$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa File: af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa (raw, json) Hash identifier: pVlPFwmXEv3sLmkHH7yFyvBbv6HHSG5y8vBrdDLNqeI= Subject key identifier: CA:2B:98:61:CF:EC:40:5B:66:E7:B1:70:9F:BC:E8:A3:43:3D:71:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB2BD72506EC217FCF600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b2:bd:72:50:6e:c2:17:fc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5a63d9cc-c698-484c-b1e8-06af591b5299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:ca:6a:8d:ca:d0:fd:8e:de:da:af:5c:71: fa:ce:42:1d:33:f4:58:1c:95:c1:65:0c:80:40:8c: 04:80:b3:35:d9:fa:70:fb:3e:c5:15:f8:33:27:17: 82:17:31:c8:aa:05:2a:f1:5c:5f:c8:d4:8e:aa:8f: 7b:59:0b:fb:b8:79:98:5e:b4:15:82:c6:d9:94:12: 4e:a2:49:98:fb:9b:7b:2c:41:28:b0:95:d7:9a:1f: e0:4a:59:99:e1:ed:49:a3:88:cb:81:c6:88:17:bc: 0d:bd:20:55:f8:65:cc:82:de:a6:48:00:73:3b:39: 66:ec:4c:dd:90:17:f4:c8:c9:bf:ec:09:00:d1:35: d9:99:8d:92:50:0d:b6:ce:91:d4:aa:61:6a:e9:d3: a8:a6:b5:50:9d:59:fb:1a:94:dc:3b:d4:d1:59:25: 1c:a2:86:0d:dc:c9:11:1b:b1:42:12:c7:00:1f:ee: 9e:b5:e1:a8:dc:d8:6c:6e:73:3c:4a:3e:ef:09:38: 88:91:99:3d:53:13:ee:df:cd:5c:8e:ad:be:25:8a: 05:7c:a1:50:4a:5d:9b:d6:bf:de:1c:1f:ac:6e:fb: a7:82:28:77:36:47:5e:3a:0a:22:46:a6:f8:13:7b: 6b:f1:e4:b3:01:13:e6:66:b6:f7:24:ee:cf:b8:e2: 27:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2B:98:61:CF:EC:40:5B:66:E7:B1:70:9F:BC:E8:A3:43:3D:71:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af6c9c0d-53ee-343c-a9bc-b1848760ceb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:67:55:ed:ba:15:73:7e:7a:c1:03:18:01:1a:00:18:85:b9: 8b:06:c0:29:0e:4d:5e:dc:ef:4a:ce:61:ca:ca:e3:90:ac:f4: 81:a1:3f:e6:a2:6e:b1:56:7b:36:cc:76:b2:85:f5:98:4a:3a: 55:6d:7e:d1:44:7c:18:ff:06:12:dc:12:9e:41:fd:a0:94:ae: ff:30:87:51:69:94:cb:3f:a4:72:c0:2b:a4:4e:a6:c7:b1:47: 02:09:12:12:23:4b:3e:d9:c2:08:9e:63:ae:e4:e3:5a:f9:1f: ca:28:dc:35:d8:df:f5:46:03:ac:93:4e:65:d7:f5:ff:b6:7b: d4:cc:5b:44:ab:03:8d:0e:58:49:b4:47:42:d0:25:bb:c2:29: d6:e3:4e:76:a6:11:28:c5:06:7a:7c:87:9c:aa:f7:95:c3:1b: fc:12:ab:16:94:7d:af:37:64:ff:6a:ce:97:94:7e:4a:28:6d: 51:89:3b:de:9b:d2:ad:f0:1f:d2:3c:85:ed:bf:c5:18:cf:75: b1:3e:ec:36:f4:46:9e:35:52:ab:fb:4d:39:41:e1:f4:71:bc: f6:3b:81:29:3c:be:a4:c3:76:b4:0a:54:c0:2e:08:a4:77:7a: c2:77:45:33:cb:26:f3:6b:db:a1:d2:24:52:b9:80:dc:12:f9: 2e:fe:d0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37K9clBuwhf89gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWE2M2Q5Y2MtYzY5OC00ODRjLWIxZTgtMDZhZjU5MWI1Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/Kao3K0P2O3tqvXHH6zkIdM/RYHJXBZQyA QIwEgLM12fpw+z7FFfgzJxeCFzHIqgUq8VxfyNSOqo97WQv7uHmYXrQVgsbZlBJO okmY+5t7LEEosJXXmh/gSlmZ4e1Jo4jLgcaIF7wNvSBV+GXMgt6mSABzOzlm7Ezd kBf0yMm/7AkA0TXZmY2SUA22zpHUqmFq6dOoprVQnVn7GpTcO9TRWSUcooYN3MkR G7FCEscAH+6eteGo3NhsbnM8Sj7vCTiIkZk9UxPu381cjq2+JYoFfKFQSl2b1r/e HB+sbvungih3NkdeOgoiRqb4E3tr8eSzARPmZrb3JO7PuOInBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMormGHP7EBbZuexcJ+86KNDPXHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY2YzljMGQtNTNlZS0z NDNjLWE5YmMtYjE4NDg3NjBjZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9nVe26FXN+esEDGAEaABiFuYsGwCkOTV7c70rOYcrK45Cs9IGhP+ai brFWezbMdrKF9ZhKOlVtftFEfBj/BhLcEp5B/aCUrv8wh1FplMs/pHLAK6ROpsex RwIJEhIjSz7ZwgieY67k41r5H8oo3DXY3/VGA6yTTmXX9f+2e9TMW0SrA40OWEm0 R0LQJbvCKdbjTnamESjFBnp8h5yq95XDG/wSqxaUfa83ZP9qzpeUfkoobVGJO96b 0q3wH9I8he2/xRjPdbE+7Db0Rp41Uqv7TTlB4fRxvPY7gSk8vqTDdrQKVMAuCKR3 esJ3RTPLJvNr26HSJFK5gNwS+S7+0HE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:55 2026 by rpki-client