$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa File: d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa (raw, json) Hash identifier: 3W7LSEUYVTxPw220apHKE5CCvPGj2fdkou5azQ7OlH0= Subject key identifier: B1:C0:3C:78:19:2A:CC:78:C1:F3:38:DD:87:D1:19:0A:40:88:AB:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05ED9C1FFA30B4CD78220 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:5e:d9:c1:ff:a3:0b:4c:d7:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=aedfc46e-a776-464f-90fd-ea838ef7f3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:28:9c:33:42:4d:cc:17:93:46:a9:62:17:4b: c1:fc:17:fa:9e:da:5f:78:ac:a6:f9:99:5d:43:d2: d5:98:da:f6:1b:30:75:cd:d9:4b:a4:3c:0d:2a:b5: 52:1e:67:42:f1:76:0b:8e:e2:ef:93:c2:65:37:6f: 10:cf:6e:27:84:f3:cc:5a:e9:be:fd:8b:df:b5:4b: dd:d3:5e:55:8f:13:ca:b9:21:01:98:0a:20:01:0c: ee:b1:71:79:e0:ae:a6:c3:ee:39:00:aa:2f:30:95: 99:d9:a1:ad:da:07:39:5c:2a:5f:ba:70:f5:35:fd: a7:c5:5b:5b:f4:29:c1:03:66:98:4b:d6:55:83:76: c7:18:00:9f:91:e2:52:42:d7:7d:fa:f2:71:9f:5e: d2:4b:5e:c2:23:32:ab:b9:19:1f:79:e1:cb:02:db: 0d:01:de:97:ec:d9:01:90:c6:fe:07:b4:34:d1:83: 17:15:55:16:23:02:94:08:8a:47:01:2e:47:0b:1d: ec:2c:20:1a:d3:85:d6:f3:25:51:9c:ec:17:17:b4: b6:2d:10:fc:df:e9:30:5b:71:96:cb:46:37:62:0b: 0e:e0:e7:57:64:fa:75:40:1c:0f:1e:4c:31:73:f6: 9d:57:75:ae:7c:f4:d6:bd:1a:f3:42:87:81:bb:56: 35:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C0:3C:78:19:2A:CC:78:C1:F3:38:DD:87:D1:19:0A:40:88:AB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d688b45b-458e-3a7b-b29a-f0dd3b966fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:a3:5f:98:95:02:27:fa:38:42:ad:d4:c0:59:1a:5d:c7:36: 01:ce:1e:bc:7f:ec:3a:3c:5f:9f:54:8e:32:26:0f:01:b3:a0: 47:75:e1:01:4c:a8:a5:71:ec:0a:fb:1b:91:bb:e4:ce:de:bf: e2:b6:7b:29:0b:62:fc:0e:ef:44:6e:ec:09:1e:79:10:f9:82: 9c:59:86:b5:f0:3f:27:a9:25:4e:bb:da:34:f8:9b:28:15:91: ea:c8:9b:95:e8:d9:19:11:f6:e5:80:ee:d5:cc:1a:d1:d2:67: cc:4f:5d:29:0c:f3:22:21:3d:95:62:cc:e6:96:8e:04:cc:c0: 3b:73:fa:0a:8a:36:2b:d2:ac:5d:f7:6c:ba:8b:32:9c:36:22: 2b:a9:17:41:7f:2c:1b:8b:93:9e:dd:02:ba:55:b2:fe:d2:54: db:79:53:93:81:1c:5d:a3:58:a3:bf:c4:8a:01:0e:70:94:e4: cc:79:4d:46:8d:67:cc:4e:d2:9e:4f:09:3f:09:13:86:be:e3: 54:33:be:3a:ae:2b:91:76:6f:84:bf:1b:8f:e2:76:2e:d3:cd: 48:33:80:77:f1:fd:72:87:9f:08:5b:20:eb:46:2f:cc:7d:5b: ef:0f:8f:eb:0a:b5:7a:69:c4:3f:e2:a1:d2:e3:2f:d4:2e:f6: 3e:59:b6:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4F7Zwf+jC0zXgiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWVkZmM0NmUtYTc3Ni00NjRmLTkwZmQtZWE4MzhlZjdmM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiicM0JNzBeTRqliF0vB/Bf6ntpfeKym+Zld Q9LVmNr2GzB1zdlLpDwNKrVSHmdC8XYLjuLvk8JlN28Qz24nhPPMWum+/YvftUvd 015VjxPKuSEBmAogAQzusXF54K6mw+45AKovMJWZ2aGt2gc5XCpfunD1Nf2nxVtb 9CnBA2aYS9ZVg3bHGACfkeJSQtd9+vJxn17SS17CIzKruRkfeeHLAtsNAd6X7NkB kMb+B7Q00YMXFVUWIwKUCIpHAS5HCx3sLCAa04XW8yVRnOwXF7S2LRD83+kwW3GW y0Y3YgsO4OdXZPp1QBwPHkwxc/adV3WufPTWvRrzQoeBu1Y1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHAPHgZKsx4wfM43YfRGQpAiKtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4OGI0NWItNDU4ZS0z YTdiLWIyOWEtZjBkZDNiOTY2ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmjX5iVAif6OEKt1MBZGl3HNgHOHrx/7Do8X59UjjImDwGzoEd14QFM qKVx7Ar7G5G75M7ev+K2eykLYvwO70Ru7AkeeRD5gpxZhrXwPyepJU672jT4mygV kerIm5Xo2RkR9uWA7tXMGtHSZ8xPXSkM8yIhPZVizOaWjgTMwDtz+gqKNivSrF33 bLqLMpw2IiupF0F/LBuLk57dArpVsv7SVNt5U5OBHF2jWKO/xIoBDnCU5Mx5TUaN Z8xO0p5PCT8JE4a+41QzvjquK5F2b4S/G4/idi7TzUgzgHfx/XKHnwhbIOtGL8x9 W+8Pj+sKtXppxD/iodLjL9Qu9j5Ztrs= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:55 2026 by rpki-client