$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa File: 1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa (raw, json) Hash identifier: xiB0oIUcqdA1slNjgrdl80UA2WT0oB+ikd/tRAuHgCw= Subject key identifier: E3:88:30:78:F9:72:69:39:24:3D:2E:C3:A3:BF:D5:3E:B9:90:35:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D7BDD0F0CFDA1C4D05480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 70.41.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:7b:dd:0f:0c:fd:a1:c4:d0:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a29ebe76-555a-4be3-b59e-06787bd48dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:20:c2:3b:f9:90:b4:0b:44:c6:a5:5f:0e: 2b:86:dd:78:81:43:e2:61:3a:71:3c:59:b8:ce:95: e9:e4:bf:5d:a1:c6:67:2c:6e:88:98:57:49:1e:b0: 15:7b:00:52:a0:b1:f3:72:86:5d:58:8f:74:33:61: d4:7d:29:69:2a:62:c8:72:9f:f7:2d:4a:9b:54:61: ce:23:88:bd:4b:66:5c:71:61:7c:34:55:cd:fc:48: 45:77:d3:17:ff:bd:a0:71:4b:d8:b2:29:81:f7:40: 7a:a7:cb:7c:46:70:4f:8e:cb:f7:c3:6f:b2:3f:41: 61:32:70:4a:bd:95:51:3b:f3:a5:1b:8c:f6:3d:67: 15:d6:5d:25:bc:ab:2b:34:ea:f5:b6:39:93:29:95: 14:18:e0:59:04:47:c8:7e:2e:e6:e0:17:18:e3:58: be:54:6b:67:3d:54:7d:17:0d:54:4e:e9:25:5e:97: 27:77:28:62:c8:71:e6:20:50:9c:3a:17:28:01:61: 97:13:55:e9:9a:d9:fd:87:4b:53:10:57:8f:55:e4: 24:c8:4f:92:f1:b0:fe:a7:56:85:41:9b:78:c0:0f: 51:cd:ae:10:bb:f9:a5:10:05:06:af:f0:83:86:40: 84:9e:cd:78:fa:ed:85:ce:ba:7d:28:0e:2e:23:ad: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:88:30:78:F9:72:69:39:24:3D:2E:C3:A3:BF:D5:3E:B9:90:35:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1c69ca0f-b309-3935-b67c-7443bd4eaa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2f:50:51:13:74:e1:21:5f:41:78:99:a2:8e:28:46:9e:b9: c9:d4:f3:26:97:f5:1d:e0:e3:1c:f6:39:27:46:b1:e8:e9:04: 4b:a3:02:40:9a:71:88:1e:ae:27:03:bd:16:2b:cc:2a:99:8a: b7:2d:c3:57:9e:07:f9:ee:79:21:dd:d6:5b:42:45:17:2f:a6: 6e:98:cd:27:d9:f1:22:46:66:0b:2f:12:7c:ec:5f:78:6f:cf: ae:23:a7:01:fa:7e:93:d6:08:53:e7:3a:83:92:8e:b8:ea:c4: a6:d9:bb:7f:9b:47:e1:b0:9b:0e:a5:b2:ae:ce:6c:54:21:f2: cb:38:88:92:28:19:dc:e5:64:ee:65:c0:84:b9:13:ec:8c:3c: 37:4d:8f:31:8c:99:6e:c6:44:24:f3:43:11:2b:bd:67:dd:62: d3:7d:34:9b:33:69:de:7c:13:24:b2:8f:2e:35:0a:42:44:ac: 71:67:b2:ff:88:a1:24:a8:aa:bf:d9:bf:99:0b:ba:1f:1c:d4: 7b:db:80:04:7a:fc:ad:33:b1:6a:28:cc:03:79:b3:d9:6e:2e: 87:2c:c3:d7:ae:f6:af:3a:99:1b:56:2e:12:25:1b:51:0f:95: 72:be:c2:8a:cc:bf:be:64:cf:94:50:df:eb:f5:a5:25:39:70: 76:b4:f3:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnXvdDwz9ocTQVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTI5ZWJlNzYtNTU1YS00YmUzLWI1OWUtMDY3ODdiZDQ4ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkYgwjv5kLQLRMalXw4rht14gUPiYTpxPFm4 zpXp5L9docZnLG6ImFdJHrAVewBSoLHzcoZdWI90M2HUfSlpKmLIcp/3LUqbVGHO I4i9S2ZccWF8NFXN/EhFd9MX/72gcUvYsimB90B6p8t8RnBPjsv3w2+yP0FhMnBK vZVRO/OlG4z2PWcV1l0lvKsrNOr1tjmTKZUUGOBZBEfIfi7m4BcY41i+VGtnPVR9 Fw1UTuklXpcndyhiyHHmIFCcOhcoAWGXE1Xpmtn9h0tTEFePVeQkyE+S8bD+p1aF QZt4wA9Rza4Qu/mlEAUGr/CDhkCEns14+u2Fzrp9KA4uI62xLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOIMHj5cmk5JD0uw6O/1T65kDUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWM2OWNhMGYtYjMwOS0z OTM1LWI2N2MtNzQ0M2JkNGVhYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0vUFETdOEhX0F4maKOKEaeucnU8yaX9R3g4xz2OSdGsejpBEujAkCa cYgericDvRYrzCqZirctw1eeB/nueSHd1ltCRRcvpm6YzSfZ8SJGZgsvEnzsX3hv z64jpwH6fpPWCFPnOoOSjrjqxKbZu3+bR+Gwmw6lsq7ObFQh8ss4iJIoGdzlZO5l wIS5E+yMPDdNjzGMmW7GRCTzQxErvWfdYtN9NJszad58EySyjy41CkJErHFnsv+I oSSoqr/Zv5kLuh8c1HvbgAR6/K0zsWoozAN5s9luLocsw9eu9q86mRtWLhIlG1EP lXK+worMv75kz5RQ3+v1pSU5cHa089Y= -----END CERTIFICATE-----Generated at Wed Jul 29 04:14:56 2026 by rpki-client