$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa File: a83da1ac-6483-375a-98c7-23090f4bc364.roa (raw, json) Hash identifier: DsBorKxg1xnmjKxYZ4NZqIZOQ1xfaYbWr6UbRtHfJ1I= Subject key identifier: 41:2C:71:D6:E7:80:1D:36:1E:4D:E6:53:3B:54:26:71:F2:0D:FA:B4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA60134F323B0660BDE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 70.41.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a6:01:34:f3:23:b0:66:0b:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=885330c2-8ff0-4a94-899b-b160e8fbbec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:d1:9d:29:1c:56:3b:83:56:5e:7d:f1:73: 81:67:75:ff:d6:a6:e7:e3:35:19:c8:8e:7c:9b:ab: 9a:bc:fe:c6:d6:f1:fa:70:e9:63:30:40:9c:c6:bd: 5c:5d:f3:38:ad:0f:5a:52:16:de:31:72:47:b7:ad: 61:e1:21:ae:a2:57:8c:94:bc:73:42:94:9e:f9:83: ee:91:45:d1:a7:bf:c5:ca:87:ed:18:8a:31:ae:30: ba:64:76:35:4d:52:ff:b8:e1:6a:fe:ed:f9:31:c1: ed:40:b2:38:af:20:fb:86:2c:09:11:56:90:ff:a4: 84:31:d0:80:57:3d:73:e3:59:de:0c:80:71:25:e8: 28:a4:3a:62:67:ae:eb:ec:1c:a2:10:e0:59:fe:c0: d7:af:5c:62:54:30:1c:f1:70:84:06:a2:42:90:e9: a7:a0:33:56:4c:55:8c:44:cf:d7:82:99:a5:b2:3b: d1:72:1f:7f:df:67:83:dc:4b:ce:bc:18:52:57:43: dd:69:a1:fd:6a:08:46:6a:fa:b4:c5:bc:22:e3:8f: 22:f7:2c:ec:80:30:99:1d:b1:4c:d7:b8:16:3c:ab: ff:76:0c:27:95:3e:47:f6:70:0d:9d:c6:9f:19:12: c9:a0:b7:67:c3:78:47:be:da:7f:b9:0a:ba:04:e7: 15:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2C:71:D6:E7:80:1D:36:1E:4D:E6:53:3B:54:26:71:F2:0D:FA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a83da1ac-6483-375a-98c7-23090f4bc364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:05:7b:f7:f9:f2:cd:bd:4f:52:93:cf:d5:10:6a:b8:9b:62: 96:6c:bd:39:60:bd:85:11:a2:df:ea:fc:3f:b3:f6:6f:4c:4a: 68:1e:15:6c:aa:0d:5f:09:53:7e:00:77:b4:e9:de:a4:c3:ac: d1:f4:d9:f8:d2:e8:33:39:f6:7b:99:5b:40:c0:3f:a0:ab:80: c9:3b:10:3a:5a:45:05:c6:9b:09:7d:f2:80:64:38:fc:63:27: ca:66:97:fd:ad:f0:f8:4f:47:3a:29:3b:71:e2:1c:49:b0:c9: cc:a5:a0:e2:2a:3a:e1:42:a8:fd:c9:a7:e8:2a:ce:1c:cf:24: 9b:6f:e0:5f:7c:de:af:75:d4:16:5b:48:63:57:74:ab:bf:4e: 47:05:3d:ac:f2:0e:65:f4:1c:37:0c:27:b5:0a:d6:ba:a4:c5: e7:66:c9:6b:c9:59:8e:cd:7f:9f:f1:d7:21:3c:24:e2:59:b9: ad:c1:17:e6:4f:46:6a:74:c9:4b:d4:18:7f:9c:5d:13:ae:6b: c6:a3:1d:00:61:50:76:09:a0:58:b7:b8:12:86:c9:eb:dc:ac: cd:34:8f:5a:94:57:b7:47:0f:fe:1f:a2:d5:98:b3:e9:55:f6: 71:d9:a1:29:af:0c:4d:55:6c:fc:87:3c:a8:62:79:7f:f6:15: 40:f8:68:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36YBNPMjsGYL3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODg1MzMwYzItOGZmMC00YTk0LTg5OWItYjE2MGU4ZmJiZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR3RnSkcVjuDVl598XOBZ3X/1qbn4zUZyI58 m6uavP7G1vH6cOljMECcxr1cXfM4rQ9aUhbeMXJHt61h4SGuoleMlLxzQpSe+YPu kUXRp7/FyoftGIoxrjC6ZHY1TVL/uOFq/u35McHtQLI4ryD7hiwJEVaQ/6SEMdCA Vz1z41neDIBxJegopDpiZ67r7ByiEOBZ/sDXr1xiVDAc8XCEBqJCkOmnoDNWTFWM RM/XgpmlsjvRch9/32eD3EvOvBhSV0PdaaH9aghGavq0xbwi448i9yzsgDCZHbFM 17gWPKv/dgwnlT5H9nANncafGRLJoLdnw3hHvtp/uQq6BOcVjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEscdbngB02Hk3mUztUJnHyDfq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTgzZGExYWMtNjQ4My0z NzVhLTk4YzctMjMwOTBmNGJjMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRikcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQFe/f58s29T1KTz9UQaribYpZsvTlgvYURot/q/D+z9m9MSmgeFWyq DV8JU34Ad7Tp3qTDrNH02fjS6DM59nuZW0DAP6CrgMk7EDpaRQXGmwl98oBkOPxj J8pml/2t8PhPRzopO3HiHEmwycyloOIqOuFCqP3Jp+gqzhzPJJtv4F983q911BZb SGNXdKu/TkcFPazyDmX0HDcMJ7UK1rqkxedmyWvJWY7Nf5/x1yE8JOJZua3BF+ZP Rmp0yUvUGH+cXROua8ajHQBhUHYJoFi3uBKGyevcrM00j1qUV7dHD/4fotWYs+lV 9nHZoSmvDE1VbPyHPKhieX/2FUD4aIM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:56 2026 by rpki-client