$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa File: e8a019c9-f1ec-3359-a095-365452fea81d.roa (raw, json) Hash identifier: d4AkI4cb+mVxa6MkQEJcA5gYv6szDkYCP/GhIPkRWvU= Subject key identifier: D3:C1:8C:73:4F:4D:5E:66:CB:75:03:97:13:8A:09:8C:F1:78:14:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFA74227EABF773FC8FE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 70.41.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a7:42:27:ea:bf:77:3f:c8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0d6074a9-5daf-4b87-aa65-e7c330c514c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:04:ae:f8:e9:1f:40:11:30:9d:88:da:cd: b6:c6:1a:5f:52:b4:d7:cc:b6:02:f5:1d:62:bd:0b: 2f:d1:f2:23:bc:48:47:24:31:12:95:fb:31:34:73: 73:73:6c:cb:e5:7c:d8:fb:04:97:d4:6c:bd:f9:27: 71:bc:bc:36:22:9f:e7:ef:a3:d9:68:a1:07:99:56: e7:db:c9:9e:d8:e5:59:d1:25:12:b8:8c:85:b1:22: 15:e4:b7:cc:da:bb:99:0c:82:71:f3:83:3b:d0:d4: a6:24:f1:6e:de:52:29:4f:a1:aa:7b:5d:2e:54:ae: f8:83:99:f5:9f:51:63:11:73:bc:75:81:e0:0e:97: 07:5e:dc:12:24:f9:3f:0d:7e:34:84:28:bc:92:5e: da:b4:53:61:a3:a9:ab:35:6f:e0:83:48:f0:1a:1a: 2d:dc:38:64:2c:58:b2:b4:f6:71:2a:d1:1b:95:ae: 46:69:f8:ed:27:88:9e:30:20:f2:ab:4e:72:1b:5e: c0:e1:2f:15:a5:7a:e9:49:7e:46:e3:37:a2:05:ec: fd:c1:7c:70:01:6c:af:85:a0:83:e4:ba:9a:b0:06: b1:c7:54:75:ff:5a:17:a2:57:1b:25:75:c1:1f:3c: 5c:ec:21:fe:15:9d:76:f6:1b:db:ab:ca:5b:b2:b7: bd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C1:8C:73:4F:4D:5E:66:CB:75:03:97:13:8A:09:8C:F1:78:14:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e8a019c9-f1ec-3359-a095-365452fea81d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a6:0e:f3:2d:91:ce:ab:0b:60:37:85:f7:16:16:ba:76:e7: f7:6c:02:11:d2:af:42:0c:ea:f9:56:61:3c:0d:e7:58:a3:e5: 44:10:18:75:5d:cc:ac:13:fb:e2:11:fd:5c:99:ea:79:86:29: 7b:5f:25:6d:b6:63:4b:ec:9a:6f:33:2e:6e:5b:18:21:a5:cc: 11:e3:97:c9:af:06:2d:8e:01:91:81:28:de:7c:bf:6c:75:9c: 12:ae:f1:c2:09:c9:74:32:d6:4e:23:48:78:3b:78:07:aa:6f: 9e:8e:d6:86:b7:f6:a2:c4:29:82:1f:2b:e9:48:85:06:2e:3a: 30:b2:54:87:75:db:ea:ac:0b:57:52:88:5a:c6:f3:3c:1c:c1: 5c:32:49:df:bc:25:f5:30:89:be:48:99:88:45:32:fc:e8:6b: 64:ef:0f:39:91:33:6a:c9:ce:c7:cb:d2:0e:79:64:74:0a:61: 8b:d2:39:02:40:a0:fc:74:dd:42:c8:99:c5:48:53:7d:fb:49: 42:c5:e2:a6:91:5b:1c:e5:8f:7d:dd:35:88:1f:b6:f7:d7:67: d9:f5:86:ca:f7:52:0d:2c:04:37:a2:87:0d:94:9b:90:b1:16: 65:fc:6b:b3:91:1a:e5:f9:88:a1:30:eb:b6:26:4e:89:be:11: 44:6e:ac:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36dCJ+q/dz/I/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGQ2MDc0YTktNWRhZi00Yjg3LWFhNjUtZTdjMzMwYzUxNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDAErvjpH0ARMJ2I2s22xhpfUrTXzLYC9R1i vQsv0fIjvEhHJDESlfsxNHNzc2zL5XzY+wSX1Gy9+SdxvLw2Ip/n76PZaKEHmVbn 28me2OVZ0SUSuIyFsSIV5LfM2ruZDIJx84M70NSmJPFu3lIpT6Gqe10uVK74g5n1 n1FjEXO8dYHgDpcHXtwSJPk/DX40hCi8kl7atFNho6mrNW/gg0jwGhot3DhkLFiy tPZxKtEbla5GafjtJ4ieMCDyq05yG17A4S8VpXrpSX5G4zeiBez9wXxwAWyvhaCD 5LqasAaxx1R1/1oXolcbJXXBHzxc7CH+FZ129hvbq8pbsre9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPBjHNPTV5my3UDlxOKCYzxeBQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZThhMDE5YzktZjFlYy0z MzU5LWEwOTUtMzY1NDUyZmVhODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHimDvMtkc6rC2A3hfcWFrp25/dsAhHSr0IM6vlWYTwN51ij5UQQGHVd zKwT++IR/VyZ6nmGKXtfJW22Y0vsmm8zLm5bGCGlzBHjl8mvBi2OAZGBKN58v2x1 nBKu8cIJyXQy1k4jSHg7eAeqb56O1oa39qLEKYIfK+lIhQYuOjCyVId12+qsC1dS iFrG8zwcwVwySd+8JfUwib5ImYhFMvzoa2TvDzmRM2rJzsfL0g55ZHQKYYvSOQJA oPx03ULImcVIU337SULF4qaRWxzlj33dNYgftvfXZ9n1hsr3Ug0sBDeihw2Um5Cx FmX8a7ORGuX5iKEw67YmTom+EURurCM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:35 2026 by rpki-client