$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa File: a45f0fa1-a77e-3a78-b792-76655ca68620.roa (raw, json) Hash identifier: NxaZBXiRY/I6QsVy8+OTPkf6EPPVTEi253SZm3sZSCk= Subject key identifier: F4:FC:18:8B:39:0D:91:7D:EB:E6:85:2A:81:1A:CD:20:16:AC:C2:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05C22C70ACF57C8735940 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5c:22:c7:0a:cf:57:c8:73:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cc48ecc5-028e-42b9-8ca8-6c153498cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:a9:e1:75:3d:75:c8:b7:21:fd:fc:8c:3e: c3:5d:46:2f:e7:3d:77:66:22:d3:13:3c:5d:a4:46: 1a:9e:bb:b0:c3:4f:e5:47:65:2b:b6:00:4b:e7:e9: a2:00:22:19:85:2e:67:55:09:d6:bf:8b:63:93:af: 1b:1f:76:d3:bb:fe:0a:7a:6b:e7:17:27:aa:11:ac: a1:a9:17:78:9e:92:d8:a0:59:59:16:da:ff:8c:89: f6:4e:a2:8b:47:2a:9e:2b:d7:39:9b:5a:e2:e5:1e: a1:14:be:13:c3:22:74:ff:4a:93:09:a2:40:cb:7e: 0b:ee:81:8f:1e:4b:0c:dc:82:95:08:71:51:2c:1f: c3:6b:43:21:e2:cd:b5:3f:c5:16:4d:a0:a1:43:90: a3:c5:26:57:89:62:59:6d:0c:46:8f:8d:a1:08:a1: 5a:0d:f5:35:02:2b:30:a7:41:08:92:34:ab:9d:e2: c5:25:da:94:c6:9b:9b:58:6f:af:28:45:50:5f:3b: 8a:5e:da:3b:89:52:2a:a8:31:07:cc:c8:2a:67:e5: 26:77:95:53:85:85:c3:89:f8:a1:7b:bf:30:52:e1: dc:a7:56:a6:11:f3:1c:a7:36:5b:07:ae:a7:05:22: 27:73:0c:22:e2:3f:55:bd:4b:07:4a:a2:0a:09:93: 0d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:18:8B:39:0D:91:7D:EB:E6:85:2A:81:1A:CD:20:16:AC:C2:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a45f0fa1-a77e-3a78-b792-76655ca68620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:88:46:d6:5a:52:4e:20:84:33:1d:e0:cf:a5:bf:5f:4c:51: 80:e2:2a:e8:ec:57:db:67:6a:e3:7c:d3:e9:95:61:f6:85:89: ca:6b:c1:fb:88:e8:db:94:de:a1:f8:e9:82:c4:6e:b7:c6:d8: 52:9e:6b:0e:74:b6:b1:bc:3c:43:5e:5b:93:1b:1a:cf:5f:ac: 73:ab:3f:4f:a2:88:ab:49:ae:65:6d:23:28:89:d6:86:11:62: 68:8f:61:3c:8e:24:d4:91:2b:ce:90:ca:3b:a3:08:ef:c7:24: 91:b0:c5:40:f0:4f:a9:58:64:cb:1f:25:d5:7e:c6:ea:d1:59: 81:65:d3:7b:4c:d0:8d:98:5c:7f:5e:e6:0f:e9:65:8c:9d:18: e2:79:aa:af:16:c0:8c:62:a7:e0:e6:04:06:85:1d:02:d2:b7: 07:67:37:ed:25:ca:52:9e:a2:4e:e5:32:d3:a9:c9:f8:b3:8e: af:36:f5:b9:12:29:2b:6d:e6:3b:b4:30:46:94:ea:2d:fc:73: 27:aa:82:fe:41:19:20:e1:5d:b3:3f:f4:2e:bd:fb:54:15:fc: 93:0a:37:3f:69:38:65:86:49:bb:a5:89:84:a8:49:57:fd:ed: fb:ea:b3:01:88:de:f7:cf:74:65:8f:fe:b2:2f:df:8f:f7:4f: 11:36:96:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FwixwrPV8hzWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2M0OGVjYzUtMDI4ZS00MmI5LThjYTgtNmMxNTM0OThjZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8Op4XU9dci3If38jD7DXUYv5z13ZiLTEzxd pEYanruww0/lR2UrtgBL5+miACIZhS5nVQnWv4tjk68bH3bTu/4KemvnFyeqEayh qRd4npLYoFlZFtr/jIn2TqKLRyqeK9c5m1ri5R6hFL4TwyJ0/0qTCaJAy34L7oGP HksM3IKVCHFRLB/Da0Mh4s21P8UWTaChQ5CjxSZXiWJZbQxGj42hCKFaDfU1Aisw p0EIkjSrneLFJdqUxpubWG+vKEVQXzuKXto7iVIqqDEHzMgqZ+Umd5VThYXDifih e78wUuHcp1amEfMcpzZbB66nBSIncwwi4j9VvUsHSqIKCZMNVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT8GIs5DZF96+aFKoEazSAWrMLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQ1ZjBmYTEtYTc3ZS0z YTc4LWI3OTItNzY2NTVjYTY4NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMKIRtZaUk4ghDMd4M+lv19MUYDiKujsV9tnauN80+mVYfaFicprwfuI 6NuU3qH46YLEbrfG2FKeaw50trG8PENeW5MbGs9frHOrP0+iiKtJrmVtIyiJ1oYR YmiPYTyOJNSRK86QyjujCO/HJJGwxUDwT6lYZMsfJdV+xurRWYFl03tM0I2YXH9e 5g/pZYydGOJ5qq8WwIxip+DmBAaFHQLStwdnN+0lylKeok7lMtOpyfizjq829bkS KStt5ju0MEaU6i38cyeqgv5BGSDhXbM/9C69+1QV/JMKNz9pOGWGSbuliYSoSVf9 7fvqswGI3vfPdGWP/rIv34/3TxE2ltA= -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:35 2026 by rpki-client