$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c7e96c12-6ba4-3e3f-8174-940218b7eb83.roa File: c7e96c12-6ba4-3e3f-8174-940218b7eb83.roa (raw, json) Hash identifier: bTg1aRByuRNJfgH0BWECve0rdwcE0JV/ChXkVPuCQD8= Subject key identifier: 67:CF:E1:92:DA:87:7B:34:51:FB:C6:57:A0:C0:B8:5D:87:D8:1A:B3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF6FF4496AA5174C22C20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c7e96c12-6ba4-3e3f-8174-940218b7eb83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f6:ff:44:96:aa:51:74:c2:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=612bee32-37ff-4d4c-9323-7f1b2df2d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:46:dc:12:f6:e4:5d:65:30:d9:28:b7:cb: e4:dd:3c:19:b1:ff:ae:ab:b1:ab:5b:5a:5e:45:07: 33:46:c2:24:c9:f9:53:f4:d5:74:8d:43:a0:e3:85: 55:c7:64:25:93:60:d2:b0:f7:0a:a9:f8:f8:c0:6c: d7:3e:e9:5a:61:8a:2d:4e:51:dc:29:d0:e0:21:33: d4:01:cf:69:2e:5c:79:6a:ce:61:a5:83:f3:db:11: e9:38:ed:e7:35:3b:d5:2a:d8:b3:8a:8e:8c:e0:f0: d0:8b:6a:c1:ba:50:3f:fa:dd:ba:59:b5:be:32:a3: af:f3:0e:40:c3:87:3e:8e:6c:b6:8a:2c:8e:08:ee: 96:71:f3:d1:50:d5:85:57:3c:39:67:39:38:e2:91: 3b:86:61:5c:c5:2f:84:58:bf:0a:af:87:16:01:55: 81:db:ee:33:a3:12:2c:98:31:4e:35:d0:33:66:b4: 9c:f9:39:ee:52:52:30:39:73:9f:f0:d0:53:f2:91: 95:49:4f:86:d1:59:f2:d1:ea:35:30:18:73:09:d8: e9:c0:82:94:ae:54:77:6b:1c:52:ba:dd:7f:f5:1c: b9:82:a2:e5:ed:16:8a:27:5e:e8:78:24:df:72:a6: 72:01:75:85:b0:1f:03:9a:3c:96:6c:c8:30:a7:7b: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CF:E1:92:DA:87:7B:34:51:FB:C6:57:A0:C0:B8:5D:87:D8:1A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c7e96c12-6ba4-3e3f-8174-940218b7eb83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:85:75:3c:88:4b:43:61:d4:62:98:37:5d:96:30:59:7f:a9: 0a:e5:2b:e9:e8:93:52:00:cf:6c:14:1b:69:67:56:06:46:6c: 95:89:1e:91:9e:e0:8a:46:64:1b:e0:c3:af:c5:18:aa:45:ab: 85:21:e0:07:ef:a5:33:78:b1:86:25:61:18:82:0c:e3:b9:eb: 56:cb:8e:10:18:31:c8:e1:fb:41:8e:b3:5c:69:e9:4f:6b:58: 07:5f:c0:a9:66:55:7d:40:b8:53:32:50:90:bc:cc:e1:a1:37: 88:8b:89:9c:3d:21:b2:a9:1d:1e:a2:da:f9:50:e6:d4:02:85: d6:ab:2f:56:e6:29:cb:de:23:52:3e:90:08:db:e0:2e:b8:3b: 94:7b:23:08:0d:d7:86:33:dc:f8:e6:95:43:87:a5:c5:89:99: 10:eb:8b:da:76:07:02:63:01:65:37:15:24:41:c0:d2:1d:93: ab:da:61:c1:d8:b5:07:03:51:e3:19:ca:25:cb:55:f2:0d:e0: b2:31:e5:6b:ea:61:11:d4:ab:bb:f2:14:42:2a:c4:75:c3:e3: 1e:ca:6d:e3:95:65:29:5c:a2:46:fe:b7:e9:64:6e:28:33:e1: 96:ff:ec:35:b2:32:46:d1:d0:54:e5:92:6a:e3:d4:dd:91:f7: 77:82:b1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jevb/RJaqUXTCLCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjEyYmVlMzItMzdmZi00ZDRjLTkzMjMtN2YxYjJkZjJkNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozZG3BL25F1lMNkot8vk3TwZsf+uq7GrW1pe RQczRsIkyflT9NV0jUOg44VVx2Qlk2DSsPcKqfj4wGzXPulaYYotTlHcKdDgITPU Ac9pLlx5as5hpYPz2xHpOO3nNTvVKtizio6M4PDQi2rBulA/+t26WbW+MqOv8w5A w4c+jmy2iiyOCO6WcfPRUNWFVzw5Zzk44pE7hmFcxS+EWL8Kr4cWAVWB2+4zoxIs mDFONdAzZrSc+TnuUlIwOXOf8NBT8pGVSU+G0Vny0eo1MBhzCdjpwIKUrlR3axxS ut1/9Ry5gqLl7RaKJ17oeCTfcqZyAXWFsB8DmjyWbMgwp3u5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfP4ZLah3s0UfvGV6DAuF2H2BqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzdlOTZjMTItNmJhNC0z ZTNmLTgxNzQtOTQwMjE4YjdlYjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuFdTyIS0Nh1GKYN12WMFl/qQrlK+nok1IAz2wUG2lnVgZGbJWJHpGe 4IpGZBvgw6/FGKpFq4Uh4AfvpTN4sYYlYRiCDOO561bLjhAYMcjh+0GOs1xp6U9r WAdfwKlmVX1AuFMyUJC8zOGhN4iLiZw9IbKpHR6i2vlQ5tQChdarL1bmKcveI1I+ kAjb4C64O5R7IwgN14Yz3PjmlUOHpcWJmRDri9p2BwJjAWU3FSRBwNIdk6vaYcHY tQcDUeMZyiXLVfIN4LIx5WvqYRHUq7vyFEIqxHXD4x7KbeOVZSlcokb+t+lkbigz 4Zb/7DWyMkbR0FTlkmrj1N2R93eCsdI= -----END CERTIFICATE-----Generated at Thu Oct 8 15:45:56 2026 by rpki-client