$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa File: 3c8e4532-a434-347a-8168-16975ac7e03d.roa (raw, json) Hash identifier: dd3gSOVb7f4BFIDBFHZiKa33Pr9uBYvpzBMQqzfRJsk= Subject key identifier: 0D:A1:0B:C6:C4:73:05:E5:43:68:5F:12:7D:45:31:29:F5:FA:70:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49831DF50E30D053AA2A4F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:1d:f5:0e:30:d0:53:aa:2a:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=82101f7f-e7c7-4c92-bb2f-0d66625e34b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:f1:d2:61:40:ce:38:7b:5b:a4:7a:6e:27: e9:26:ce:1b:e8:b6:66:b8:32:82:52:57:1d:c5:f8: f9:a1:a8:8f:14:08:6e:ca:62:bf:7b:3e:82:d6:a4: 1a:ee:52:3a:55:ab:6a:cf:05:18:b1:99:36:09:8d: 78:20:5c:12:c4:3c:57:fc:26:ef:3c:32:d4:89:cd: 21:6a:db:c1:fe:0d:e6:20:49:37:4f:8c:7f:8d:00: e9:c5:b2:dd:84:1b:92:90:a3:c1:f9:65:2b:f4:35: 5e:d5:b3:1a:0a:7c:f5:00:0c:be:d8:d8:7b:d3:9e: 5c:89:ae:ca:c7:97:54:d4:59:cf:47:97:ea:55:db: d1:a9:bf:ce:1d:48:b6:af:da:c2:b8:68:a9:60:0e: c6:0d:e2:64:65:b8:c0:78:95:c2:17:86:52:10:3b: 85:28:e2:52:0d:85:f9:39:cf:52:41:85:f6:05:13: 2a:7c:05:4f:1d:8c:fd:92:21:76:eb:d1:ba:25:6f: b3:16:ac:88:dc:04:09:97:df:80:32:7a:b1:61:c0: 15:f7:1e:25:49:12:fe:8e:55:c4:45:29:5c:8b:6e: 89:ad:44:49:9c:d7:9d:4d:6a:01:10:be:5a:a8:46: be:b3:ee:68:fa:fc:fe:d2:82:cd:ad:dc:be:aa:8c: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A1:0B:C6:C4:73:05:E5:43:68:5F:12:7D:45:31:29:F5:FA:70:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c8e4532-a434-347a-8168-16975ac7e03d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:90:7e:8e:e1:80:bd:f8:71:fd:45:18:ae:f5:c2:32:d7:25: c7:41:ef:0d:2b:a7:7c:0c:7b:69:e9:c5:e4:43:23:68:67:b3: 3f:60:aa:49:71:91:7c:8b:0c:81:76:a7:30:74:4d:8d:75:0e: f1:28:e4:cd:99:4c:0f:5c:bf:f8:66:f6:4c:f1:ad:02:93:b6: f7:f5:e2:89:18:5b:5a:aa:3d:d3:b1:48:c6:cd:48:49:32:09: 79:b0:4a:d3:48:66:6d:60:1e:d1:66:4a:81:fb:e2:0e:bf:db: 2b:2c:f6:d3:6e:0a:de:b8:6e:3c:42:cc:aa:93:d8:32:6e:09: 12:17:f1:40:86:dc:41:31:91:d4:88:aa:a8:0d:cb:b7:a5:fa: aa:cb:66:f0:00:86:f3:b3:6e:56:ba:6d:7b:5e:d8:0b:42:6a: 7b:89:9c:9b:d5:f4:b5:59:82:fd:98:d6:99:16:d1:3d:32:20: 9c:e6:23:45:19:23:a2:43:6f:61:26:35:c8:fe:15:02:60:c3: 65:c4:1c:73:94:79:8c:07:ff:9d:8f:ee:10:38:30:1e:bc:ec: e7:de:39:6e:e7:fb:0e:1b:f5:d1:99:22:51:45:49:fc:bd:d6: 4e:09:06:bb:8d:02:18:8e:d9:02:63:27:f9:d7:76:7b:a3:92: 95:f3:c4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgx31DjDQU6oqT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODIxMDFmN2YtZTdjNy00YzkyLWJiMmYtMGQ2NjYyNWUzNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzXx0mFAzjh7W6R6bifpJs4b6LZmuDKCUlcd xfj5oaiPFAhuymK/ez6C1qQa7lI6VatqzwUYsZk2CY14IFwSxDxX/CbvPDLUic0h atvB/g3mIEk3T4x/jQDpxbLdhBuSkKPB+WUr9DVe1bMaCnz1AAy+2Nh7055cia7K x5dU1FnPR5fqVdvRqb/OHUi2r9rCuGipYA7GDeJkZbjAeJXCF4ZSEDuFKOJSDYX5 Oc9SQYX2BRMqfAVPHYz9kiF269G6JW+zFqyI3AQJl9+AMnqxYcAV9x4lSRL+jlXE RSlci26JrURJnNedTWoBEL5aqEa+s+5o+vz+0oLNrdy+qozNQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2hC8bEcwXlQ2hfEn1FMSn1+nB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M4ZTQ1MzItYTQzNC0z NDdhLTgxNjgtMTY5NzVhYzdlMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyQfo7hgL34cf1FGK71wjLXJcdB7w0rp3wMe2npxeRDI2hnsz9gqklx kXyLDIF2pzB0TY11DvEo5M2ZTA9cv/hm9kzxrQKTtvf14okYW1qqPdOxSMbNSEky CXmwStNIZm1gHtFmSoH74g6/2yss9tNuCt64bjxCzKqT2DJuCRIX8UCG3EExkdSI qqgNy7el+qrLZvAAhvOzbla6bXte2AtCanuJnJvV9LVZgv2Y1pkW0T0yIJzmI0UZ I6JDb2EmNcj+FQJgw2XEHHOUeYwH/52P7hA4MB687OfeOW7n+w4b9dGZIlFFSfy9 1k4JBruNAhiO2QJjJ/nXdnujkpXzxPg= -----END CERTIFICATE-----Generated at Thu Oct 8 13:56:22 2026 by rpki-client