$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa File: 3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa (raw, json) Hash identifier: G311CeNHH1LE8cwS8wQLfz116ptPG/8yjxmK3PMXeDI= Subject key identifier: C4:80:C4:4B:B3:82:EE:96:3F:ED:78:66:5A:95:F6:57:41:8C:37:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF8003D060704D8C7FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f8:00:3d:06:07:04:d8:c7:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=50029553-b8dc-442d-b444-affff71a226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:55:46:5c:3f:27:8a:ba:32:70:20:fd:f4:e6: a9:9b:ef:a7:e7:b5:db:7a:24:e9:20:b3:a8:c1:9f: 7a:59:71:91:3d:75:69:41:a3:87:fe:a9:82:60:98: f5:56:9d:a4:19:9f:fd:f7:cc:69:db:0c:ee:68:cd: a7:60:75:fa:14:c4:cc:34:be:c5:b0:81:bf:2a:a7: 4b:bf:1a:75:1c:27:6e:d2:e5:86:a4:f1:93:01:78: 58:7e:28:07:b2:ce:90:de:79:a5:a8:4a:98:52:ec: 98:83:85:02:b6:cd:07:83:07:e9:33:64:35:62:4c: 21:07:ae:b8:b4:b2:b2:c8:83:6b:79:ff:85:26:49: 03:a1:e3:5d:bd:ea:db:80:3e:e2:88:3f:bf:fd:db: 6d:e2:f6:10:5a:b3:cb:77:6e:f9:2e:22:e8:87:e1: 40:cb:06:c9:68:5d:d5:27:73:63:52:ff:f8:d5:5e: 3b:b9:06:8f:f0:d5:47:7f:98:3e:4f:fd:62:77:ce: 79:f2:77:cb:eb:d8:1f:1f:7e:b4:cf:c1:33:d6:28: 83:83:13:4d:64:dd:7b:1a:6b:79:44:e5:0b:2f:0c: 56:a7:c7:c0:2a:93:37:3f:56:d9:94:03:1d:31:86: 8b:e0:74:fc:bc:26:97:40:32:af:9f:46:e3:1f:33: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:C4:4B:B3:82:EE:96:3F:ED:78:66:5A:95:F6:57:41:8C:37:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3acb5cf0-7b0d-38af-9e23-860ee1a9b21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3f:74:82:2f:49:21:23:83:d5:83:a4:65:30:9d:94:08:9d: 64:7d:8b:34:a3:9b:a9:36:86:7a:c0:72:de:d9:fe:b6:7a:27: 68:0e:30:4d:a3:ba:c7:f5:32:5b:1c:90:8d:f9:da:e0:0a:a3: 1d:06:cf:2d:b1:55:82:04:d7:dd:96:c2:6a:96:cf:45:81:52: 1b:6a:79:69:31:64:92:d0:28:a0:f9:94:c5:e4:1d:cb:9e:5b: 60:53:2d:a7:23:66:38:91:87:6e:cb:37:77:36:32:37:05:f9: 92:f0:0a:ec:cd:07:2c:bb:1a:93:7f:17:43:a1:a3:34:53:50: cb:b0:2a:25:5d:2c:0a:5e:24:e8:c6:02:4e:0c:a1:c0:cb:5f: 77:47:93:ba:9f:9c:85:18:53:57:fc:a2:ac:97:ac:93:e4:24: 96:3a:6a:d5:f6:01:cf:53:b3:50:ae:73:a7:63:28:20:c4:66: 47:4d:30:fc:3c:30:de:67:4f:50:fc:a0:0b:02:42:d8:e1:b2: 83:52:7e:d6:48:30:03:5c:4d:fb:f3:0a:5b:00:6c:96:b9:37: fa:4f:6f:54:35:b5:13:3d:8b:31:19:ff:fc:08:e0:b5:a9:85: 33:1d:b3:f9:24:2b:f9:8e:28:84:a0:78:a2:ee:96:eb:f7:4c: 5e:77:be:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevgAPQYHBNjH+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTAwMjk1NTMtYjhkYy00NDJkLWI0NDQtYWZmZmY3MWEyMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1VGXD8niroycCD99Oapm++n57XbeiTpILOo wZ96WXGRPXVpQaOH/qmCYJj1Vp2kGZ/998xp2wzuaM2nYHX6FMTMNL7FsIG/KqdL vxp1HCdu0uWGpPGTAXhYfigHss6Q3nmlqEqYUuyYg4UCts0HgwfpM2Q1YkwhB664 tLKyyINref+FJkkDoeNdverbgD7iiD+//dtt4vYQWrPLd275LiLoh+FAywbJaF3V J3NjUv/41V47uQaP8NVHf5g+T/1id8558nfL69gfH360z8Ez1iiDgxNNZN17Gmt5 ROULLwxWp8fAKpM3P1bZlAMdMYaL4HT8vCaXQDKvn0bjHzOBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSAxEuzgu6WP+14ZlqV9ldBjDdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2FjYjVjZjAtN2IwZC0z OGFmLTllMjMtODYwZWUxYTliMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKo/dIIvSSEjg9WDpGUwnZQInWR9izSjm6k2hnrAct7Z/rZ6J2gOME2j usf1MlsckI352uAKox0Gzy2xVYIE192WwmqWz0WBUhtqeWkxZJLQKKD5lMXkHcue W2BTLacjZjiRh27LN3c2MjcF+ZLwCuzNByy7GpN/F0OhozRTUMuwKiVdLApeJOjG Ak4MocDLX3dHk7qfnIUYU1f8oqyXrJPkJJY6atX2Ac9Ts1Cuc6djKCDEZkdNMPw8 MN5nT1D8oAsCQtjhsoNSftZIMANcTfvzClsAbJa5N/pPb1Q1tRM9izEZ//wI4LWp hTMds/kkK/mOKISgeKLuluv3TF53vo4= -----END CERTIFICATE-----Generated at Mon Sep 28 15:44:38 2026 by rpki-client