$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa File: 640c453f-18c8-33fa-8803-ecb7430cd4af.roa (raw, json) Hash identifier: xbjEPbNgc7QJ0GKbfYb/cGlrE8h479ZIuApa7ahpynM= Subject key identifier: B2:01:BC:49:C6:9D:45:9F:9E:EE:9A:FD:0B:A2:1B:E0:C4:90:BF:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AFE10453707BDD943E980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:fe:10:45:37:07:bd:d9:43:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1814cca0-4b42-4e9f-adf9-7d3a9243dab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:01:79:0e:6e:37:b9:e1:46:23:01:3f:2b: d4:d8:0d:71:4f:1b:91:63:67:12:d3:36:2a:61:a8: 0e:28:aa:28:b1:2a:d8:92:63:4c:aa:75:c5:b7:46: 86:d8:98:09:e0:24:07:9f:42:74:94:db:6b:56:ba: d0:c1:52:02:f4:63:f7:bd:83:bb:1d:f7:9a:29:2c: bf:72:0d:d8:41:67:c7:ef:f9:42:01:34:44:50:cb: 50:39:81:ab:4e:a7:f2:e2:a5:60:0e:99:76:c2:5c: 5d:fc:77:c4:ab:78:8b:ca:5c:94:b1:cc:b9:fd:7e: 41:de:12:b9:e7:e3:47:a8:30:25:62:dd:f2:cc:2b: ac:62:af:a3:fe:8f:af:62:55:c1:09:b4:e0:ea:b6: 43:f0:62:4a:15:fa:2a:04:2a:02:39:cd:3b:4e:f5: 17:df:51:bf:e7:32:0b:b2:b9:87:0b:df:86:7b:4d: 5f:54:7c:69:7b:10:e7:ea:1c:f4:b2:3c:68:0e:e1: 91:7d:fb:81:0a:9a:33:e6:0b:7f:8d:2d:ef:46:ff: 2a:36:d1:bd:5e:29:df:01:9a:e8:0f:ea:b4:fd:bf: 64:ac:ff:6c:c8:d7:e7:74:f9:a1:ee:9b:8b:98:a0: 42:6f:e4:ba:24:21:92:6c:c8:66:50:88:8d:cd:41: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:BC:49:C6:9D:45:9F:9E:EE:9A:FD:0B:A2:1B:E0:C4:90:BF:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/640c453f-18c8-33fa-8803-ecb7430cd4af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:32:ba:7e:ee:95:02:af:bd:28:88:6b:90:a3:d9:aa:85:d7: da:1e:9f:81:a6:09:2d:6a:fb:51:cf:7f:3f:a8:2c:d2:bf:58: 21:51:65:2f:b9:2d:58:24:7c:87:fe:3d:43:2d:5d:c3:52:c8: 8e:0f:4a:4a:4b:4c:3a:22:fd:6c:eb:c5:a6:0b:cf:50:33:88: 3e:fb:e1:a1:f9:72:f2:6a:78:2d:fa:57:5f:37:5d:9e:d7:02: c9:02:dd:49:8c:1c:ac:d2:c2:a2:05:a7:76:47:1f:2d:ff:4c: ff:a6:8e:be:84:8c:ef:b4:6a:cf:0e:9d:11:31:80:d6:1e:9f: b7:19:47:2b:83:62:19:6a:b9:f1:c5:04:0a:3a:7f:e3:45:68: 7e:19:00:42:95:c9:d1:b6:b6:ae:27:e5:9b:2a:24:36:12:99: 40:ad:80:c9:17:1f:c5:d2:b2:1d:4f:73:87:cc:84:24:f1:02: 80:dd:19:b3:23:d2:72:ac:08:14:c1:1a:84:82:d6:9d:78:ae: 57:14:21:79:1a:e0:b8:98:78:43:ff:df:75:33:65:a7:2a:e5: 32:fb:0b:d8:13:1b:42:3a:1f:fa:32:9d:42:fa:62:7e:d2:c1: 21:f6:5f:ed:4a:17:01:07:44:76:76:08:11:c0:95:8b:59:55: 56:91:9e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jev4QRTcHvdlD6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTgxNGNjYTAtNGI0Mi00ZTlmLWFkZjktN2QzYTkyNDNkYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+kBeQ5uN7nhRiMBPyvU2A1xTxuRY2cS0zYq YagOKKoosSrYkmNMqnXFt0aG2JgJ4CQHn0J0lNtrVrrQwVIC9GP3vYO7HfeaKSy/ cg3YQWfH7/lCATREUMtQOYGrTqfy4qVgDpl2wlxd/HfEq3iLylyUscy5/X5B3hK5 5+NHqDAlYt3yzCusYq+j/o+vYlXBCbTg6rZD8GJKFfoqBCoCOc07TvUX31G/5zIL srmHC9+Ge01fVHxpexDn6hz0sjxoDuGRffuBCpoz5gt/jS3vRv8qNtG9XinfAZro D+q0/b9krP9syNfndPmh7puLmKBCb+S6JCGSbMhmUIiNzUGNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIBvEnGnUWfnu6a/QuiG+DEkL9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjQwYzQ1M2YtMThjOC0z M2ZhLTg4MDMtZWNiNzQzMGNkNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARin0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4yun7ulQKvvSiIa5Cj2aqF19oen4GmCS1q+1HPfz+oLNK/WCFRZS+5 LVgkfIf+PUMtXcNSyI4PSkpLTDoi/WzrxaYLz1AziD774aH5cvJqeC36V183XZ7X AskC3UmMHKzSwqIFp3ZHHy3/TP+mjr6EjO+0as8OnRExgNYen7cZRyuDYhlqufHF BAo6f+NFaH4ZAEKVydG2tq4n5ZsqJDYSmUCtgMkXH8XSsh1Pc4fMhCTxAoDdGbMj 0nKsCBTBGoSC1p14rlcUIXka4LiYeEP/33UzZacq5TL7C9gTG0I6H/oynUL6Yn7S wSH2X+1KFwEHRHZ2CBHAlYtZVVaRniQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:11:30 2026 by rpki-client