$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa File: 9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa (raw, json) Hash identifier: Ivw0Jkv13y5iRKMXj92N4D3AvxyYQyfW1lGKojIDODk= Subject key identifier: 72:5F:7E:98:BF:75:52:BD:38:D0:4B:A7:A9:F6:BB:19:01:4D:70:6D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BE0BCB7CAB184917066C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 70.41.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:e0:bc:b7:ca:b1:84:91:70:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=f100e973-9e82-4e59-aa44-b8abbaf18dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a5:56:cc:6d:c9:ec:5e:71:35:10:b7:0c:fd: d9:0e:84:d8:0e:0d:3b:11:43:15:81:f3:95:e0:f1: 2e:19:f6:f0:b3:96:40:84:f9:1f:cc:ae:dd:f2:23: d3:36:d7:79:8d:63:41:5a:32:2a:88:6e:31:a8:a6: 67:0c:29:d7:61:71:61:93:54:7f:64:05:e2:a9:3e: a3:4c:a6:66:fe:fb:68:32:ff:98:aa:c2:19:34:9a: da:7f:3f:d8:90:9d:ed:57:24:ed:4d:3e:6b:fd:5a: 9e:30:92:7e:6d:4d:ca:19:9a:28:c2:aa:c7:92:b1: e4:58:4d:2f:68:3c:b4:3b:e2:ff:35:7b:4a:8a:de: 88:e5:fd:23:23:93:66:4c:dc:24:21:48:a4:d3:10: 22:45:d8:d6:a7:37:6b:7a:34:d1:bd:27:d1:8a:ca: a7:cd:c1:cc:08:54:f6:ba:d6:d3:74:e8:e5:f5:21: af:c4:eb:dc:71:4c:8a:c1:bc:57:48:df:51:b9:77: 2c:f1:a8:f7:28:51:6c:ad:f9:ee:ea:1d:bd:ed:c7: 77:2a:f4:36:60:3a:6e:fa:74:61:78:df:15:03:19: e3:9c:0c:37:fc:e7:3e:5c:27:07:f7:8c:33:b7:c6: b4:18:d6:3f:95:10:a2:7e:83:66:48:c1:d8:bd:03: bc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5F:7E:98:BF:75:52:BD:38:D0:4B:A7:A9:F6:BB:19:01:4D:70:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ed936c2-b7e5-3997-82d7-cc1780db4fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e4:60:79:56:0e:55:d6:93:d4:45:43:6e:62:6b:4e:3c:bb: 9f:42:48:14:62:99:02:a2:a9:7a:eb:84:40:98:44:04:ee:5f: 46:8a:89:fb:4d:4e:8e:2f:44:56:a4:17:d7:d5:c4:19:f9:8b: 3a:95:37:66:a3:42:60:e9:a2:b3:d2:dd:a2:28:71:e6:d9:52: 29:79:1e:dd:db:e5:7a:8d:25:fe:af:7e:92:e1:85:cd:82:82: 2b:e7:e2:eb:31:e0:44:cb:4f:42:49:01:e7:54:bd:e7:dc:cf: 98:46:c4:03:fe:1d:9a:e0:48:1c:c7:92:a0:8e:b4:f9:e8:53: 9f:15:d5:fc:ca:7d:a5:96:9c:9c:d1:8f:e1:07:7a:28:14:0b: 91:3e:72:46:96:85:9d:18:4b:1a:09:73:34:6d:63:a0:4c:e8: 14:fe:58:e2:7f:16:75:5e:ca:e4:9d:c8:7f:f6:eb:62:95:c2: a2:1f:41:8e:7a:14:ac:ce:d1:ed:71:89:56:c4:3e:cb:c6:14: 5b:cd:f0:b9:29:03:ad:95:97:52:2c:9a:25:d8:d3:12:de:74: e2:5c:dd:07:06:7d:9d:a9:fc:c7:be:80:82:07:e2:53:61:59: e6:15:e5:57:7b:c1:75:4b:6b:58:f3:9a:32:99:b1:b4:84:70: c1:ad:e7:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm+C8t8qxhJFwZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZjEwMGU5NzMtOWU4Mi00ZTU5LWFhNDQtYjhhYmJhZjE4ZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6VWzG3J7F5xNRC3DP3ZDoTYDg07EUMVgfOV 4PEuGfbws5ZAhPkfzK7d8iPTNtd5jWNBWjIqiG4xqKZnDCnXYXFhk1R/ZAXiqT6j TKZm/vtoMv+YqsIZNJrafz/YkJ3tVyTtTT5r/VqeMJJ+bU3KGZoowqrHkrHkWE0v aDy0O+L/NXtKit6I5f0jI5NmTNwkIUik0xAiRdjWpzdrejTRvSfRisqnzcHMCFT2 utbTdOjl9SGvxOvccUyKwbxXSN9RuXcs8aj3KFFsrfnu6h297cd3KvQ2YDpu+nRh eN8VAxnjnAw3/Oc+XCcH94wzt8a0GNY/lRCifoNmSMHYvQO8HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJffpi/dVK9ONBLp6n2uxkBTXBtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWVkOTM2YzItYjdlNS0z OTk3LTgyZDctY2MxNzgwZGI0ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnkYHlWDlXWk9RFQ25ia048u59CSBRimQKiqXrrhECYRATuX0aKiftN To4vRFakF9fVxBn5izqVN2ajQmDporPS3aIocebZUil5Ht3b5XqNJf6vfpLhhc2C givn4usx4ETLT0JJAedUvefcz5hGxAP+HZrgSBzHkqCOtPnoU58V1fzKfaWWnJzR j+EHeigUC5E+ckaWhZ0YSxoJczRtY6BM6BT+WOJ/FnVeyuSdyH/262KVwqIfQY56 FKzO0e1xiVbEPsvGFFvN8LkpA62Vl1IsmiXY0xLedOJc3QcGfZ2p/Me+gIIH4lNh WeYV5Vd7wXVLa1jzmjKZsbSEcMGt5/E= -----END CERTIFICATE-----Generated at Sat Jun 13 19:39:44 2026 by rpki-client