$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa File: a08ce2be-b409-35c4-a379-ba55950d59ea.roa (raw, json) Hash identifier: vOcW6NdJq5BBQvWedI6+YxvNQzF8MyzHeAEZmw7irGM= Subject key identifier: AE:31:A8:02:D5:E0:9B:55:59:04:35:F1:34:4D:FF:E2:40:30:C1:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49831F55FA08BF3BDD314980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:1f:55:fa:08:bf:3b:dd:31:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8552fa6-e331-454c-978a-0064d65e1cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:ad:64:af:b6:97:d4:96:9c:ba:f1:ef:ed: 39:72:90:98:f5:b9:f2:16:68:39:b3:6c:87:16:8d: 3e:6b:2d:a6:a6:17:64:23:0c:09:e0:dc:ff:04:d3: 51:72:5b:d6:01:cd:8f:15:46:1a:1c:78:81:56:59: 23:16:47:65:42:a3:bb:f3:e9:3d:ab:98:ce:ae:9a: 05:03:6e:f4:16:63:05:44:6c:4f:d6:93:6d:e1:ff: 7f:54:09:a6:47:11:d6:d2:9f:04:5e:8a:c3:59:3b: 56:1a:e0:e6:27:07:d0:e1:0f:f6:d6:c9:67:fa:6c: f1:72:71:78:b6:39:9b:ff:21:15:90:02:81:73:d0: 21:1b:91:52:28:fe:3e:44:b1:a1:19:87:4c:90:41: 81:11:99:23:4f:ff:1b:b0:58:ad:6e:83:e9:73:64: 92:f0:c9:d0:95:72:d9:63:aa:8b:fd:69:a9:ee:ad: a1:9f:b6:de:4a:d3:36:af:b0:a2:38:90:54:a7:a2: f2:93:aa:90:dd:e1:eb:96:f6:ea:90:e2:97:42:b7: a7:fc:d3:a7:69:78:fe:04:ad:dc:1d:36:dc:16:aa: 38:9d:74:7b:01:5e:bf:40:cc:12:af:47:50:37:f1: 9a:ae:75:9b:06:42:48:b3:62:7c:5d:05:f2:ce:2a: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:A8:02:D5:E0:9B:55:59:04:35:F1:34:4D:FF:E2:40:30:C1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a08ce2be-b409-35c4-a379-ba55950d59ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bd:d1:11:94:41:a6:9e:e0:73:45:8a:e7:cd:d5:2c:cb:3d: 17:17:c0:98:ad:e6:22:4a:22:1b:35:d4:06:72:60:64:1e:b9: 53:46:2a:ce:24:ea:8b:01:80:c0:b4:64:0c:92:b0:66:bd:37: f7:43:5c:a3:36:f1:47:9c:00:96:de:41:2a:d8:66:70:75:66: 06:a2:f0:4c:f4:b5:ed:b5:dd:70:39:18:e7:2e:33:5e:f8:d4: d2:f8:c4:7b:b7:2b:7f:54:7d:9a:d4:6d:84:9c:5e:5d:9c:78: dc:0f:c1:48:fa:49:9c:2a:9f:c1:94:81:62:9f:18:67:7d:e5: 64:6a:cc:ab:47:4d:04:88:a4:e9:a0:5d:7f:de:1a:3d:16:b0: a7:3a:e5:8e:08:25:ef:66:90:af:05:7a:22:7b:22:87:e6:83: 9f:06:24:64:5f:60:32:5a:8d:1d:76:c5:92:d5:fd:db:cc:f5: 64:56:7b:cf:e6:34:1a:bf:fc:71:40:28:30:f0:a0:b8:04:df: bc:39:dc:82:2f:81:99:f1:2a:94:4c:5b:cf:29:5d:d7:e4:78: 4d:7a:5a:8e:43:23:e3:cb:08:54:0b:7b:e6:20:3a:e3:fc:aa: ab:10:93:1f:ce:ea:45:70:a9:2f:2f:0b:14:2d:60:f4:e9:64: 07:12:25:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgx9V+gi/O90xSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg1NTJmYTYtZTMzMS00NTRjLTk3OGEtMDA2NGQ2NWUxY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxutZK+2l9SWnLrx7+05cpCY9bnyFmg5s2yH Fo0+ay2mphdkIwwJ4Nz/BNNRclvWAc2PFUYaHHiBVlkjFkdlQqO78+k9q5jOrpoF A270FmMFRGxP1pNt4f9/VAmmRxHW0p8EXorDWTtWGuDmJwfQ4Q/21sln+mzxcnF4 tjmb/yEVkAKBc9AhG5FSKP4+RLGhGYdMkEGBEZkjT/8bsFitboPpc2SS8MnQlXLZ Y6qL/Wmp7q2hn7beStM2r7CiOJBUp6Lyk6qQ3eHrlvbqkOKXQren/NOnaXj+BK3c HTbcFqo4nXR7AV6/QMwSr0dQN/GarnWbBkJIs2J8XQXyziqrowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4xqALV4JtVWQQ18TRN/+JAMMHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTA4Y2UyYmUtYjQwOS0z NWM0LWEzNzktYmE1NTk1MGQ1OWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK90RGUQaae4HNFiufN1SzLPRcXwJit5iJKIhs11AZyYGQeuVNGKs4k 6osBgMC0ZAySsGa9N/dDXKM28UecAJbeQSrYZnB1Zgai8Ez0te213XA5GOcuM174 1NL4xHu3K39UfZrUbYScXl2ceNwPwUj6SZwqn8GUgWKfGGd95WRqzKtHTQSIpOmg XX/eGj0WsKc65Y4IJe9mkK8FeiJ7Iofmg58GJGRfYDJajR12xZLV/dvM9WRWe8/m NBq//HFAKDDwoLgE37w53IIvgZnxKpRMW88pXdfkeE16Wo5DI+PLCFQLe+YgOuP8 qqsQkx/O6kVwqS8vCxQtYPTpZAcSJRE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:12:57 2026 by rpki-client