$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa File: af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa (raw, json) Hash identifier: seEKTTKaXJ0stUUIbBB0YeKK7Q2wwU/yYamISo36wNk= Subject key identifier: 6E:AF:69:59:5A:3A:0E:F0:15:F8:5A:91:06:87:5C:37:FB:36:69:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05C83510472F6E3A74C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5c:83:51:04:72:f6:e3:a7:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e7fc3dc8-152a-4aeb-8dab-7b3cf0574824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:d2:c3:68:75:9e:f3:b7:55:de:21:47:0b: f8:18:ea:a3:32:ef:61:9b:6d:cf:be:3f:36:49:9a: 10:89:8b:05:4c:3e:a4:0a:96:cc:42:be:46:eb:e5: d6:a5:85:9b:0e:39:76:e2:04:0d:bd:c8:26:21:2e: 0d:e7:89:79:a5:2a:ba:47:02:91:ed:1e:13:6e:5b: 8c:c0:89:19:ea:82:34:39:d4:75:af:5f:57:fc:88: d2:72:24:ed:ac:66:62:0e:41:f2:e0:0a:f9:e9:95: ee:60:f4:fa:bc:62:9c:ee:65:be:5c:ff:d4:25:1f: 6f:69:de:de:33:27:d4:57:df:f9:b0:a4:36:8b:be: a2:76:b5:95:90:18:b3:32:71:d6:f0:62:8a:bc:44: a7:f1:d9:30:60:5a:f9:03:fd:cf:72:7d:f1:00:81: 62:9e:a8:bf:a3:8f:3b:bf:de:aa:08:aa:63:58:a9: 10:e3:c3:82:eb:82:62:2e:3e:5d:79:a6:3c:f8:54: af:62:f5:19:e1:bb:c9:cb:4e:4f:86:9a:a7:12:6a: b8:a6:50:ce:c3:37:ef:2b:af:41:fd:4d:61:20:0a: d9:d3:23:a8:ce:d4:41:6b:38:4e:42:79:a0:cb:88: 21:3e:14:73:a8:14:79:7c:38:42:35:d2:be:f9:62: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:69:59:5A:3A:0E:F0:15:F8:5A:91:06:87:5C:37:FB:36:69:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bc:45:16:42:54:fb:e0:43:4b:fb:b3:d0:7a:71:18:de:9c: f8:1b:ba:b4:5c:9b:45:bb:ef:e0:ab:c0:b0:01:e5:44:e3:86: 6e:36:77:95:5b:56:a4:5b:e6:0b:cd:c6:58:0c:88:48:e7:76: 14:de:a4:e8:e6:80:10:5c:23:fe:ab:3b:f2:c8:fc:02:b2:e3: 12:71:83:bb:ba:db:23:3b:d9:c3:c7:de:73:f6:15:aa:2a:dd: bf:48:4f:6f:c9:18:e9:ac:29:d3:d3:c8:b8:5c:6e:4f:45:52: 95:85:14:01:fc:e7:dc:13:7a:0e:2e:47:fd:4f:30:57:07:fb: ef:58:82:94:1a:2d:70:67:0b:b9:24:5b:0b:cc:48:74:82:1f: 1b:27:fe:1a:b1:8f:9b:d8:a7:8b:be:1e:c5:db:23:a9:78:33: a0:6d:99:fd:75:8b:72:cf:c4:7f:ef:e0:68:63:3d:4e:bc:45: ad:db:8f:ef:76:54:33:ff:5d:a8:0a:aa:2d:21:0e:94:36:68: 1b:8c:df:5b:31:1e:58:4a:da:d8:6e:87:92:ce:0f:87:6c:de: 2f:6e:fd:07:19:f2:93:c0:25:8b:e6:90:8e:4e:10:dc:9a:99: 1d:a2:60:80:34:2f:5f:5d:f7:01:93:b1:a1:71:5b:b7:a7:32: 7f:69:3f:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FyDUQRy9uOnTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTdmYzNkYzgtMTUyYS00YWViLThkYWItN2IzY2YwNTc0ODI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDbSw2h1nvO3Vd4hRwv4GOqjMu9hm23Pvj82 SZoQiYsFTD6kCpbMQr5G6+XWpYWbDjl24gQNvcgmIS4N54l5pSq6RwKR7R4TbluM wIkZ6oI0OdR1r19X/IjSciTtrGZiDkHy4Ar56ZXuYPT6vGKc7mW+XP/UJR9vad7e MyfUV9/5sKQ2i76idrWVkBizMnHW8GKKvESn8dkwYFr5A/3Pcn3xAIFinqi/o487 v96qCKpjWKkQ48OC64JiLj5deaY8+FSvYvUZ4bvJy05PhpqnEmq4plDOwzfvK69B /U1hIArZ0yOoztRBazhOQnmgy4ghPhRzqBR5fDhCNdK++WJDQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6vaVlaOg7wFfhakQaHXDf7NmkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY4MWE4YTAtMzg3NC0z YzFkLTk0NDUtN2FjMmFlMjBjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm8RRZCVPvgQ0v7s9B6cRjenPgburRcm0W77+CrwLAB5UTjhm42d5Vb VqRb5gvNxlgMiEjndhTepOjmgBBcI/6rO/LI/AKy4xJxg7u62yM72cPH3nP2Faoq 3b9IT2/JGOmsKdPTyLhcbk9FUpWFFAH859wTeg4uR/1PMFcH++9YgpQaLXBnC7kk WwvMSHSCHxsn/hqxj5vYp4u+HsXbI6l4M6Btmf11i3LPxH/v4GhjPU68Ra3bj+92 VDP/XagKqi0hDpQ2aBuM31sxHlhK2thuh5LOD4ds3i9u/QcZ8pPAJYvmkI5OENya mR2iYIA0L19d9wGTsaFxW7enMn9pPxg= -----END CERTIFICATE-----Generated at Fri Mar 27 01:58:19 2026 by rpki-client