$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa File: a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa (raw, json) Hash identifier: EOH/cZQ4OECoLs1XMYUt481VJA1K8bHJR2N3xopBDKg= Subject key identifier: 30:71:EA:49:43:96:8A:5C:6E:93:25:1D:B8:A1:34:0D:9B:15:26:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AEBE7355E7071214E4940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:eb:e7:35:5e:70:71:21:4e:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fd743015-b331-4b2e-9f22-35bcf7d6a600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:80:99:68:67:82:e0:5a:67:b2:52:14:2e:ef: 9c:43:f2:50:d3:9f:43:fa:22:de:8c:56:ae:dd:dc: 5b:3f:71:c1:2f:c0:3d:8b:ca:a2:e5:44:c7:1d:a3: d0:18:22:0b:95:e3:01:80:ec:e2:1d:a1:ae:13:0a: e2:6f:d4:00:c9:1e:da:57:0f:1a:43:98:c3:85:2c: 86:8a:28:f8:99:5c:f7:2e:05:5f:d8:be:aa:b2:32: f5:8d:0b:00:98:89:b3:13:9e:1d:4d:5a:df:85:4a: 30:3f:cf:55:05:f6:b2:a9:65:20:c1:cf:2f:d4:84: bf:25:1c:e6:da:1f:45:8a:f1:07:14:a2:dd:18:f0: 98:2d:5b:3c:dc:87:44:c9:73:8c:5d:30:b4:05:c0: c2:93:2e:4f:9a:29:61:a8:8e:47:6d:4e:e7:3d:23: e0:8f:a4:7a:4d:87:a9:32:79:da:f7:34:40:25:8f: 16:c2:ac:9f:74:37:ae:ba:f6:ac:82:99:88:2d:4d: 5d:ff:8c:e9:04:89:1c:99:55:fa:80:ce:d6:84:a7: 0a:d3:f2:c7:ca:8b:96:d5:ed:45:17:ea:77:e4:20: fb:f8:c1:ee:2f:98:f1:00:ff:66:03:88:27:ef:0f: 0c:b1:32:65:7e:55:20:42:8b:de:24:10:d9:0d:54: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:71:EA:49:43:96:8A:5C:6E:93:25:1D:B8:A1:34:0D:9B:15:26:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a25cb7ab-ee3b-37d8-9896-71d76c08db5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:84:2d:00:5a:7a:63:c9:ea:97:20:d4:f5:34:b8:fc:d0:4a: 5a:95:a1:68:0b:d8:aa:09:38:d7:b1:57:cd:89:67:01:4f:20: 24:d4:59:c2:d0:93:62:f2:9f:8d:e8:0c:ba:43:81:cf:57:79: 45:60:f2:3a:dc:df:df:51:7b:fc:d8:59:ca:81:7a:a3:dc:f3: 0a:81:04:4e:97:b3:d2:71:1e:6d:98:7d:e6:dc:e4:d0:fc:5f: 78:a5:01:dd:9c:7a:8e:80:e5:0d:50:7c:cd:3c:b0:bb:4c:15: c7:4f:e5:38:da:56:44:39:e1:e8:6f:84:d7:25:a4:d9:e6:73: 13:33:4d:4c:d8:e4:49:e4:d6:8a:a6:74:73:c1:3f:cc:87:c6: 90:4d:1c:31:44:a3:3e:78:97:bf:95:42:f3:83:f8:90:3a:88: ba:b2:28:63:bf:83:6c:4c:66:c9:ce:14:ef:38:78:fa:e0:7e: ae:a7:8f:a5:61:68:f3:90:6d:68:13:66:a9:5b:af:30:ef:53: 37:80:12:a6:ab:f0:71:33:45:a5:f2:86:a8:fb:e6:88:18:ca: d1:28:6b:18:b8:43:c5:1c:81:0b:8f:fd:58:7c:86:73:a5:d1: c4:ae:e7:23:b6:30:91:04:31:26:3e:14:ad:59:29:9a:a9:eb: 1e:f0:c2:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeuvnNV5wcSFOSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQ3NDMwMTUtYjMzMS00YjJlLTlmMjItMzViY2Y3ZDZhNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4CZaGeC4FpnslIULu+cQ/JQ059D+iLejFau 3dxbP3HBL8A9i8qi5UTHHaPQGCILleMBgOziHaGuEwrib9QAyR7aVw8aQ5jDhSyG iij4mVz3LgVf2L6qsjL1jQsAmImzE54dTVrfhUowP89VBfayqWUgwc8v1IS/JRzm 2h9FivEHFKLdGPCYLVs83IdEyXOMXTC0BcDCky5PmilhqI5HbU7nPSPgj6R6TYep Mnna9zRAJY8WwqyfdDeuuvasgpmILU1d/4zpBIkcmVX6gM7WhKcK0/LHyouW1e1F F+p35CD7+MHuL5jxAP9mA4gn7w8MsTJlflUgQoveJBDZDVQA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBx6klDlopcbpMlHbihNA2bFSZ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI1Y2I3YWItZWUzYi0z N2Q4LTk4OTYtNzFkNzZjMDhkYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+ELQBaemPJ6pcg1PU0uPzQSlqVoWgL2KoJONexV82JZwFPICTUWcLQ k2Lyn43oDLpDgc9XeUVg8jrc399Re/zYWcqBeqPc8wqBBE6Xs9JxHm2Yfebc5ND8 X3ilAd2ceo6A5Q1QfM08sLtMFcdP5TjaVkQ54ehvhNclpNnmcxMzTUzY5Enk1oqm dHPBP8yHxpBNHDFEoz54l7+VQvOD+JA6iLqyKGO/g2xMZsnOFO84ePrgfq6nj6Vh aPOQbWgTZqlbrzDvUzeAEqar8HEzRaXyhqj75ogYytEoaxi4Q8UcgQuP/Vh8hnOl 0cSu5yO2MJEEMSY+FK1ZKZqp6x7wwtY= -----END CERTIFICATE-----Generated at Fri Sep 25 06:04:30 2026 by rpki-client