$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1964c23-e705-34af-93b5-a0ae6f614561.roa File: c1964c23-e705-34af-93b5-a0ae6f614561.roa (raw, json) Hash identifier: NfqJmLq+8VaEJh82JtlHFl/5qUlMCSEKf5DxNbs834U= Subject key identifier: 72:2C:E3:58:E6:E1:F4:0E:91:34:27:BF:0C:72:9E:D0:BA:9E:48:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB076233B6568C7963B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1964c23-e705-34af-93b5-a0ae6f614561.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b0:76:23:3b:65:68:c7:96:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=834a2195-2f8f-4ead-a59f-d086b1fc36ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:cd:10:db:e2:41:d7:a3:94:24:98:f1:c1: 52:d5:8c:31:05:19:d0:b5:44:4d:3c:b1:55:9d:c9: 89:fa:8a:0f:88:81:35:90:0d:0f:76:ec:dd:ed:0f: 2a:0f:8a:5d:a7:a4:1b:52:2c:af:ed:3d:b0:7f:44: b7:58:38:7c:b6:95:91:17:ff:a8:ef:11:47:ef:d5: 9e:a6:50:bb:3f:36:53:b5:81:55:6d:df:a9:ee:f6: 88:bc:eb:98:68:ce:3c:56:f2:e1:00:b9:48:2f:61: b8:ae:8d:43:1e:3c:7e:55:15:f8:b8:df:11:bb:00: b3:6a:27:e5:f7:be:71:fa:ac:ad:f7:19:20:3d:24: d0:d4:13:94:c8:97:cd:cf:9c:88:3c:f1:c2:1b:50: aa:46:4b:cf:d7:90:bb:ce:64:4c:90:02:8c:63:27: 3d:79:fb:bb:02:09:10:d6:d5:7a:ec:4d:56:b3:e8: 36:b1:e7:ad:4f:3d:fd:61:74:26:72:ec:63:45:d4: d1:ec:c0:9c:e1:c4:01:c0:21:da:00:50:6d:d2:37: cb:31:94:3d:6b:84:d9:ab:4f:f3:2b:39:52:eb:d6: 81:1b:04:30:1f:58:18:4f:8d:a9:dc:d3:28:ac:b0: 8c:87:b9:6b:a9:b5:8f:0c:d7:00:a2:e3:50:91:91: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2C:E3:58:E6:E1:F4:0E:91:34:27:BF:0C:72:9E:D0:BA:9E:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1964c23-e705-34af-93b5-a0ae6f614561.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a9:65:19:1b:18:6d:96:81:7c:29:c2:a1:65:79:34:a3:0a: 69:a0:ab:ad:3e:bf:15:dc:22:0f:fe:6f:d1:73:60:2c:bc:73: 3b:e9:8b:b4:0b:5a:4c:e4:11:b1:5b:5e:eb:02:c5:e0:30:68: 51:f4:02:69:99:f9:3c:1b:9c:db:d2:02:2b:c5:04:dc:2e:e4: 92:79:2e:01:bc:31:74:7c:41:0e:82:9c:3c:c9:6e:47:a4:88: 55:d8:00:75:35:a4:16:b3:45:2e:79:a9:51:a7:de:82:25:10: f3:df:8d:cc:9f:06:70:80:1f:d1:60:98:87:b0:8d:35:c3:92: ba:25:20:8a:23:8c:77:26:81:71:68:43:ff:5e:54:d8:86:fd: 03:52:4f:82:12:92:54:97:98:99:fa:02:40:1d:3e:c9:0c:8a: e9:4d:4a:53:94:f8:a4:95:48:2e:b3:9d:9c:a9:ba:b1:6d:c8: 23:c8:0e:38:4e:67:bf:8a:4f:bd:c0:c7:0c:a8:b9:9c:36:d7: 2e:bc:82:fb:94:bf:c1:97:37:95:19:ee:c7:50:98:86:39:3f: 2c:10:a5:b5:ca:0a:8a:1b:15:74:46:ff:9c:e7:5f:9f:90:e0: 59:ea:e7:ad:24:1c:5e:3b:31:5c:f8:b4:9d:af:ec:2c:27:49: 65:95:a1:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37B2IztlaMeWO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODM0YTIxOTUtMmY4Zi00ZWFkLWE1OWYtZDA4NmIxZmMzNmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZXNENviQdejlCSY8cFS1YwxBRnQtURNPLFV ncmJ+ooPiIE1kA0Pduzd7Q8qD4pdp6QbUiyv7T2wf0S3WDh8tpWRF/+o7xFH79We plC7PzZTtYFVbd+p7vaIvOuYaM48VvLhALlIL2G4ro1DHjx+VRX4uN8RuwCzaifl 975x+qyt9xkgPSTQ1BOUyJfNz5yIPPHCG1CqRkvP15C7zmRMkAKMYyc9efu7AgkQ 1tV67E1Ws+g2seetTz39YXQmcuxjRdTR7MCc4cQBwCHaAFBt0jfLMZQ9a4TZq0/z KzlS69aBGwQwH1gYT42p3NMorLCMh7lrqbWPDNcAouNQkZEG4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIs41jm4fQOkTQnvwxyntC6nkiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzE5NjRjMjMtZTcwNS0z NGFmLTkzYjUtYTBhZTZmNjE0NTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2pZRkbGG2WgXwpwqFleTSjCmmgq60+vxXcIg/+b9FzYCy8czvpi7QL WkzkEbFbXusCxeAwaFH0AmmZ+TwbnNvSAivFBNwu5JJ5LgG8MXR8QQ6CnDzJbkek iFXYAHU1pBazRS55qVGn3oIlEPPfjcyfBnCAH9FgmIewjTXDkrolIIojjHcmgXFo Q/9eVNiG/QNST4ISklSXmJn6AkAdPskMiulNSlOU+KSVSC6znZypurFtyCPIDjhO Z7+KT73AxwyouZw21y68gvuUv8GXN5UZ7sdQmIY5PywQpbXKCoobFXRG/5znX5+Q 4Fnq560kHF47MVz4tJ2v7CwnSWWVoUE= -----END CERTIFICATE-----Generated at Fri Mar 27 03:09:30 2026 by rpki-client