2ZiMjgtZDFjYS00YzhmLTk0NDEtNTMwZGM0ODg0NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHJbSYtGv5IUKZUE6jujRnfxnfQMw+82zqIl CEl24qgdLkjVXArhLyH/7OPh0194Etim8XaCt987PkwonUk56kRNQ7N3HlOfytRc ptcBkvpNk7kcQ613e/HjlVfN9qWaM3+QZ8xJHsq+nOePFXW9pPUSmKH9oJnyG4Vp sXmDbFjy+EKIGGkuiyJBtPnHP6arUGpAUSkx1d/X8jzSCs/QawpBrMuEa4CUUlvG hzg5r7/Iy2Ey4EHZXmoA0T8iCvrkwVv1tldeDsT5qR8p9bOZyvAPX364VbFUtqz5 Jbdz36UM94fb13+Dkgda44Aas3V42qJlTR54kTBDQbtIrSLgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNa2QJOQ2G69hoXm0g4hU957+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1Mjg4MjUtY2MzNC0z OTVhLWE4ZmUtYTM5OWVhZGFkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOWmN9IoaM51gQnZOf0q5wVDrl0b2KYem9mqCWclKAL7U6wbVDUOV19 9BavLfrWeJYeQvnInjnYwpAEbWIDRxI+jS0fwf5M/dAWwPe1zh9MWG64hreNnodi KieBp7MttN2P8wlCWLUrpWADquzW3v8Ys8H8L2lvy8a7VX7ad2raRu152DD2TtdY PFdHjkyHO6mSwV6EzDR2x9tQcBLclMc5hc1nhydaYFdilxmmm1qEzXQOpUm6Z0sZ GjCzy4udeKbuUGZzDy+NOLs4GA5rTCIkbPeOyUSaAp5ah3lvJp/Qv3fFjrKxqVPC Xv13CNEgASH4kPXPBnL4sYtz/ZvUZVo= -----END CERTIFICATE-----Generated at Tue Oct 6 22:54:23 2026 by rpki-client