$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa File: 83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa (raw, json) Hash identifier: yF+gF0oOLujk+Ze3PCkahcfiYMiLtrdMlCbAMumLnHI= Subject key identifier: 73:63:33:63:B8:5C:55:6E:48:6F:62:96:2C:91:B6:F4:E2:44:CA:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E0549D3FCEE36EACC91600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 70.41.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:54:9d:3f:ce:e3:6e:ac:c9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1ffe9454-d039-41a5-b880-16880f08dd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a0:9b:30:cd:b4:dd:4a:37:54:a2:e9:18:d1: 93:10:3a:8b:5e:06:a5:89:97:ec:21:b2:38:4c:60: 4b:d0:92:ca:9e:e3:5c:3b:f0:2c:94:26:05:3f:5c: d6:e7:52:89:19:59:13:7d:24:63:4a:9c:cc:11:bd: d7:bb:cc:7d:e8:0e:64:d8:94:b7:67:f8:47:39:e6: 2f:21:a8:32:89:19:fa:71:8c:18:1f:78:8d:90:82: 1e:76:41:69:e5:6f:4d:6a:59:66:7f:30:39:27:ec: 31:25:26:0f:10:08:d9:ef:eb:cf:b8:04:2b:52:dd: d6:5b:40:ff:f1:46:42:ff:41:1a:44:e2:c4:5c:62: 6a:af:9f:69:2b:d5:04:86:7d:74:f1:53:16:ce:4e: 14:f8:65:c5:74:cf:0f:25:a4:91:69:37:20:0d:67: 96:63:c2:aa:69:48:67:af:68:c7:6c:60:d1:43:29: 99:59:b7:74:16:83:18:d9:44:fd:44:dd:66:00:28: 0c:72:ee:65:be:39:ca:1c:21:c3:0c:47:81:d8:fb: ea:90:51:eb:d3:03:45:39:6f:ec:9b:46:80:84:21: 78:9c:5d:c0:0b:96:a6:f8:07:6f:da:7b:d1:45:62: 9c:b9:51:e8:b0:83:f2:7b:ba:ec:16:cc:64:6a:f4: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:63:33:63:B8:5C:55:6E:48:6F:62:96:2C:91:B6:F4:E2:44:CA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83e0f15c-2dd3-3344-b724-4487e6a7d6e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:25:77:68:af:38:b3:e0:8a:38:ff:05:ba:41:81:1a:d3:ee: 5c:12:86:8d:c8:2e:26:c2:72:8d:b8:e2:4b:ef:c1:87:50:88: e5:df:cc:b7:61:2c:b0:74:0c:bd:0d:f5:69:3f:1d:6a:6d:4e: b7:91:c4:82:eb:af:b5:9b:29:b9:e1:e9:e7:31:2d:fe:47:2f: bc:26:36:69:14:47:d7:bb:36:69:31:9a:ec:13:2b:b1:1a:06: 47:31:bf:47:4d:dc:b9:00:04:07:bf:8c:54:88:5a:a4:56:3f: 2d:2f:70:7e:27:83:d5:8e:4b:38:82:9d:3a:07:42:b2:99:c8: 59:d5:bb:eb:44:d5:bd:68:87:5c:b9:bf:aa:53:bd:ab:53:8d: 1e:c9:aa:21:1f:af:49:cc:53:f0:06:20:cd:dd:ee:0b:36:0a: 0a:af:c6:d5:bd:90:b9:c8:ac:99:19:08:2b:f1:09:9b:65:c1: f4:2e:34:ff:d6:be:a8:d9:2c:37:83:6b:ec:5f:28:c8:e8:52: a9:88:4b:27:c1:38:7c:c4:29:a1:4e:25:ad:86:6b:6a:36:43: fb:1b:0d:a9:88:77:67:3f:c6:7c:b1:89:60:91:27:55:cd:7a: 22:1a:9c:d1:a8:62:fa:c9:b2:01:a1:61:e4:ea:cc:4f:0d:ee: 42:ae:db:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FSdP87jbqzJFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWZmZTk0NTQtZDAzOS00MWE1LWI4ODAtMTY4ODBmMDhkZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqCbMM203Uo3VKLpGNGTEDqLXgaliZfsIbI4 TGBL0JLKnuNcO/AslCYFP1zW51KJGVkTfSRjSpzMEb3Xu8x96A5k2JS3Z/hHOeYv IagyiRn6cYwYH3iNkIIedkFp5W9NallmfzA5J+wxJSYPEAjZ7+vPuAQrUt3WW0D/ 8UZC/0EaROLEXGJqr59pK9UEhn108VMWzk4U+GXFdM8PJaSRaTcgDWeWY8KqaUhn r2jHbGDRQymZWbd0FoMY2UT9RN1mACgMcu5lvjnKHCHDDEeB2PvqkFHr0wNFOW/s m0aAhCF4nF3AC5am+Adv2nvRRWKcuVHosIPye7rsFsxkavSLlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNjM2O4XFVuSG9iliyRtvTiRMoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODNlMGYxNWMtMmRkMy0z MzQ0LWI3MjQtNDQ4N2U2YTdkNmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsld2ivOLPgijj/BbpBgRrT7lwSho3ILibCco244kvvwYdQiOXfzLdh LLB0DL0N9Wk/HWptTreRxILrr7WbKbnh6ecxLf5HL7wmNmkUR9e7NmkxmuwTK7Ea Bkcxv0dN3LkABAe/jFSIWqRWPy0vcH4ng9WOSziCnToHQrKZyFnVu+tE1b1oh1y5 v6pTvatTjR7JqiEfr0nMU/AGIM3d7gs2CgqvxtW9kLnIrJkZCCvxCZtlwfQuNP/W vqjZLDeDa+xfKMjoUqmISyfBOHzEKaFOJa2Ga2o2Q/sbDamId2c/xnyxiWCRJ1XN eiIanNGoYvrJsgGhYeTqzE8N7kKu28M= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:15 2026 by rpki-client