$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa File: 3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa (raw, json) Hash identifier: yKh+Dzdnt395hhRYFa7U47zWWi7wqH3D1ev1CLSf8T0= Subject key identifier: 2E:E5:23:67:8A:FC:72:2F:57:64:48:FE:1B:DC:81:1F:43:6A:EC:E5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0619D2FDCDE228C2E0198 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:61:9d:2f:dc:de:22:8c:2e:01:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bb8a95aa-984e-4a4f-8ed2-4db288b6d164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b2:7f:81:62:79:4a:36:75:cb:16:b3:ac:4c: 37:f7:f3:79:ed:64:75:d7:a1:36:aa:16:f9:d7:55: a0:fb:2b:14:ad:6f:5c:7a:a1:54:e8:5f:7f:a0:68: 72:9f:7c:d8:1c:57:78:3a:5f:7a:f3:2e:1b:27:37: 6e:b7:2a:05:ee:30:32:a0:2d:29:c6:ea:3c:e5:b4: bd:bb:2e:22:a8:7f:d3:e4:ea:2e:0e:51:05:9b:4c: 8e:50:38:33:f3:59:53:1d:e7:43:24:64:4c:93:b7: 25:34:42:a9:dc:51:d3:96:f5:6c:87:3d:1e:c4:bc: 1f:4c:6e:b8:af:68:35:22:85:0e:26:08:45:e8:fa: 9b:f6:7c:ee:ed:79:60:06:f9:bf:47:d4:5c:da:07: 6f:00:47:39:0e:b6:be:f8:ce:7c:87:68:3a:06:16: 71:f4:01:e1:51:fb:d1:c0:99:87:fa:e6:ac:cd:c2: e8:17:c1:6b:6c:bb:ad:86:7b:b9:a9:35:62:ba:b3: 51:5e:b6:fb:ff:ff:21:03:3c:b5:8c:86:7c:33:2b: 79:b0:20:c8:af:a5:88:8b:88:78:8d:f2:d9:66:07: 22:03:6f:96:ee:66:4c:f1:51:40:68:aa:93:30:c3: 09:95:dd:bb:04:99:1d:07:c5:67:dc:15:78:d4:f3: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E5:23:67:8A:FC:72:2F:57:64:48:FE:1B:DC:81:1F:43:6A:EC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f0f8485-1dbb-3cb1-b4c7-4d7fd39c7b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:43:b5:bf:f1:f6:64:a2:09:e8:67:c4:69:fc:3e:35:7f:62: 17:5d:da:cc:f4:8c:4b:46:45:39:e3:62:44:1b:e2:4f:c1:0b: 16:68:1e:4b:d3:aa:bc:90:1f:a1:42:c3:39:84:5c:dd:b6:20: 2f:ff:03:25:c2:e0:5e:73:ed:96:cb:bd:08:95:44:87:e7:8d: 8b:76:c9:10:b1:b9:d1:e6:fd:2b:4b:82:82:94:cf:99:f0:e7: 6a:5b:37:f8:dd:80:c7:d3:b5:f0:78:03:0e:b3:7f:ca:0f:d2: 79:23:ed:ec:5e:60:0d:9a:d6:14:34:b5:67:34:00:5a:f1:9b: c4:c4:c2:22:b4:c3:ca:89:af:07:a0:f0:2b:89:c9:cc:40:b9: 59:de:22:4b:00:88:f8:82:f5:b3:5f:9a:c1:d9:a3:b6:2a:82: 0f:95:d8:e9:b1:62:2b:bc:3e:94:a3:03:50:41:cd:5a:02:11: 6d:06:e5:01:15:78:94:01:29:9e:8e:78:0d:18:6b:dd:5f:9a: 01:d9:6d:11:f7:19:0d:f4:85:42:30:37:49:cd:c5:4a:c0:24: 39:83:f7:0e:19:2c:14:ff:9b:01:fd:57:2b:fb:ee:4c:75:83: da:6f:02:b3:8b:28:eb:19:5b:9f:24:a2:14:32:2c:b3:c7:45: 10:11:22:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4GGdL9zeIowuAZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmI4YTk1YWEtOTg0ZS00YTRmLThlZDItNGRiMjg4YjZkMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLJ/gWJ5SjZ1yxazrEw39/N57WR116E2qhb5 11Wg+ysUrW9ceqFU6F9/oGhyn3zYHFd4Ol968y4bJzdutyoF7jAyoC0pxuo85bS9 uy4iqH/T5OouDlEFm0yOUDgz81lTHedDJGRMk7clNEKp3FHTlvVshz0exLwfTG64 r2g1IoUOJghF6Pqb9nzu7XlgBvm/R9Rc2gdvAEc5Dra++M58h2g6BhZx9AHhUfvR wJmH+uaszcLoF8FrbLuthnu5qTViurNRXrb7//8hAzy1jIZ8Myt5sCDIr6WIi4h4 jfLZZgciA2+W7mZM8VFAaKqTMMMJld27BJkdB8Vn3BV41PPfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7lI2eK/HIvV2RI/hvcgR9DauzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YwZjg0ODUtMWRiYi0z Y2IxLWI0YzctNGQ3ZmQzOWM3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBDtb/x9mSiCehnxGn8PjV/Yhdd2sz0jEtGRTnjYkQb4k/BCxZoHkvT qryQH6FCwzmEXN22IC//AyXC4F5z7ZbLvQiVRIfnjYt2yRCxudHm/StLgoKUz5nw 52pbN/jdgMfTtfB4Aw6zf8oP0nkj7exeYA2a1hQ0tWc0AFrxm8TEwiK0w8qJrweg 8CuJycxAuVneIksAiPiC9bNfmsHZo7Yqgg+V2OmxYiu8PpSjA1BBzVoCEW0G5QEV eJQBKZ6OeA0Ya91fmgHZbRH3GQ30hUIwN0nNxUrAJDmD9w4ZLBT/mwH9Vyv77kx1 g9pvArOLKOsZW58kohQyLLPHRRARIuQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:38:05 2026 by rpki-client