$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa File: df8122e1-4a7a-3021-ae49-af2fa28a8089.roa (raw, json) Hash identifier: 4wtvIiUvRZ00fFgsCJKHWzIffcsrZd/8grKxFc/bo+I= Subject key identifier: 44:26:2C:82:37:35:41:2B:4D:B3:86:FF:DD:02:FF:68:24:C4:F6:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AEE347F2651FD4C621600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:ee:34:7f:26:51:fd:4c:62:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ae32a570-3a43-4f2f-9764-342e75dacf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:48:b3:ad:9f:21:00:e8:86:33:2d:f2:d1:db: 12:9f:0a:9e:88:c0:b0:21:a9:53:b4:9e:aa:4c:3a: 80:0d:b9:94:c0:f9:4b:b4:0d:29:2d:f1:7c:4f:f6: cd:b9:d9:c8:4a:86:4d:22:9d:92:0d:3f:63:95:35: 2c:bb:e9:f2:ae:db:39:0f:57:32:9a:26:50:4c:5d: e4:28:29:e2:7d:50:f7:f9:15:b5:e5:fc:d8:03:bd: 27:7e:00:9d:fb:bb:66:e9:4d:7e:40:64:86:df:c1: 13:a5:97:82:9a:39:c1:92:ca:e4:84:d5:27:83:c4: c0:3f:c9:8e:62:db:d9:46:a6:88:40:e6:40:3f:15: 77:2b:7f:f8:a3:a3:31:c8:59:e7:d9:2e:5f:50:0f: 3a:fc:ed:97:b5:04:f7:50:eb:4e:5d:f1:6a:0d:49: 1b:57:ca:47:c1:1a:2f:70:60:60:15:36:31:e9:dd: 7d:fe:2b:cd:7c:4c:d5:55:ac:65:2a:17:25:52:00: 73:32:03:58:15:15:16:cb:35:8b:8c:f3:ba:27:5e: 24:71:2b:d2:f5:15:02:a2:a9:09:04:18:eb:96:fd: 44:df:6c:5e:b2:d2:90:f6:c5:47:3c:9f:ff:e3:62: 3c:84:ce:92:2c:77:b4:df:6e:56:b3:76:80:ac:d8: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:2C:82:37:35:41:2B:4D:B3:86:FF:DD:02:FF:68:24:C4:F6:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df8122e1-4a7a-3021-ae49-af2fa28a8089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bd:fe:ed:80:f4:70:68:05:27:1b:bc:9e:f1:32:d1:3f:95: 94:8d:b6:e6:d2:01:ae:d4:cf:d8:0c:30:54:08:23:35:7e:43: ca:67:fd:fa:5a:27:4c:38:34:49:c4:26:f9:1b:19:94:03:24: bc:94:8b:17:96:be:98:ed:31:17:17:7a:0c:2a:61:0e:ae:85: 96:18:b7:6b:30:a5:d4:d8:f1:3a:60:cd:d9:36:7e:47:4b:bb: 99:e7:3a:77:81:4f:ec:f7:94:17:99:7d:91:36:60:48:69:2f: 2e:a3:e6:10:79:50:d4:70:a0:84:a4:ef:76:5d:1b:82:e3:05: 41:e5:f3:09:b4:d9:1e:69:2a:eb:66:a2:cb:a4:af:cb:89:81: 1d:b6:c5:0d:b9:ad:85:c0:4c:9e:50:eb:22:0e:82:68:45:36: ad:14:94:b7:f6:cb:aa:4c:53:3f:ca:f3:27:a0:62:74:86:79: 32:8e:c7:59:c3:98:98:b3:0b:98:28:8b:a2:a7:c0:b6:ec:5f: 79:3e:dd:9a:4d:7e:c6:62:76:ec:dc:a4:40:8d:ff:3f:d0:b7: 7b:06:1e:9e:6b:db:3e:32:65:a7:c8:ae:28:c6:17:3b:ff:78: da:41:34:ec:d8:e7:70:df:f4:59:87:29:ac:fe:af:10:6d:2a: 9f:40:7a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jeu40fyZR/UxiFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWUzMmE1NzAtM2E0My00ZjJmLTk3NjQtMzQyZTc1ZGFjZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EizrZ8hAOiGMy3y0dsSnwqeiMCwIalTtJ6q TDqADbmUwPlLtA0pLfF8T/bNudnISoZNIp2SDT9jlTUsu+nyrts5D1cymiZQTF3k KCnifVD3+RW15fzYA70nfgCd+7tm6U1+QGSG38ETpZeCmjnBksrkhNUng8TAP8mO YtvZRqaIQOZAPxV3K3/4o6MxyFnn2S5fUA86/O2XtQT3UOtOXfFqDUkbV8pHwRov cGBgFTYx6d19/ivNfEzVVaxlKhclUgBzMgNYFRUWyzWLjPO6J14kcSvS9RUCoqkJ BBjrlv1E32xestKQ9sVHPJ//42I8hM6SLHe0325Ws3aArNgeJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQmLII3NUErTbOG/90C/2gkxPaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY4MTIyZTEtNGE3YS0z MDIxLWFlNDktYWYyZmEyOGE4MDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARik2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi9/u2A9HBoBScbvJ7xMtE/lZSNtubSAa7Uz9gMMFQIIzV+Q8pn/fpa J0w4NEnEJvkbGZQDJLyUixeWvpjtMRcXegwqYQ6uhZYYt2swpdTY8Tpgzdk2fkdL u5nnOneBT+z3lBeZfZE2YEhpLy6j5hB5UNRwoISk73ZdG4LjBUHl8wm02R5pKutm osukr8uJgR22xQ25rYXATJ5Q6yIOgmhFNq0UlLf2y6pMUz/K8yegYnSGeTKOx1nD mJizC5goi6KnwLbsX3k+3ZpNfsZiduzcpECN/z/Qt3sGHp5r2z4yZafIrijGFzv/ eNpBNOzY53Df9FmHKaz+rxBtKp9Aelo= -----END CERTIFICATE-----Generated at Sun Oct 4 06:56:45 2026 by rpki-client