$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa File: a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa (raw, json) Hash identifier: GvhgOsVPMz875HApp5TcfoNHIBddJ9eJSdutYVAuALo= Subject key identifier: 34:77:46:D3:7A:EF:C8:45:45:C9:D0:57:26:67:26:D2:94:29:0A:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05C530BD7FFB0DD9F18C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5c:53:0b:d7:ff:b0:dd:9f:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=71ffa2fd-9fb1-4836-9c2c-e3331a9d2a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9a:17:9b:07:fa:b7:a6:4e:7a:ff:e1:12:c8: ce:3e:cd:a4:04:ec:0b:0a:cb:db:22:4c:27:1a:d8: 03:47:69:95:32:32:ae:5d:ec:9f:17:5b:12:99:f3: 63:e2:09:8b:23:d3:fa:3c:02:5e:c3:93:fe:ab:cf: 57:2e:7c:93:25:3a:25:b3:41:11:2e:77:25:2a:a4: 43:cf:a5:d6:cd:7f:d9:1d:75:8f:36:18:8f:70:6f: e4:67:68:b5:d6:88:26:a1:ce:70:47:86:6c:05:38: 87:4d:03:b2:05:2d:83:d7:99:28:18:8c:d7:a7:7e: fe:80:93:76:3c:5a:11:eb:3f:39:e3:53:d5:f6:0e: 7d:62:85:4e:66:e1:e2:c0:f7:c4:b6:71:17:c1:20: 4f:a2:f7:59:f4:9f:38:58:4d:8b:29:b4:d6:32:72: d7:ae:a0:23:bc:4b:e1:e1:73:64:c1:b2:49:51:12: 6e:46:8c:e8:65:fc:90:7c:a4:f6:f8:5f:31:78:03: d4:a8:9b:02:1f:65:db:22:18:2f:ef:45:f7:51:27: 1c:ee:43:32:5f:d6:e0:76:4b:45:f2:ce:c2:0f:e2: 12:86:b9:6b:d1:54:e7:95:ff:32:8d:d3:46:0f:03: 88:80:04:00:46:de:48:5e:a8:f0:f4:e4:1b:c3:0c: 37:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:77:46:D3:7A:EF:C8:45:45:C9:D0:57:26:67:26:D2:94:29:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d39c4d-08ec-32f7-aacf-3a91f7e53823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:a0:10:39:f8:bb:ad:8d:5a:44:2b:32:3a:4a:67:ac:3c:ef: ce:eb:89:8a:3f:1f:66:b0:5b:ec:20:22:d2:57:32:af:92:fd: 07:8c:1f:dc:7e:87:e9:a0:e1:f6:8b:88:2c:32:a6:71:76:92: f4:6f:de:ad:90:4a:48:94:a0:a9:56:c4:36:c1:2d:9a:99:18: 0b:f8:ea:d7:9a:02:01:2b:c8:c0:6a:a6:13:ad:8b:5b:b4:eb: f8:2e:bc:21:3f:c8:24:47:91:a0:9a:a3:58:55:26:4c:b9:b1: 24:fd:3b:80:90:11:7f:ca:d7:df:a2:e7:31:dd:3b:92:53:78: 20:18:49:ed:fb:14:34:af:16:83:72:f7:15:20:7c:e9:ee:94: 10:0f:ab:a4:c2:df:dd:b9:24:bf:9b:85:76:38:e9:12:9a:01: 08:b2:cd:58:98:e9:a0:0e:4e:72:9d:43:8b:c0:04:07:c4:e0: 61:09:a6:b8:9c:35:09:11:be:46:8d:d1:6e:1b:d1:6d:42:77: 90:f5:d1:20:69:3b:21:1e:a6:9d:a1:b7:d8:e0:a1:c2:37:ca: e8:b1:26:8b:2d:93:52:b7:38:fa:d7:f8:e8:dc:32:9f:80:c1: 09:29:a1:31:a5:09:b3:f0:92:65:d5:5e:d8:99:c3:fd:01:a3: b6:d7:73:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FxTC9f/sN2fGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzFmZmEyZmQtOWZiMS00ODM2LTljMmMtZTMzMzFhOWQyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5oXmwf6t6ZOev/hEsjOPs2kBOwLCsvbIkwn GtgDR2mVMjKuXeyfF1sSmfNj4gmLI9P6PAJew5P+q89XLnyTJTols0ERLnclKqRD z6XWzX/ZHXWPNhiPcG/kZ2i11ogmoc5wR4ZsBTiHTQOyBS2D15koGIzXp37+gJN2 PFoR6z8541PV9g59YoVOZuHiwPfEtnEXwSBPovdZ9J84WE2LKbTWMnLXrqAjvEvh 4XNkwbJJURJuRozoZfyQfKT2+F8xeAPUqJsCH2XbIhgv70X3UScc7kMyX9bgdktF 8s7CD+IShrlr0VTnlf8yjdNGDwOIgAQARt5IXqjw9OQbwww35QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR3RtN678hFRcnQVyZnJtKUKQp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkMzljNGQtMDhlYy0z MmY3LWFhY2YtM2E5MWY3ZTUzODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALigEDn4u62NWkQrMjpKZ6w8787riYo/H2awW+wgItJXMq+S/QeMH9x+ h+mg4faLiCwypnF2kvRv3q2QSkiUoKlWxDbBLZqZGAv46teaAgEryMBqphOti1u0 6/guvCE/yCRHkaCao1hVJky5sST9O4CQEX/K19+i5zHdO5JTeCAYSe37FDSvFoNy 9xUgfOnulBAPq6TC3925JL+bhXY46RKaAQiyzViY6aAOTnKdQ4vABAfE4GEJpric NQkRvkaN0W4b0W1Cd5D10SBpOyEepp2ht9jgocI3yuixJostk1K3OPrX+OjcMp+A wQkpoTGlCbPwkmXVXtiZw/0Bo7bXc0Y= -----END CERTIFICATE-----Generated at Thu Mar 26 05:06:44 2026 by rpki-client