$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa File: 2a528825-cc34-395a-a8fe-a399eadad177.roa (raw, json) Hash identifier: q+RvSFaWLc5jD6+ZnKg/R3WGll7+zi9Oq09/jIinjR0= Subject key identifier: B2:E4:14:F4:87:22:0B:26:E2:9F:60:A2:51:28:AA:32:5B:87:AB:D2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D2D3F82CA35C2CD2DE41FCA90 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 40306 IP address blocks: 70.41.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:82:ca:35:c2:cd:2d:e4:1f:ca:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=786c76d6-97e5-47f0-84c4-9babe5dda822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:fd:84:4c:fa:75:13:cc:d9:6c:fd:67:b2: bb:c6:dd:4e:e4:8e:da:ef:94:bd:93:9e:c3:03:85: 6b:09:86:30:47:4a:4a:ab:27:af:75:92:81:be:31: 1e:8d:46:17:94:e9:50:69:b5:40:5f:c2:aa:1c:c0: 12:be:c1:7d:6c:9d:65:9f:85:9e:0f:47:91:84:f0: 4d:84:7d:31:29:5f:aa:a9:df:64:ed:03:27:0f:f5: e7:b1:7e:2a:05:1c:33:97:d6:5d:70:53:e1:5f:80: b7:40:cd:fd:d4:0e:87:cd:dc:ff:c9:6f:8d:1c:2a: 64:7a:b4:e8:31:ec:de:1c:15:d5:9c:a3:31:2e:1d: 44:30:bc:20:e9:73:1f:14:49:8a:1b:e4:61:24:9c: b2:2d:53:2c:ff:3b:4c:e2:f6:d9:e8:9c:a6:14:38: 5b:07:1b:2f:7e:2d:e4:38:06:64:80:bc:19:08:8e: 9b:b5:b2:c7:4d:f3:49:a1:dd:b9:40:35:29:e5:21: 34:da:55:34:5c:2a:7f:83:84:fa:20:5f:cc:06:2a: 65:cf:27:99:2b:b9:07:ef:1b:3c:82:1f:c1:e1:84: f2:5d:c4:31:2a:29:8c:be:71:2b:00:33:0f:df:fd: a8:63:62:56:31:60:01:29:80:6e:57:db:88:b3:0e: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:14:F4:87:22:0B:26:E2:9F:60:A2:51:28:AA:32:5B:87:AB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c3:10:1a:04:a0:b2:2a:42:a0:f8:ce:be:12:42:de:5d:1e: 58:42:fb:f1:2b:98:b8:79:95:ef:77:88:46:4a:e9:cb:a0:11: ca:63:51:ae:08:aa:f2:cc:6f:7e:55:53:ae:ec:83:8f:86:15: 88:95:99:3a:2a:26:ae:0b:13:6d:d6:d5:c4:ab:f0:98:91:40: 9c:55:21:19:c2:b8:38:f1:ca:9d:a7:2b:a5:d1:d3:76:7f:c0: 2a:28:cf:0b:f0:0a:b5:83:b2:3c:5c:4a:5b:6b:b5:52:bc:d6: 08:70:b1:30:8c:19:aa:e1:a0:e0:72:2e:08:6f:05:61:d6:0b: 75:65:18:4d:62:83:ff:83:5b:6c:38:bd:03:75:fc:d4:a2:e6: 57:46:bc:72:25:82:1d:a3:9b:ea:a3:f4:43:90:5d:93:6b:51: f4:0f:2c:6e:9e:05:ab:fb:39:ca:12:fa:26:49:9e:99:02:3d: fa:e3:b3:fc:9f:6d:9e:69:59:88:05:24:69:53:19:05:4a:45: 45:10:49:57:75:53:33:52:f1:34:c2:aa:3d:96:78:25:47:4c: d6:1f:dd:b1:b8:55:95:83:04:87:7d:10:6a:b1:c3:84:2e:48: 86:7d:30:b1:44:e4:98:f3:f5:e4:56:ba:3e:57:93:ab:69:dc: 1d:73:fa:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4LKNcLNLeQfypAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk Nzg2Yzc2ZDYtOTdlNS00N2YwLTg0YzQtOWJhYmU1ZGRhODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFD9hEz6dRPM2Wz9Z7K7xt1O5I7a75S9k57D A4VrCYYwR0pKqyevdZKBvjEejUYXlOlQabVAX8KqHMASvsF9bJ1ln4WeD0eRhPBN hH0xKV+qqd9k7QMnD/XnsX4qBRwzl9ZdcFPhX4C3QM391A6Hzdz/yW+NHCpkerTo MezeHBXVnKMxLh1EMLwg6XMfFEmKG+RhJJyyLVMs/ztM4vbZ6JymFDhbBxsvfi3k OAZkgLwZCI6btbLHTfNJod25QDUp5SE02lU0XCp/g4T6IF/MBiplzyeZK7kH7xs8 gh/B4YTyXcQxKimMvnErADMP3/2oY2JWMWABKYBuV9uIsw4vfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLkFPSHIgsm4p9golEoqjJbh6vSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1Mjg4MjUtY2MzNC0z OTVhLWE4ZmUtYTM5OWVhZGFkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPDEBoEoLIqQqD4zr4SQt5dHlhC+/ErmLh5le93iEZK6cugEcpjUa4I qvLMb35VU67sg4+GFYiVmToqJq4LE23W1cSr8JiRQJxVIRnCuDjxyp2nK6XR03Z/ wCoozwvwCrWDsjxcSltrtVK81ghwsTCMGarhoOByLghvBWHWC3VlGE1ig/+DW2w4 vQN1/NSi5ldGvHIlgh2jm+qj9EOQXZNrUfQPLG6eBav7OcoS+iZJnpkCPfrjs/yf bZ5pWYgFJGlTGQVKRUUQSVd1UzNS8TTCqj2WeCVHTNYf3bG4VZWDBId9EGqxw4Qu SIZ9MLFE5Jjz9eRWuj5Xk6tp3B1z+tM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:10 2026 by rpki-client