$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa File: 39487b0b-22aa-390d-96e4-c72ab53e1c06.roa (raw, json) Hash identifier: Remnkc7NPfDT02W8AFyslG6JQHrGGUydRD85Y+hsM18= Subject key identifier: 7D:25:3C:0D:09:10:F8:6D:90:99:22:2D:11:E3:8C:FA:03:AD:69:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0623840FBFE0CAA7EA140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:62:38:40:fb:fe:0c:aa:7e:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f31f22a2-a7c5-41e1-a0a4-97d70cae4018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c6:88:0f:54:5b:90:c1:cf:1e:7b:46:68:ce: 93:1f:17:6e:7f:9d:6e:2a:5b:68:41:ad:47:bd:3d: 28:9e:5b:f5:97:9d:90:75:34:36:96:2e:c5:07:02: 7c:5b:e2:ee:d5:b1:12:3b:fa:3d:6b:93:91:98:86: c4:22:85:e5:82:1d:43:5c:61:69:cb:95:77:e9:be: 00:78:a5:4f:23:a8:2e:cb:5d:bc:e8:67:5b:a9:db: d7:8a:06:ef:f3:41:91:38:6c:b8:3c:04:da:3c:bf: 7d:f5:00:2d:11:eb:a9:c4:f2:cd:8d:63:40:0c:c6: 0b:a0:58:61:f7:37:a3:21:c4:04:1f:28:2e:fa:3f: ab:62:62:e8:f7:dc:c0:b0:4f:cb:9d:c5:b2:ed:11: da:4f:e6:e6:b0:04:17:37:c7:74:1a:3b:20:8f:2e: 79:ab:e5:f9:45:e5:5d:96:8c:a5:4b:88:3c:0d:36: ec:8d:66:48:78:19:18:46:d1:00:c0:d5:ee:57:0b: 78:32:32:87:1e:d7:9d:15:ae:55:b0:fd:44:23:73: 6b:e4:5a:08:b5:f2:fa:52:3f:fc:64:24:f6:5d:68: 3a:13:5a:ce:b1:0c:ae:45:d4:c6:92:c6:9a:64:01: 9e:3d:6c:b6:fe:8e:75:d0:ba:3a:95:6f:a1:f6:a7: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:25:3C:0D:09:10:F8:6D:90:99:22:2D:11:E3:8C:FA:03:AD:69:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39487b0b-22aa-390d-96e4-c72ab53e1c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:dd:e6:01:c0:b4:7c:3c:44:59:38:9c:61:a3:f9:61:12:ae: 26:e0:2f:0d:9f:64:83:9a:b7:2a:63:8f:5c:bf:b5:59:bb:81: 75:88:45:86:a7:6f:b0:61:64:21:6a:15:2f:3f:80:21:b4:3d: 2e:82:32:13:5d:f4:25:3f:0e:04:b7:7b:e5:35:d6:8d:5a:43: da:2b:58:ab:77:97:15:b0:3b:3b:66:3b:f8:77:cf:0d:d8:72: 3e:3d:fd:d4:17:b2:9d:55:e3:08:f1:8d:e0:65:45:46:e9:39: cb:05:bd:d7:36:59:3f:15:36:cb:b0:05:0a:6f:8b:78:07:71: 6f:1a:55:55:0e:53:b8:42:d6:c8:04:6e:8b:a4:d8:e4:7a:2e: b7:9a:72:70:71:1e:39:71:1f:30:57:26:0a:46:95:d9:3e:84: d4:88:5b:cf:87:21:a1:21:24:b8:13:94:c6:d9:a2:fe:33:d2: 71:69:f5:f9:f2:7d:61:c2:f6:c8:d7:f3:66:b6:68:55:ca:75: af:b6:12:a6:d9:b6:8b:7a:3a:60:a0:df:9e:d8:91:82:a5:50: ab:09:cf:a3:61:87:da:42:7c:12:d8:41:8c:0f:9b:5c:9d:d3: 91:92:5e:1a:0f:8a:f0:44:13:ff:8a:88:4b:be:10:f2:0c:eb: 23:2f:4f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GI4QPv+DKp+oUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjMxZjIyYTItYTdjNS00MWUxLWEwYTQtOTdkNzBjYWU0MDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MaID1RbkMHPHntGaM6THxduf51uKltoQa1H vT0onlv1l52QdTQ2li7FBwJ8W+Lu1bESO/o9a5ORmIbEIoXlgh1DXGFpy5V36b4A eKVPI6guy1286GdbqdvXigbv80GROGy4PATaPL999QAtEeupxPLNjWNADMYLoFhh 9zejIcQEHygu+j+rYmLo99zAsE/LncWy7RHaT+bmsAQXN8d0Gjsgjy55q+X5ReVd loylS4g8DTbsjWZIeBkYRtEAwNXuVwt4MjKHHtedFa5VsP1EI3Nr5FoItfL6Uj/8 ZCT2XWg6E1rOsQyuRdTGksaaZAGePWy2/o510Lo6lW+h9qdfKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0lPA0JEPhtkJkiLRHjjPoDrWmNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzk0ODdiMGItMjJhYS0z OTBkLTk2ZTQtYzcyYWI1M2UxYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvd5gHAtHw8RFk4nGGj+WESribgLw2fZIOatypjj1y/tVm7gXWIRYan b7BhZCFqFS8/gCG0PS6CMhNd9CU/DgS3e+U11o1aQ9orWKt3lxWwOztmO/h3zw3Y cj49/dQXsp1V4wjxjeBlRUbpOcsFvdc2WT8VNsuwBQpvi3gHcW8aVVUOU7hC1sgE bouk2OR6LreacnBxHjlxHzBXJgpGldk+hNSIW8+HIaEhJLgTlMbZov4z0nFp9fny fWHC9sjX82a2aFXKda+2EqbZtot6OmCg357YkYKlUKsJz6Nhh9pCfBLYQYwPm1yd 05GSXhoPivBEE/+KiEu+EPIM6yMvT7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:05 2026 by rpki-client