$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa File: 45b34569-b505-3e29-b451-7e8aef524407.roa (raw, json) Hash identifier: KKrUf545Vl6RmPfPI1Hx9lhBavWmt7MlfgBusSvFvzY= Subject key identifier: F1:72:C3:E4:44:13:1E:CD:05:6A:89:AD:6F:47:9E:96:A7:06:3B:E4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983126B239788551C94C1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:12:6b:23:97:88:55:1c:94:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ff8fb03-036a-4255-bbb0-e791831dcd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:2f:6a:93:0f:85:3a:29:41:3e:7a:a4:84: 91:5b:15:70:42:f1:02:e2:9f:6f:e0:e4:70:a9:ce: bd:67:57:3e:f7:9f:97:32:11:22:2c:1c:a6:c5:ef: d2:49:57:55:99:c7:75:fa:34:15:7f:62:aa:2e:82: c9:d9:87:96:69:c0:d2:1d:0a:6d:18:76:10:7f:66: 5a:26:86:9a:c3:c9:cd:02:6e:82:44:53:10:d9:6c: f8:90:e3:4a:ec:84:2e:6f:46:ab:2c:45:70:59:fc: b9:58:3b:16:90:61:7d:9b:dc:ae:01:a5:47:8c:18: 95:e1:cd:26:9f:d4:fe:9e:f9:3c:3f:42:80:bd:91: f3:ed:80:31:bb:c6:13:94:c1:15:d8:92:13:9b:ba: 93:60:5e:5c:fc:35:d2:7c:dd:ce:1b:ae:e6:3e:19: e1:59:c7:03:45:64:3d:9a:75:4e:20:3d:d3:01:da: 7d:ad:9a:25:0b:d2:e2:a8:2f:77:45:63:d4:8d:98: b7:aa:21:de:7d:ca:02:1d:05:5f:f8:7b:4f:d9:74: d3:bf:f1:fe:83:5a:48:47:47:4d:f5:88:f5:51:0e: d7:ee:3f:2a:b6:8d:c5:82:8f:fc:f7:69:c7:27:64: 2f:f7:db:cf:bb:7c:5c:e3:e3:9e:e3:cb:ea:da:75: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:72:C3:E4:44:13:1E:CD:05:6A:89:AD:6F:47:9E:96:A7:06:3B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/45b34569-b505-3e29-b451-7e8aef524407.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:9f:d9:02:1e:84:c8:1d:e9:72:6f:98:8d:df:a4:e0:ab:d0: cc:ff:23:30:35:43:2e:15:07:ef:03:de:f2:42:83:78:a9:66: d8:bf:b0:58:b0:ac:30:a7:be:61:0c:4f:0f:98:ea:c3:f0:0f: 44:d5:76:fa:e8:97:5b:cd:9d:cb:28:87:e7:cb:5e:08:d2:12: 95:ef:1b:de:9e:11:5a:ff:b1:ce:57:0a:b3:8a:50:4c:4f:11: 29:68:25:c5:88:72:f0:a1:71:0e:f8:7c:10:cc:5d:c0:04:22: 6c:20:b7:14:75:e8:cc:b5:a5:7c:fc:d4:a4:64:cf:b8:7b:9f: 0d:80:4b:3f:fc:de:28:47:66:48:f9:59:51:85:a6:3f:39:ed: 41:a1:f2:ef:ff:e3:66:1d:d0:dd:f6:d7:21:84:ea:29:b0:37: 99:36:b7:3d:a6:ec:71:9f:93:11:6c:11:cc:14:04:c3:97:74: 97:f2:99:a7:5f:5e:62:72:68:f5:3d:86:2a:a9:65:58:16:d8: 39:f5:75:49:39:b9:39:6c:74:58:9a:62:b5:d5:c8:72:8e:9a: af:5b:65:fa:33:ce:52:2c:0c:8f:dc:4e:62:5a:b8:55:73:d4: fa:c0:82:97:a0:60:b6:ff:8d:68:a3:69:7f:99:39:79:0e:11: e4:76:97:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgxJrI5eIVRyUwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZmOGZiMDMtMDM2YS00MjU1LWJiYjAtZTc5MTgzMWRjZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9kvapMPhTopQT56pISRWxVwQvEC4p9v4ORw qc69Z1c+95+XMhEiLBymxe/SSVdVmcd1+jQVf2KqLoLJ2YeWacDSHQptGHYQf2Za Joaaw8nNAm6CRFMQ2Wz4kONK7IQub0arLEVwWfy5WDsWkGF9m9yuAaVHjBiV4c0m n9T+nvk8P0KAvZHz7YAxu8YTlMEV2JITm7qTYF5c/DXSfN3OG67mPhnhWccDRWQ9 mnVOID3TAdp9rZolC9LiqC93RWPUjZi3qiHefcoCHQVf+HtP2XTTv/H+g1pIR0dN 9Yj1UQ7X7j8qto3Fgo/892nHJ2Qv99vPu3xc4+Oe48vq2nUOxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFyw+REEx7NBWqJrW9HnpanBjvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDViMzQ1NjktYjUwNS0z ZTI5LWI0NTEtN2U4YWVmNTI0NDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+f2QIehMgd6XJvmI3fpOCr0Mz/IzA1Qy4VB+8D3vJCg3ipZti/sFiw rDCnvmEMTw+Y6sPwD0TVdvrol1vNncsoh+fLXgjSEpXvG96eEVr/sc5XCrOKUExP ESloJcWIcvChcQ74fBDMXcAEImwgtxR16My1pXz81KRkz7h7nw2ASz/83ihHZkj5 WVGFpj857UGh8u//42Yd0N321yGE6imwN5k2tz2m7HGfkxFsEcwUBMOXdJfymadf XmJyaPU9hiqpZVgW2Dn1dUk5uTlsdFiaYrXVyHKOmq9bZfozzlIsDI/cTmJauFVz 1PrAgpegYLb/jWijaX+ZOXkOEeR2l5s= -----END CERTIFICATE-----Generated at Thu Oct 1 13:35:29 2026 by rpki-client