$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa File: f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa (raw, json) Hash identifier: 2ju4gvBclm+TWjwYj6LtDZBoq2dwYIJaTODrC5vR8EE= Subject key identifier: DA:45:C5:14:07:90:FA:97:C4:EE:A6:19:2E:20:5F:C0:8F:BC:A5:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24E05502A02F67DD47033AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40306 IP address blocks: 70.41.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:55:02:a0:2f:67:dd:47:03:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bdb4c58a-7b66-4af7-8c9d-9946a49fb234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:62:5e:b4:05:c7:06:57:87:4e:cf:ed:b0:5c: 6a:7a:7b:02:fa:ec:e6:14:3c:63:f0:5d:6a:48:c7: 8c:66:bd:36:82:aa:b0:5f:7e:b0:53:23:ba:0d:43: 82:27:a0:07:ed:1b:58:3a:b9:d4:23:76:52:d2:11: 15:af:ab:d5:8d:80:eb:ae:8d:18:b8:4c:a9:40:65: d8:53:64:2d:34:78:16:52:b8:09:57:72:58:0e:b7: d2:17:d5:e2:28:1e:65:3b:b3:2d:1d:85:3f:93:9c: 2c:82:e3:9e:38:b9:18:c6:12:e7:a7:0b:ad:9e:cd: 13:d1:ab:77:14:e7:f3:b6:fb:95:75:ad:c4:40:2f: 83:7a:9d:cb:5d:8b:53:de:14:f6:a1:c6:f2:96:2f: 52:c1:38:06:0a:33:81:3f:c1:3b:9f:19:3b:29:cf: 38:41:5d:55:79:26:f1:82:d9:c8:cc:98:0d:31:65: c8:39:8e:3a:93:24:34:2f:f5:de:e8:d5:5c:45:b6: 1a:27:a9:46:60:11:19:36:d5:8b:b6:e0:f8:72:ce: 43:71:0a:94:eb:6a:f3:b1:c6:2f:2a:68:29:9f:ec: 87:aa:02:4c:05:24:35:01:83:5d:e6:92:98:fb:6d: 89:6d:d0:0c:88:df:13:49:dd:bc:c1:78:64:c8:97: 8d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:C5:14:07:90:FA:97:C4:EE:A6:19:2E:20:5F:C0:8F:BC:A5:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a5878-6524-3bfe-ac80-9915b7eeefb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:21:67:2e:f8:3a:26:b8:bf:1a:85:0b:b1:16:76:1d:d3:3b: 6a:a0:2c:56:6a:50:ce:ca:4c:73:b2:51:00:b2:1c:da:67:5c: 95:7c:82:e1:68:f0:27:d2:c8:c5:d0:22:00:30:b6:50:8f:b7: 67:70:b7:a8:00:77:58:f9:8b:cf:13:7d:12:b6:32:13:07:90: aa:15:34:68:51:a3:3d:4c:a4:98:e5:66:52:3a:23:a8:84:7c: 70:7b:2c:09:e1:0f:42:11:9c:30:b7:51:e3:ef:ea:a8:ed:f8: 39:67:6d:10:f7:ab:4e:12:3d:b4:09:e6:20:91:25:af:95:0a: c7:f5:aa:e3:ee:c5:31:09:1a:f6:74:f8:da:de:6a:fd:6d:71: 68:b2:16:7c:a5:80:2f:b6:5c:2d:97:cf:97:ed:20:db:3e:0f: 7b:43:ed:61:d7:c6:a1:96:d2:da:2a:06:ce:5c:fa:ac:2b:6f: db:c9:6e:a2:24:b0:05:c6:2b:36:fc:4b:49:ad:1f:64:75:c2: b6:35:c4:af:d4:a0:2c:90:ee:c3:fe:6b:16:37:11:72:d4:82: 25:69:71:8f:90:08:78:46:3c:1f:26:5e:98:60:f6:fd:e9:8b: ee:d8:9f:7c:39:91:41:0a:68:cd:a8:4d:33:7c:87:ad:57:19: 22:99:de:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4FUCoC9n3UcDOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmRiNGM1OGEtN2I2Ni00YWY3LThjOWQtOTk0NmE0OWZiMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGJetAXHBleHTs/tsFxqensC+uzmFDxj8F1q SMeMZr02gqqwX36wUyO6DUOCJ6AH7RtYOrnUI3ZS0hEVr6vVjYDrro0YuEypQGXY U2QtNHgWUrgJV3JYDrfSF9XiKB5lO7MtHYU/k5wsguOeOLkYxhLnpwutns0T0at3 FOfztvuVda3EQC+Dep3LXYtT3hT2ocbyli9SwTgGCjOBP8E7nxk7Kc84QV1VeSbx gtnIzJgNMWXIOY46kyQ0L/Xe6NVcRbYaJ6lGYBEZNtWLtuD4cs5DcQqU62rzscYv Kmgpn+yHqgJMBSQ1AYNd5pKY+22JbdAMiN8TSd28wXhkyJeNewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpFxRQHkPqXxO6mGS4gX8CPvKUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM5YTU4NzgtNjUyNC0z YmZlLWFjODAtOTkxNWI3ZWVlZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQhZy74Oia4vxqFC7EWdh3TO2qgLFZqUM7KTHOyUQCyHNpnXJV8guFo 8CfSyMXQIgAwtlCPt2dwt6gAd1j5i88TfRK2MhMHkKoVNGhRoz1MpJjlZlI6I6iE fHB7LAnhD0IRnDC3UePv6qjt+DlnbRD3q04SPbQJ5iCRJa+VCsf1quPuxTEJGvZ0 +Nreav1tcWiyFnylgC+2XC2Xz5ftINs+D3tD7WHXxqGW0toqBs5c+qwrb9vJbqIk sAXGKzb8S0mtH2R1wrY1xK/UoCyQ7sP+axY3EXLUgiVpcY+QCHhGPB8mXphg9v3p i+7Yn3w5kUEKaM2oTTN8h61XGSKZ3mQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:53 2026 by rpki-client