$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc864d9f-2075-33e9-a8d5-907c641c785d.roa File: cc864d9f-2075-33e9-a8d5-907c641c785d.roa (raw, json) Hash identifier: OAFSuxx53YbgZjwqIYhakMDjkDsD6cU6DTWSdnXRyE0= Subject key identifier: B0:F0:0B:51:91:70:EC:C1:CD:E2:58:92:31:E8:8B:DA:6E:9B:30:00 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF0AD1AFC483D36944780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc864d9f-2075-33e9-a8d5-907c641c785d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f0:ad:1a:fc:48:3d:36:94:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa9de4e1-52b0-4547-b2ea-b038b3959f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:eb:85:01:e9:8b:a9:7e:c1:b2:64:ea:03: 26:03:76:e4:97:2b:3f:33:7d:22:68:8a:32:6f:14: 5f:a4:14:af:3f:e7:ba:39:09:58:73:f2:8a:14:ee: b3:f9:4d:5c:e2:b1:2f:f9:7a:5d:3b:07:6b:70:d3: 9d:c4:a0:90:2d:8d:54:6f:80:f0:20:d3:ac:ff:46: 67:8a:21:35:15:45:9c:1f:53:d2:3d:5a:df:9d:1d: a7:15:d9:bf:b5:eb:35:a3:aa:7a:9a:a7:82:c6:80: e0:27:6e:bb:d3:4b:11:b0:2a:25:3a:3c:ac:67:61: b9:7b:32:17:55:25:bf:48:b8:34:a2:d8:0b:5a:55: 6d:40:47:ce:d1:a5:b6:bc:c1:35:ea:81:91:86:c0: 60:ee:c6:cd:14:1f:92:0a:a7:1f:9f:c3:c2:ca:55: be:8d:0a:84:d5:24:ab:1b:4e:83:f5:12:49:2c:69: de:e9:69:99:58:b2:67:92:e4:e7:21:82:b4:29:63: 19:54:1d:4f:42:82:0e:7a:fc:d0:7a:70:d6:6d:3f: 49:b4:5b:0d:94:2c:c5:31:6a:82:28:eb:6e:cd:3c: 77:fa:57:5f:23:e1:6e:23:65:37:8b:cf:22:83:98: 4f:fb:d7:b8:87:5b:e5:c1:35:f2:ad:39:38:cf:73: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F0:0B:51:91:70:EC:C1:CD:E2:58:92:31:E8:8B:DA:6E:9B:30:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc864d9f-2075-33e9-a8d5-907c641c785d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:fa:39:7f:8d:ad:d8:93:0c:be:49:c9:94:55:29:c1:c3:bb: 97:0a:47:ca:93:c7:ee:b8:43:5e:7e:b9:79:47:fc:0f:ef:d0: 1e:77:80:9a:f9:20:55:b9:34:d8:43:b0:9d:c5:80:c3:89:c0: 45:3c:e4:98:98:71:cd:31:81:01:4b:0a:9a:49:c6:54:46:05: 28:d1:63:67:3c:6e:54:bc:c1:18:bc:f2:a5:82:f2:18:d1:be: b5:f9:68:62:0e:de:98:1f:a4:10:47:7d:04:5b:31:bd:56:75: 07:ce:81:ef:b1:c5:99:58:df:f5:1d:a1:55:2e:6b:ca:ea:74: dc:cf:7c:83:fa:df:61:7e:32:f9:91:b4:cf:97:31:97:65:e8: 99:bb:5d:72:88:72:7c:97:a4:c7:26:ae:ef:a9:01:91:82:d1: ea:b8:3c:73:f3:ce:b8:6d:94:68:07:2f:88:d2:f9:47:e1:a2: c2:e3:de:e4:cc:48:5a:77:03:3c:c1:39:f6:34:60:34:f8:0d: 25:f1:52:dd:d1:b5:0d:fd:94:06:0d:21:01:69:81:fd:ea:e7: 48:0c:20:06:47:86:e3:9c:86:a7:5c:2c:4f:1b:8e:c6:d6:17: 6e:41:57:7e:bc:f1:fd:0e:00:7f:2f:51:16:82:49:6d:90:f5: 38:cf:ff:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevCtGvxIPTaUR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWE5ZGU0ZTEtNTJiMC00NTQ3LWIyZWEtYjAzOGIzOTU5ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJjrhQHpi6l+wbJk6gMmA3bklys/M30iaIoy bxRfpBSvP+e6OQlYc/KKFO6z+U1c4rEv+XpdOwdrcNOdxKCQLY1Ub4DwINOs/0Zn iiE1FUWcH1PSPVrfnR2nFdm/tes1o6p6mqeCxoDgJ26700sRsColOjysZ2G5ezIX VSW/SLg0otgLWlVtQEfO0aW2vME16oGRhsBg7sbNFB+SCqcfn8PCylW+jQqE1SSr G06D9RJJLGne6WmZWLJnkuTnIYK0KWMZVB1PQoIOevzQenDWbT9JtFsNlCzFMWqC KOtuzTx3+ldfI+FuI2U3i88ig5hP+9e4h1vlwTXyrTk4z3Mu1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDwC1GRcOzBzeJYkjHoi9pumzAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2M4NjRkOWYtMjA3NS0z M2U5LWE4ZDUtOTA3YzY0MWM3ODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACv6OX+NrdiTDL5JyZRVKcHDu5cKR8qTx+64Q15+uXlH/A/v0B53gJr5 IFW5NNhDsJ3FgMOJwEU85JiYcc0xgQFLCppJxlRGBSjRY2c8blS8wRi88qWC8hjR vrX5aGIO3pgfpBBHfQRbMb1WdQfOge+xxZlY3/UdoVUua8rqdNzPfIP632F+MvmR tM+XMZdl6Jm7XXKIcnyXpMcmru+pAZGC0eq4PHPzzrhtlGgHL4jS+UfhosLj3uTM SFp3AzzBOfY0YDT4DSXxUt3RtQ39lAYNIQFpgf3q50gMIAZHhuOchqdcLE8bjsbW F25BV3688f0OAH8vURaCSW2Q9TjP/3I= -----END CERTIFICATE-----Generated at Mon Sep 28 18:31:12 2026 by rpki-client