$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa File: aa9276be-9f8a-381e-a002-c6984ebc8321.roa (raw, json) Hash identifier: jPA8kjmW4wH9L3EpPK9L6kHlyG3zJ8I1lr7RWma7+ok= Subject key identifier: 9A:02:F0:2D:AE:6B:6A:38:B7:0A:CE:79:AE:51:31:79:11:CD:FF:E4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AECC579A9419AAAC3C7C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:ec:c5:79:a9:41:9a:aa:c3:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7e319c41-9b85-4108-aa1d-95faa2e3eda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:66:17:5b:69:bf:16:cd:d7:b0:c7:2a:62: 32:73:3a:e6:8f:dc:68:c8:fc:27:d0:15:01:53:80: 24:9e:02:7c:45:a1:fe:2b:58:2f:51:dd:a8:c3:c8: e5:02:de:cb:bc:e5:6c:c4:8f:31:40:7d:ce:9c:d8: 3a:8d:bf:70:e4:ac:10:b3:a0:ed:ae:aa:74:29:c7: 1c:93:fa:9c:53:35:6c:f4:bb:e0:fa:d6:7e:15:64: 8e:de:3b:d5:35:5d:01:04:18:b4:28:1a:3d:02:83: f5:8c:88:06:b6:9e:48:a0:96:90:e0:bf:c7:c0:8a: b3:44:8f:4c:a1:13:75:d1:54:3e:5b:d5:68:a1:e6: cc:6a:b4:24:4c:ba:28:e8:a2:c5:ae:68:50:9f:6c: f8:c1:bf:33:16:2c:26:28:e7:f2:d0:df:e3:8d:d9: 16:cb:f4:a8:8f:14:a4:80:b7:88:7f:75:f3:ee:e9: 31:0b:5e:db:77:e4:2b:58:cc:83:c5:c5:92:df:25: a1:60:5c:ab:ab:c9:68:06:79:33:d2:53:7f:37:cc: 12:fb:67:2f:6d:30:d0:27:95:f0:14:ca:3e:b2:35: 3b:32:d2:e6:a2:f1:a5:78:99:d5:2e:5f:25:54:fb: 3e:22:9d:1a:b6:a4:59:a5:6c:ee:72:d8:36:94:d0: 53:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:02:F0:2D:AE:6B:6A:38:B7:0A:CE:79:AE:51:31:79:11:CD:FF:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:42:46:3c:36:7e:c0:b7:38:37:2a:df:45:f0:00:a1:9f:41: 49:5e:e4:7a:85:cc:da:6c:4a:ba:a9:2f:51:b7:40:1c:7b:57: 0d:49:2a:ae:97:ef:4a:b2:be:9a:0b:6c:52:1b:5b:9d:88:af: 46:d4:40:46:4d:b5:38:45:e7:99:b1:8a:ea:42:39:20:aa:b0: ae:e9:3d:39:17:b1:6d:6d:db:48:74:85:92:ac:58:bc:11:bb: 5f:8d:12:58:0a:32:31:d0:8e:9e:ed:c8:f4:d2:56:28:9f:d8: 61:42:1d:02:6f:1f:fd:86:8e:7d:d2:5b:66:33:c7:33:d3:47: 63:57:2c:6e:fa:db:1f:a8:3a:83:55:b4:a2:97:59:b6:c6:fa: 07:a8:c2:ac:99:10:b8:08:ac:f5:e0:aa:7a:aa:9d:12:2e:a9: 14:0a:79:5e:41:27:e7:6e:54:a1:8a:8f:3e:55:42:10:1a:69: 4a:2c:10:93:f0:97:db:0d:0e:65:0a:f0:b8:1e:ba:12:ae:7a: 7d:c5:6a:12:c8:a6:36:4b:de:18:14:3b:1c:d7:49:b3:eb:16: a6:03:90:07:fe:eb:ea:2e:44:db:66:7c:ea:ed:83:c6:b2:4c: ee:33:5d:d4:ee:87:18:d6:ae:4d:3d:ae:90:91:03:b9:e2:df: 21:bc:8f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeuzFealBmqrDx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2UzMTljNDEtOWI4NS00MTA4LWFhMWQtOTVmYWEyZTNlZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJRmF1tpvxbN17DHKmIyczrmj9xoyPwn0BUB U4AkngJ8RaH+K1gvUd2ow8jlAt7LvOVsxI8xQH3OnNg6jb9w5KwQs6Dtrqp0Kccc k/qcUzVs9Lvg+tZ+FWSO3jvVNV0BBBi0KBo9AoP1jIgGtp5IoJaQ4L/HwIqzRI9M oRN10VQ+W9VooebMarQkTLoo6KLFrmhQn2z4wb8zFiwmKOfy0N/jjdkWy/SojxSk gLeIf3Xz7ukxC17bd+QrWMyDxcWS3yWhYFyrq8loBnkz0lN/N8wS+2cvbTDQJ5Xw FMo+sjU7MtLmovGleJnVLl8lVPs+Ip0atqRZpWzuctg2lNBTzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoC8C2ua2o4twrOea5RMXkRzf/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5Mjc2YmUtOWY4YS0z ODFlLWEwMDItYzY5ODRlYmM4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFCRjw2fsC3ODcq30XwAKGfQUle5HqFzNpsSrqpL1G3QBx7Vw1JKq6X 70qyvpoLbFIbW52Ir0bUQEZNtThF55mxiupCOSCqsK7pPTkXsW1t20h0hZKsWLwR u1+NElgKMjHQjp7tyPTSViif2GFCHQJvH/2Gjn3SW2YzxzPTR2NXLG762x+oOoNV tKKXWbbG+geowqyZELgIrPXgqnqqnRIuqRQKeV5BJ+duVKGKjz5VQhAaaUosEJPw l9sNDmUK8LgeuhKuen3FahLIpjZL3hgUOxzXSbPrFqYDkAf+6+ouRNtmfOrtg8ay TO4zXdTuhxjWrk09rpCRA7ni3yG8j9o= -----END CERTIFICATE-----Generated at Sat Sep 26 15:31:53 2026 by rpki-client