$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa File: ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa (raw, json) Hash identifier: Sq+yCC3u3SMfJRIckn55JCVY4bW/uSTtgTDlU3unqFM= Subject key identifier: 1F:5C:1A:1E:3A:3D:96:B9:73:BB:B6:A7:5B:FA:5C:E9:EC:2A:E3:BB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB6389BCD9B67CBCD5E20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b6:38:9b:cd:9b:67:cb:cd:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8f63e7ad-b0c6-4ad6-b3b4-1b30fb0a1bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4a:6a:7c:30:ed:b8:45:a7:58:6c:7a:45:74: 1c:da:01:a5:01:56:58:c6:56:ca:c3:ec:48:ff:4c: 0c:b2:ec:03:52:8a:1c:74:1b:65:15:8f:a7:b2:51: 9d:f0:5c:a0:85:22:7d:29:e1:3b:c4:97:89:61:66: bb:41:9d:92:57:c3:69:c0:cb:05:ec:bb:8f:5c:84: 72:76:a9:ca:4d:23:f2:d3:89:c2:34:ac:31:70:e9: 90:9d:5f:d2:f2:72:72:89:19:3e:c6:35:fe:31:cb: ac:b4:a8:c3:9f:33:a5:a8:a0:87:2b:4e:05:34:e2: 81:83:0d:35:55:67:61:9b:7c:22:51:be:3a:e3:81: 2b:26:cb:74:b1:57:9f:8b:a9:b3:3d:ab:f6:df:22: 91:e9:25:6e:45:5b:79:30:bc:6c:00:f3:97:27:99: 31:e9:cd:47:62:d1:5a:20:d7:44:5c:b8:5a:43:1d: 30:13:15:a8:8c:ef:4c:e5:4a:7f:5d:e1:66:14:87: f8:2e:26:d2:a4:f8:1e:0a:ed:ac:7b:47:42:6c:99: f1:a0:c5:67:1f:e8:25:51:d9:3d:00:fe:85:2c:e5: 1b:d7:b1:9e:28:de:18:9b:60:66:40:4c:84:9c:03: 87:90:cd:04:a3:8e:f4:cf:e2:af:c3:6b:b9:86:65: 46:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5C:1A:1E:3A:3D:96:B9:73:BB:B6:A7:5B:FA:5C:E9:EC:2A:E3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea353ec3-0b44-34a7-b6bb-8ef0bf6f2869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ce:2c:63:a0:f6:12:fb:61:b0:ce:8d:93:fa:4a:da:64:79: 29:cd:fc:02:d9:4e:f5:57:06:76:36:6c:62:4c:35:56:7c:d1: 4f:76:34:28:dc:b9:93:3c:dd:07:b4:45:44:71:52:b5:bf:1c: 08:54:3e:52:30:53:06:d6:33:06:8d:22:1e:52:88:a3:82:66: 50:1d:9d:e3:7b:98:f5:f9:14:ae:1c:6f:79:7a:bd:fc:e2:d7: da:79:2e:2b:4a:3f:37:e5:fe:ca:a0:6c:36:49:ff:c3:f6:c0: f7:da:15:7d:12:4c:dd:43:18:87:b1:0d:73:cc:da:b3:f2:0e: d7:9b:50:46:b3:ae:27:24:5b:f6:67:c6:9b:04:dd:f7:ec:b6: bb:4f:25:43:3c:0b:ac:80:48:e1:54:a4:f2:86:72:03:18:23: 48:df:60:ef:c0:f1:57:ed:cc:04:bb:ed:48:3a:5a:12:39:1d: a9:12:ca:63:b0:be:e0:f3:9b:3e:d1:0f:7d:bf:54:c4:aa:a4: 90:87:7c:a1:f9:6e:cc:f6:32:92:76:15:2c:70:2f:3f:63:de: 44:f4:9e:b8:60:94:36:25:61:07:48:74:b3:06:ba:f3:06:3a: 73:bb:9b:3b:f2:a6:5b:dc:68:9c:a4:49:69:36:a7:bd:4c:65: 65:fe:64:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37Y4m82bZ8vNXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGY2M2U3YWQtYjBjNi00YWQ2LWIzYjQtMWIzMGZiMGExYmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kpqfDDtuEWnWGx6RXQc2gGlAVZYxlbKw+xI /0wMsuwDUoocdBtlFY+nslGd8FyghSJ9KeE7xJeJYWa7QZ2SV8NpwMsF7LuPXIRy dqnKTSPy04nCNKwxcOmQnV/S8nJyiRk+xjX+McustKjDnzOlqKCHK04FNOKBgw01 VWdhm3wiUb4644ErJst0sVefi6mzPav23yKR6SVuRVt5MLxsAPOXJ5kx6c1HYtFa INdEXLhaQx0wExWojO9M5Up/XeFmFIf4LibSpPgeCu2se0dCbJnxoMVnH+glUdk9 AP6FLOUb17GeKN4Ym2BmQEyEnAOHkM0Eo470z+Kvw2u5hmVGiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9cGh46PZa5c7u2p1v6XOnsKuO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWEzNTNlYzMtMGI0NC0z NGE3LWI2YmItOGVmMGJmNmYyODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/OLGOg9hL7YbDOjZP6StpkeSnN/ALZTvVXBnY2bGJMNVZ80U92NCjc uZM83Qe0RURxUrW/HAhUPlIwUwbWMwaNIh5SiKOCZlAdneN7mPX5FK4cb3l6vfzi 19p5LitKPzfl/sqgbDZJ/8P2wPfaFX0STN1DGIexDXPM2rPyDtebUEazrickW/Zn xpsE3ffstrtPJUM8C6yASOFUpPKGcgMYI0jfYO/A8VftzAS77Ug6WhI5HakSymOw vuDzmz7RD32/VMSqpJCHfKH5bsz2MpJ2FSxwLz9j3kT0nrhglDYlYQdIdLMGuvMG OnO7mzvyplvcaJykSWk2p71MZWX+ZNI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:55 2026 by rpki-client