$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db95be4f-571e-3ed0-814d-c990f49b7931.roa File: db95be4f-571e-3ed0-814d-c990f49b7931.roa (raw, json) Hash identifier: AKk9MH8y8lxzyIixK4HP2n15Tk3xZG7W4YZdUFbu3OY= Subject key identifier: 78:B4:04:EB:F4:38:B8:07:EC:08:17:58:53:F1:EA:28:59:69:CC:36 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF9B416B746D17A12FB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db95be4f-571e-3ed0-814d-c990f49b7931.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f9:b4:16:b7:46:d1:7a:12:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5db2e88d-3b49-4176-8c26-3c01cd53bbe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:c8:0e:7d:72:10:35:ca:64:d0:c8:54:e1: 9d:fe:b8:1a:a0:83:5c:5e:fc:dc:e4:45:ff:1e:1b: a6:56:8e:e7:c2:72:06:3e:b9:df:52:c4:66:77:89: d5:48:57:b5:21:9b:21:35:8e:d2:89:57:5c:0b:2c: 1f:e8:0f:de:80:0a:5c:d1:6d:04:5d:64:58:e5:b9: c2:4e:d0:5e:f9:9b:84:08:58:95:0f:94:98:c6:d7: b7:ba:5f:20:7e:47:91:66:31:65:b9:05:7b:f5:f8: b6:b2:c3:58:40:e4:f0:fe:55:15:f3:fc:b5:55:ce: 03:13:ac:df:fd:67:08:88:4a:58:65:6d:1f:88:c3: a6:94:4d:04:81:fc:b4:2f:97:ed:d4:7b:3c:a5:71: 88:ff:fa:83:64:51:24:2d:64:3b:bb:d1:3a:e3:76: 5c:58:7c:e3:81:04:bd:c8:8e:bb:09:f8:30:39:3b: b2:9b:a7:b8:0a:77:61:5b:74:97:8d:34:82:ad:8a: d2:d3:fb:29:14:b9:fd:78:48:67:66:d5:83:ca:e2: b9:ac:15:4f:08:76:d8:e2:ea:75:15:18:b9:40:b2: 6b:9b:02:46:ac:fa:59:41:5a:79:98:01:22:31:c5: 7c:86:bf:fa:b4:01:a5:8b:7a:ae:95:20:d5:30:f2: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B4:04:EB:F4:38:B8:07:EC:08:17:58:53:F1:EA:28:59:69:CC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/db95be4f-571e-3ed0-814d-c990f49b7931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:54:08:01:87:a3:2c:20:23:26:53:c5:0e:1a:ee:ad:69:aa: bc:99:67:46:c2:0d:38:f9:fe:f5:c7:b8:27:ea:3b:03:5a:56: 36:65:77:b1:5e:3b:53:be:a0:44:34:4f:1b:24:31:d9:3d:be: 2d:ba:17:ab:51:c6:ec:4b:f1:a5:4b:2c:f8:b4:a2:8a:54:83: 19:4b:96:83:16:5f:ca:53:c4:13:3f:fc:df:88:39:10:f4:63: 33:f5:20:ca:a7:02:d4:b6:de:a9:8f:e1:d2:90:12:ac:42:0b: c1:e0:96:b8:7a:c0:f1:b7:c1:70:c0:5a:8b:bb:95:04:9a:f0: 31:ce:0c:98:33:7a:70:bb:3b:e3:5a:d6:d2:7d:a1:8f:a2:e7: 66:cd:5b:c5:8d:8d:cd:52:30:6c:ab:37:ea:37:0c:69:d7:43: 36:47:77:c7:45:20:b3:1b:48:30:b5:60:66:68:0e:60:47:7e: ab:57:bc:d2:fc:2b:0c:b1:d0:63:ce:97:7e:a9:38:74:47:c4: 01:5c:ee:22:cf:e6:3d:fc:b2:d1:63:00:61:d1:bd:f5:8b:cf: e4:83:bc:8c:69:de:43:01:54:b1:c3:00:e1:af:d4:e8:58:5e: 8c:ee:bf:8e:0f:f2:c2:3a:89:0f:e0:aa:30:e2:40:18:37:11: 06:fc:0c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jevm0FrdG0XoS+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRiMmU4OGQtM2I0OS00MTc2LThjMjYtM2MwMWNkNTNiYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV3IDn1yEDXKZNDIVOGd/rgaoINcXvzc5EX/ HhumVo7nwnIGPrnfUsRmd4nVSFe1IZshNY7SiVdcCywf6A/egApc0W0EXWRY5bnC TtBe+ZuECFiVD5SYxte3ul8gfkeRZjFluQV79fi2ssNYQOTw/lUV8/y1Vc4DE6zf /WcIiEpYZW0fiMOmlE0Egfy0L5ft1Hs8pXGI//qDZFEkLWQ7u9E643ZcWHzjgQS9 yI67CfgwOTuym6e4CndhW3SXjTSCrYrS0/spFLn9eEhnZtWDyuK5rBVPCHbY4up1 FRi5QLJrmwJGrPpZQVp5mAEiMcV8hr/6tAGli3qulSDVMPJ72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi0BOv0OLgH7AgXWFPx6ihZacw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGI5NWJlNGYtNTcxZS0z ZWQwLTgxNGQtYzk5MGY0OWI3OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9UCAGHoywgIyZTxQ4a7q1pqryZZ0bCDTj5/vXHuCfqOwNaVjZld7Fe O1O+oEQ0TxskMdk9vi26F6tRxuxL8aVLLPi0oopUgxlLloMWX8pTxBM//N+IORD0 YzP1IMqnAtS23qmP4dKQEqxCC8Hglrh6wPG3wXDAWou7lQSa8DHODJgzenC7O+Na 1tJ9oY+i52bNW8WNjc1SMGyrN+o3DGnXQzZHd8dFILMbSDC1YGZoDmBHfqtXvNL8 Kwyx0GPOl36pOHRHxAFc7iLP5j38stFjAGHRvfWLz+SDvIxp3kMBVLHDAOGv1OhY Xozuv44P8sI6iQ/gqjDiQBg3EQb8DJQ= -----END CERTIFICATE-----Generated at Fri Oct 2 13:05:27 2026 by rpki-client