$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa File: d2acef8d-3753-3089-ad8a-91356efd77a0.roa (raw, json) Hash identifier: QyGvDWT7FWLQJg/5/E/F9My0urb3/kOqCkWu8Q9D/r8= Subject key identifier: F1:F2:6A:23:54:99:4C:C4:16:B5:B3:7E:FA:53:AE:32:C5:08:56:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB4E5D862B2280F046580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b4:e5:d8:62:b2:28:0f:04:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a4f84e69-496f-4e2a-9801-8edc164ce097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:90:d1:e6:2b:37:e6:ea:e5:66:36:0f:11: 74:8b:c1:0c:1c:2f:2a:d0:50:a3:8e:c5:a8:07:58: 6e:e2:d6:53:33:3e:a7:4f:d1:ed:86:74:59:54:6e: b3:59:b5:d5:53:cf:5b:71:d8:25:25:09:f7:25:29: 9c:e4:33:b2:0d:06:3f:25:3c:e1:a4:d7:f5:f7:08: 27:9a:f1:20:f9:46:38:8a:0f:e4:f6:31:d5:1c:4a: 9f:9b:c6:dd:d1:89:74:be:1f:83:9e:56:23:64:59: b7:e6:bf:ff:aa:93:28:02:0f:45:f7:08:b4:5a:23: a6:dc:e4:67:64:69:58:72:95:b1:37:21:17:b5:35: 94:bc:30:b5:d6:18:f5:cc:e7:fd:74:55:00:6e:35: d8:9b:29:ca:86:7b:73:0e:21:a7:a0:22:42:28:e0: fb:18:6c:ea:fa:20:3e:b9:14:f1:ed:b4:61:73:24: e5:b9:c4:a0:97:97:b8:61:aa:85:0e:bb:ed:ee:f1: 29:f0:55:c2:c7:a1:57:72:fe:92:e1:11:4b:a2:74: 82:e3:4c:19:fa:c1:2b:33:32:02:55:8b:cf:c4:01: 0f:96:14:0a:f1:c1:58:56:a0:c4:99:03:b6:2d:20: a7:81:fe:8e:9d:d6:00:dc:4d:44:56:52:81:e5:30: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F2:6A:23:54:99:4C:C4:16:B5:B3:7E:FA:53:AE:32:C5:08:56:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:85:53:30:d3:07:10:fb:62:ad:7b:33:da:05:08:98:03:5b: e9:6a:93:98:74:1e:13:4e:5e:02:99:6e:7a:c6:f3:e6:a0:1a: da:0d:27:f8:3d:ee:7b:be:ef:a1:29:42:a3:ae:18:4a:40:c1: ea:5c:97:01:2c:4c:4d:45:0d:02:58:3f:f1:fa:cc:bf:b2:ce: e4:91:ea:41:fa:39:61:cb:38:d7:b9:81:12:bd:1e:ed:fa:0d: a9:b5:cf:f3:6f:5c:0a:76:d6:a5:68:b4:93:4f:27:ca:5c:f4: e4:b5:f5:4f:3e:53:cc:29:c1:fe:ad:9d:e7:25:2f:f9:b6:21: 7a:35:6a:f3:32:cb:5c:c4:ab:ae:02:39:25:eb:72:6a:ee:70: 0a:a5:63:cb:e4:3b:b6:af:20:e8:39:25:72:c8:6f:dd:e9:9d: 30:0b:f8:fe:d8:73:e0:26:6d:30:91:2c:52:8f:fc:2e:7f:1a: 69:12:26:b7:58:5e:d7:00:41:eb:87:ff:65:cc:71:5a:fb:9c: ae:9b:54:10:51:b1:d1:68:b6:99:41:8c:f9:d0:ef:f9:af:a6: 02:ff:2d:08:4a:1a:d7:89:c0:69:df:da:b9:45:28:30:69:89: 3c:b6:dd:36:75:ba:24:4c:ed:8a:a6:19:36:9e:c6:60:ef:4a: b9:23:b3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37Tl2GKyKA8EZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTRmODRlNjktNDk2Zi00ZTJhLTk4MDEtOGVkYzE2NGNlMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrmQ0eYrN+bq5WY2DxF0i8EMHC8q0FCjjsWo B1hu4tZTMz6nT9HthnRZVG6zWbXVU89bcdglJQn3JSmc5DOyDQY/JTzhpNf19wgn mvEg+UY4ig/k9jHVHEqfm8bd0Yl0vh+DnlYjZFm35r//qpMoAg9F9wi0WiOm3ORn ZGlYcpWxNyEXtTWUvDC11hj1zOf9dFUAbjXYmynKhntzDiGnoCJCKOD7GGzq+iA+ uRTx7bRhcyTlucSgl5e4YaqFDrvt7vEp8FXCx6FXcv6S4RFLonSC40wZ+sErMzIC VYvPxAEPlhQK8cFYVqDEmQO2LSCngf6OndYA3E1EVlKB5TDLDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHyaiNUmUzEFrWzfvpTrjLFCFbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJhY2VmOGQtMzc1My0z MDg5LWFkOGEtOTEzNTZlZmQ3N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyFUzDTBxD7Yq17M9oFCJgDW+lqk5h0HhNOXgKZbnrG8+agGtoNJ/g9 7nu+76EpQqOuGEpAwepclwEsTE1FDQJYP/H6zL+yzuSR6kH6OWHLONe5gRK9Hu36 Dam1z/NvXAp21qVotJNPJ8pc9OS19U8+U8wpwf6tneclL/m2IXo1avMyy1zEq64C OSXrcmrucAqlY8vkO7avIOg5JXLIb93pnTAL+P7Yc+AmbTCRLFKP/C5/GmkSJrdY XtcAQeuH/2XMcVr7nK6bVBBRsdFotplBjPnQ7/mvpgL/LQhKGteJwGnf2rlFKDBp iTy23TZ1uiRM7YqmGTaexmDvSrkjs3M= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:52 2026 by rpki-client