$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa File: dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa (raw, json) Hash identifier: r4q/FYk/WOntapRWkhsET86BNXpQUNv3TikKmFCRkkA= Subject key identifier: F0:68:9C:D7:DA:EA:2B:18:A0:E9:A0:03:A8:0D:22:27:1B:F5:5A:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983123B72BE01A5F132A480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:12:3b:72:be:01:a5:f1:32:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e4446a3-362b-4618-ad79-d334c1a79a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c0:27:82:0d:8c:40:e3:80:d9:f9:6a:4e:95: 7f:38:a9:e8:0d:55:88:fc:8c:7d:1b:9d:84:6d:3d: f3:77:eb:b6:80:e6:6f:1b:9f:fd:99:ec:44:fb:93: 15:c3:95:5a:02:6b:a2:32:b6:a1:60:77:8e:79:81: 11:0e:db:62:b1:04:21:a5:90:a9:18:5a:dd:f9:81: 58:c2:8e:68:38:1c:09:48:f1:f2:c8:35:88:f3:4e: 78:c0:9d:53:b4:bd:8d:23:af:b0:26:90:45:86:84: 85:89:0a:8d:72:a0:8e:b9:9d:fc:9f:56:65:c8:3e: 76:d2:9e:18:65:90:a9:eb:7e:5b:6c:7f:58:b1:a5: 49:d2:08:47:e2:b8:da:33:66:13:a2:88:be:cd:0f: 78:e3:69:14:ca:5e:7a:88:67:84:d4:09:18:97:1d: 28:a0:8c:61:00:56:50:8d:49:5c:43:dd:a1:52:bb: 68:b2:26:82:cc:ed:68:94:f2:a8:c6:a2:a6:5c:4c: 28:12:32:cd:68:5c:db:78:94:f1:79:e0:6c:8c:97: 0a:8d:ff:17:43:1b:c8:e8:76:27:27:6e:10:61:d9: b1:20:0c:05:0c:4e:ce:41:4b:60:00:0e:05:29:15: 28:72:27:9b:b0:3d:c5:37:ec:92:40:fe:6f:2c:df: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:68:9C:D7:DA:EA:2B:18:A0:E9:A0:03:A8:0D:22:27:1B:F5:5A:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc21e017-f16c-3a0f-8e19-3cf9daf65384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:d9:2f:1f:0c:f1:ea:c3:0c:b5:41:b2:ee:c7:2f:0d:07: a0:ee:ef:2e:05:98:09:27:12:a8:40:53:ec:3f:f3:41:59:f7: f3:dd:58:8b:72:6e:cd:ce:02:02:83:08:03:94:79:7b:4b:30: be:9f:81:92:98:27:bb:c7:fc:bd:e4:0a:0e:1e:ba:28:62:8e: 2e:91:97:25:7e:47:df:82:5a:99:cd:89:5c:df:2e:4c:eb:a3: 4e:a1:7d:92:4f:b5:a1:ea:c5:c9:c5:a0:91:b4:88:9d:b5:bd: 4f:b2:2f:dc:f9:ac:0e:f1:10:45:01:30:60:dd:d5:36:6c:f1: 07:b4:8f:6a:af:e8:1e:cf:d4:3f:c9:9d:12:d5:2e:8d:f0:c1: b6:6b:9d:8e:30:0c:b1:bd:42:75:99:f1:d7:6f:92:30:e8:91: 2d:6e:c1:70:87:10:82:3a:4b:34:a0:78:28:91:c6:bc:68:51: c6:16:9d:4e:ce:32:43:d3:0c:37:2f:68:bc:1c:16:1c:c8:20: e8:55:2c:a5:85:99:06:38:d4:c7:33:d2:f3:94:6c:cc:47:a3: d7:2c:ef:32:cf:e1:07:8e:02:60:8e:9c:e8:8f:19:72:00:c4: 15:18:6a:ce:8b:52:77:41:6c:59:6b:f8:2d:7f:9d:7c:9a:df: 95:88:cf:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgxI7cr4BpfEypIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU0NDQ2YTMtMzYyYi00NjE4LWFkNzktZDMzNGMxYTc5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MAngg2MQOOA2flqTpV/OKnoDVWI/Ix9G52E bT3zd+u2gOZvG5/9mexE+5MVw5VaAmuiMrahYHeOeYERDttisQQhpZCpGFrd+YFY wo5oOBwJSPHyyDWI8054wJ1TtL2NI6+wJpBFhoSFiQqNcqCOuZ38n1ZlyD520p4Y ZZCp635bbH9YsaVJ0ghH4rjaM2YTooi+zQ9442kUyl56iGeE1AkYlx0ooIxhAFZQ jUlcQ92hUrtosiaCzO1olPKoxqKmXEwoEjLNaFzbeJTxeeBsjJcKjf8XQxvI6HYn J24QYdmxIAwFDE7OQUtgAA4FKRUociebsD3FN+ySQP5vLN8yrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBonNfa6isYoOmgA6gNIicb9VrHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGMyMWUwMTctZjE2Yy0z YTBmLThlMTktM2NmOWRhZjY1Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkb2S8fDPHqwwy1QbLuxy8NB6Du7y4FmAknEqhAU+w/80FZ9/PdWIty bs3OAgKDCAOUeXtLML6fgZKYJ7vH/L3kCg4euihiji6RlyV+R9+CWpnNiVzfLkzr o06hfZJPtaHqxcnFoJG0iJ21vU+yL9z5rA7xEEUBMGDd1TZs8Qe0j2qv6B7P1D/J nRLVLo3wwbZrnY4wDLG9QnWZ8ddvkjDokS1uwXCHEII6SzSgeCiRxrxoUcYWnU7O MkPTDDcvaLwcFhzIIOhVLKWFmQY41Mcz0vOUbMxHo9cs7zLP4QeOAmCOnOiPGXIA xBUYas6LUndBbFlr+C1/nXya35WIz7Y= -----END CERTIFICATE-----Generated at Fri Oct 9 18:40:14 2026 by rpki-client