$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa File: d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa (raw, json) Hash identifier: GVT+go/V73DsnN+BoJA5uTbFZ1G+bsKmxjp0r/PGZPc= Subject key identifier: A5:18:90:64:54:BD:38:75:63:98:DF:06:71:CA:9D:CF:AD:29:F0:9D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49831617ACDF275652E3C4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:16:17:ac:df:27:56:52:e3:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed563905-8af5-4106-b3d5-805919ba0f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:56:af:34:f8:78:b0:f0:7e:f3:d2:0f:13: 41:4d:00:51:39:d4:e0:17:11:07:d6:75:3f:71:3b: 01:bd:3b:94:ea:79:82:4a:e5:49:7a:e6:ed:51:8b: 6c:09:83:82:5a:0b:98:14:c6:97:e3:50:1b:a5:7a: a8:3e:4e:0d:49:d8:09:0a:8b:d4:db:56:0b:e8:6e: 45:32:28:5e:23:40:2b:9e:38:4c:8a:76:27:e9:d4: 7f:0e:e6:57:8b:51:cc:91:42:7f:93:36:d4:51:5c: b1:73:4b:3f:93:a8:86:bd:6c:31:ac:5b:51:72:9d: 84:72:69:25:37:8f:9c:7d:b9:8f:6d:6b:ce:3c:56: 04:7a:1e:af:b5:fc:72:37:cb:a5:30:98:46:f0:f3: f4:ab:b0:04:36:dd:98:0f:ca:04:4c:5e:e8:08:b3: 6d:0b:d3:cb:1d:9e:a1:9f:7e:48:7f:7f:ae:22:77: fe:6c:74:cd:5d:16:13:49:33:26:3f:ab:c3:c1:8f: 9d:42:ac:1f:04:10:12:38:1b:11:5b:3e:1f:c8:9f: 27:82:8f:8f:4d:37:e3:8d:fd:8d:5a:f0:54:6b:8d: 9b:16:a4:ce:4e:4e:ee:25:4f:c5:b3:74:68:a1:20: 10:02:21:79:0f:c9:28:81:60:ce:62:2a:13:46:64: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:90:64:54:BD:38:75:63:98:DF:06:71:CA:9D:CF:AD:29:F0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:9b:02:94:4e:de:75:c6:06:9a:44:0f:9b:77:65:5d:0d:d1: c8:d9:13:38:08:d7:26:e7:e1:b1:5b:15:4d:96:7a:b1:94:0a: 36:af:2c:2e:aa:42:b6:74:9d:5a:bb:d6:dd:ea:36:1c:db:a7: a5:d3:1b:a5:6d:4b:60:5b:55:12:29:4d:c9:4b:89:2a:5f:f2: 4a:8a:6f:14:66:71:01:72:e9:1d:7f:e6:0e:bb:d8:55:f3:92: de:83:f8:45:07:d2:63:2f:bc:a6:ec:90:d5:d7:be:f0:a9:64: 1c:d0:67:73:87:52:0c:92:86:17:3b:c6:96:53:e6:77:f8:45: e7:1d:49:a0:4a:cc:0e:a5:b3:ae:f4:5c:ef:88:da:8d:48:93: 93:d6:c2:5f:5e:8e:db:02:b2:26:4a:2e:a9:4b:59:f8:2f:e1: 76:80:60:1a:15:41:7b:9c:69:f7:3d:14:b6:09:98:10:de:58: 3c:19:fc:f5:0c:d1:73:3b:80:6c:c4:eb:bd:69:da:53:5c:a9: 87:0c:3f:de:95:d1:51:19:40:2c:6a:e8:ec:c3:02:70:7b:42: a9:de:00:52:a8:4b:3f:5b:4f:a6:88:5b:35:e3:73:13:70:4f: 02:df:b2:2e:38:4c:dd:44:e3:81:8b:c5:c7:68:b3:ff:cf:e7: 05:fd:50:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgxYXrN8nVlLjxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ1NjM5MDUtOGFmNS00MTA2LWIzZDUtODA1OTE5YmEwZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo05WrzT4eLDwfvPSDxNBTQBROdTgFxEH1nU/ cTsBvTuU6nmCSuVJeubtUYtsCYOCWguYFMaX41AbpXqoPk4NSdgJCovU21YL6G5F MiheI0ArnjhMinYn6dR/DuZXi1HMkUJ/kzbUUVyxc0s/k6iGvWwxrFtRcp2Ecmkl N4+cfbmPbWvOPFYEeh6vtfxyN8ulMJhG8PP0q7AENt2YD8oETF7oCLNtC9PLHZ6h n35If3+uInf+bHTNXRYTSTMmP6vDwY+dQqwfBBASOBsRWz4fyJ8ngo+PTTfjjf2N WvBUa42bFqTOTk7uJU/Fs3RooSAQAiF5D8kogWDOYioTRmQvSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUYkGRUvTh1Y5jfBnHKnc+tKfCdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4OGI0NWItNDU4ZS0z YTdiLWIyOWEtZjBkZDNiOTY2ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSbApRO3nXGBppED5t3ZV0N0cjZEzgI1ybn4bFbFU2WerGUCjavLC6q QrZ0nVq71t3qNhzbp6XTG6VtS2BbVRIpTclLiSpf8kqKbxRmcQFy6R1/5g672FXz kt6D+EUH0mMvvKbskNXXvvCpZBzQZ3OHUgyShhc7xpZT5nf4RecdSaBKzA6ls670 XO+I2o1Ik5PWwl9ejtsCsiZKLqlLWfgv4XaAYBoVQXucafc9FLYJmBDeWDwZ/PUM 0XM7gGzE671p2lNcqYcMP96V0VEZQCxq6OzDAnB7QqneAFKoSz9bT6aIWzXjcxNw TwLfsi44TN1E44GLxcdos//P5wX9UIk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:16:50 2026 by rpki-client