$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa File: 4996d034-025f-3ff3-b457-e147b8c24bb3.roa (raw, json) Hash identifier: HwaAseXjkpJvnhseop6F1Srgd0HxwohRj2vis9wrYHg= Subject key identifier: 2D:60:15:62:58:04:6B:FC:38:CF:36:C1:EB:B3:42:18:10:C1:19:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498314CC746EDB03ECB29540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:14:cc:74:6e:db:03:ec:b2:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77de5c21-5d1d-4e77-a185-fbd162e683e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:85:d4:d3:c1:80:d6:9b:b2:81:42:c9:8c:ea: 41:4d:41:ee:be:a3:dc:49:fd:41:7a:db:8a:b7:2a: 43:aa:63:30:d7:f0:ba:96:33:14:1d:d9:d9:a9:f3: 92:79:65:ff:87:43:d6:b2:b8:10:e3:e1:fe:23:7a: 4a:96:08:e6:54:bf:2f:86:5d:8a:a0:33:5e:ab:af: 38:e5:2f:1c:79:43:38:26:9f:c0:05:80:aa:24:41: 77:c5:31:1c:df:c4:41:ee:54:a1:e2:7d:fe:02:01: 06:1e:ac:13:19:ce:62:3f:13:33:77:e4:7c:0c:50: 1c:56:3a:54:3a:52:46:b8:09:04:2b:a0:6a:b0:eb: de:65:69:3f:b0:1c:f7:a8:61:ec:6d:07:7c:fb:20: d7:8d:02:08:3c:06:99:e3:79:37:85:34:97:27:14: b0:02:4b:5b:17:11:14:0d:c8:3b:e1:34:e1:b8:de: 06:d7:47:a5:8e:eb:34:3f:12:f6:e0:35:55:c1:5d: 6a:a5:a2:e3:15:be:d1:43:67:5e:c8:47:43:2b:4f: 83:db:38:b1:2d:3e:66:d5:14:2c:39:be:f9:05:9b: c0:6f:48:68:55:bf:ff:70:f3:28:f5:48:6b:d7:17: 68:9d:02:fa:20:d0:9d:82:7f:1f:3e:58:44:79:fa: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:15:62:58:04:6B:FC:38:CF:36:C1:EB:B3:42:18:10:C1:19:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4996d034-025f-3ff3-b457-e147b8c24bb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:2e:97:7c:23:30:42:8f:81:a6:b1:24:e6:22:29:f2:d3: 2f:90:63:2b:3f:83:44:d8:71:c1:13:64:b2:71:05:57:6e:e4: 06:97:76:e7:8e:6a:03:ed:82:ae:72:72:76:c2:63:3d:26:11: ec:46:7e:91:6a:26:76:94:c6:14:a9:8f:1d:d6:fb:a5:8e:56: 3b:e9:cd:22:23:81:c6:e2:df:98:80:87:48:01:4b:41:05:6b: 63:52:60:fc:c5:3c:37:5f:50:4e:2a:0f:40:fb:2e:9a:e0:28: 92:43:53:84:42:95:20:eb:6b:9f:20:16:43:37:34:8c:bb:57: 61:5d:1c:98:84:01:ea:14:27:10:30:6a:16:72:40:fd:91:42: 2d:d1:62:18:b0:70:c6:9a:3d:69:bc:4e:37:e9:37:a0:cb:1f: 2f:59:f6:9e:ec:28:58:ec:fe:06:1e:3c:4e:ca:03:b9:10:38: 5b:ce:1a:1c:14:c3:ac:d3:e2:0c:1a:f4:bc:38:c1:e1:a6:bc: 4f:cb:a9:b9:3a:bc:d3:ee:95:37:8c:ef:50:a9:c1:a0:4b:3b: 0e:22:b7:ea:fe:11:08:c3:77:07:81:55:26:8f:63:d7:9f:f1: e2:b4:70:b1:73:42:58:f6:4b:bf:ae:42:3c:f8:06:4f:62:a1: 08:93:c8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgxTMdG7bA+yylUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdkZTVjMjEtNWQxZC00ZTc3LWExODUtZmJkMTYyZTY4M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4XU08GA1puygULJjOpBTUHuvqPcSf1BetuK typDqmMw1/C6ljMUHdnZqfOSeWX/h0PWsrgQ4+H+I3pKlgjmVL8vhl2KoDNeq684 5S8ceUM4Jp/ABYCqJEF3xTEc38RB7lSh4n3+AgEGHqwTGc5iPxMzd+R8DFAcVjpU OlJGuAkEK6BqsOveZWk/sBz3qGHsbQd8+yDXjQIIPAaZ43k3hTSXJxSwAktbFxEU Dcg74TThuN4G10eljus0PxL24DVVwV1qpaLjFb7RQ2deyEdDK0+D2zixLT5m1RQs Ob75BZvAb0hoVb//cPMo9Uhr1xdonQL6INCdgn8fPlhEefpLtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1gFWJYBGv8OM82weuzQhgQwRmfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk5NmQwMzQtMDI1Zi0z ZmYzLWI0NTctZTE0N2I4YzI0YmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbtLpd8IzBCj4GmsSTmIiny0y+QYys/g0TYccETZLJxBVdu5AaXdueO agPtgq5ycnbCYz0mEexGfpFqJnaUxhSpjx3W+6WOVjvpzSIjgcbi35iAh0gBS0EF a2NSYPzFPDdfUE4qD0D7LprgKJJDU4RClSDra58gFkM3NIy7V2FdHJiEAeoUJxAw ahZyQP2RQi3RYhiwcMaaPWm8TjfpN6DLHy9Z9p7sKFjs/gYePE7KA7kQOFvOGhwU w6zT4gwa9Lw4weGmvE/Lqbk6vNPulTeM71CpwaBLOw4it+r+EQjDdweBVSaPY9ef 8eK0cLFzQlj2S7+uQjz4Bk9ioQiTyCg= -----END CERTIFICATE-----Generated at Fri Sep 25 14:59:43 2026 by rpki-client