$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa File: 2dcde161-da79-337c-ae03-8cd3d9908640.roa (raw, json) Hash identifier: hiL02jfF9H8F1OlUl71f8w9MgsG1k5sfGLFrOlv+FFA= Subject key identifier: D9:57:11:83:A6:34:90:95:DB:06:70:69:CC:5C:EA:14:1C:3B:FA:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB48100A61E820FCD8580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b4:81:00:a6:1e:82:0f:cd:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=27522c43-0eff-43a1-90fe-8ee98c730fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:4b:3e:84:97:73:ce:de:3b:2f:a0:6a:fa: 1e:f6:c4:95:0f:07:f9:52:42:e3:6e:75:89:c7:d8: 3e:b9:8b:16:11:c0:c9:5a:c1:4e:75:99:93:de:b6: f1:fd:21:b4:2b:f2:0e:91:e2:c7:ae:02:86:50:2e: 38:a4:62:4b:c8:db:92:94:af:0e:48:9f:e7:a0:73: 92:2b:68:74:4d:be:5d:65:1f:4d:0b:e1:3b:13:33: ba:d8:f7:0e:79:e2:d6:33:08:5e:a7:f3:a5:e3:a4: 09:8d:40:65:17:d0:05:cc:0f:13:fe:82:e9:c5:0c: a8:f5:f8:8f:e1:48:bc:f7:2d:34:91:b9:a5:31:8b: ce:87:45:2a:22:9b:69:dd:8b:94:0a:24:f1:ef:6e: 69:b6:da:dd:3e:09:9b:dc:67:a1:95:e7:85:39:25: 78:c2:c6:e2:be:50:94:03:08:34:4d:09:d5:01:71: f8:fd:01:d0:04:12:bb:d9:92:c1:44:80:5d:11:61: c3:79:0f:7e:89:bf:a3:5c:2d:86:df:e7:1a:0c:f9: 09:b1:ef:6d:ef:78:23:9e:9b:09:aa:0b:8d:a8:ac: 5b:4a:b1:d1:8a:a8:7f:d3:fe:63:bd:c1:8c:11:a4: 44:63:27:f8:54:2b:67:ac:d4:8b:19:f8:d4:1a:4f: 2a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:11:83:A6:34:90:95:DB:06:70:69:CC:5C:EA:14:1C:3B:FA:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dcde161-da79-337c-ae03-8cd3d9908640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:65:53:39:ed:df:17:06:a5:16:53:a9:39:8a:be:56:6a:d3: c8:20:0b:2c:eb:9e:8f:c1:d2:cc:60:86:ea:bb:71:1f:01:22: ce:b1:d3:87:9e:25:72:e6:f4:81:92:b7:d2:00:ae:1b:90:41: ce:48:10:12:b1:6b:cd:f3:26:c4:06:ae:dd:57:62:b7:44:08: c4:5c:fb:1b:f7:5a:17:1a:0f:5f:78:89:85:5c:ad:f0:e2:76: 10:95:3c:99:0e:dd:4b:b1:6f:b0:a4:fb:82:d5:2b:9d:f0:f3: ee:bd:9f:9f:7b:cc:f0:0c:3a:3c:5e:03:7d:d7:08:20:f7:2f: e0:8e:ec:cd:7d:93:42:11:8c:b6:bd:c9:a1:54:7e:56:80:88: 31:15:d3:49:9e:db:a2:21:b6:a7:61:d4:18:2c:a1:63:e1:75: 9e:9e:74:44:1e:2d:15:9a:46:65:4d:6a:41:c4:37:c6:4d:46: 0c:30:12:38:0d:50:22:e6:36:90:0e:40:7d:4e:97:0a:8c:50: 6c:af:dc:c7:ab:27:c9:f0:53:82:c6:88:f2:6b:a9:4f:35:12: 56:5a:fe:f4:a4:ed:b4:5d:cf:cf:f2:1f:f3:1f:9a:b1:e4:35: 0e:55:2c:24:0c:84:fd:02:1e:85:4b:23:eb:44:b5:3e:25:b7: e8:5e:a5:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37SBAKYegg/NhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Mjc1MjJjNDMtMGVmZi00M2ExLTkwZmUtOGVlOThjNzMwZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29hLPoSXc87eOy+gavoe9sSVDwf5UkLjbnWJ x9g+uYsWEcDJWsFOdZmT3rbx/SG0K/IOkeLHrgKGUC44pGJLyNuSlK8OSJ/noHOS K2h0Tb5dZR9NC+E7EzO62PcOeeLWMwhep/Ol46QJjUBlF9AFzA8T/oLpxQyo9fiP 4Ui89y00kbmlMYvOh0UqIptp3YuUCiTx725pttrdPgmb3GehleeFOSV4wsbivlCU Awg0TQnVAXH4/QHQBBK72ZLBRIBdEWHDeQ9+ib+jXC2G3+caDPkJse9t73gjnpsJ qguNqKxbSrHRiqh/0/5jvcGMEaREYyf4VCtnrNSLGfjUGk8q1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlXEYOmNJCV2wZwacxc6hQcO/rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRjZGUxNjEtZGE3OS0z MzdjLWFlMDMtOGNkM2Q5OTA4NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhlUznt3xcGpRZTqTmKvlZq08ggCyzrno/B0sxghuq7cR8BIs6x04ee JXLm9IGSt9IArhuQQc5IEBKxa83zJsQGrt1XYrdECMRc+xv3WhcaD194iYVcrfDi dhCVPJkO3Uuxb7Ck+4LVK53w8+69n597zPAMOjxeA33XCCD3L+CO7M19k0IRjLa9 yaFUflaAiDEV00me26Ihtqdh1BgsoWPhdZ6edEQeLRWaRmVNakHEN8ZNRgwwEjgN UCLmNpAOQH1OlwqMUGyv3MerJ8nwU4LGiPJrqU81ElZa/vSk7bRdz8/yH/MfmrHk NQ5VLCQMhP0CHoVLI+tEtT4lt+hepRc= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:16 2026 by rpki-client