$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa File: aa9276be-9f8a-381e-a002-c6984ebc8321.roa (raw, json) Hash identifier: K1bZu177sYD3sH8A2lqsMDapc+qptOaeVt5UvHR4jqE= Subject key identifier: C4:C5:F0:29:9E:D1:B6:75:CA:35:B9:59:A2:20:CD:A9:35:F3:8A:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059B6180950B74B92B029780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 70.41.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:61:80:95:0b:74:b9:2b:02:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=75b9e186-59fd-4fd6-a1e4-e53f795dc7bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:16:7d:27:23:33:f1:7d:7f:a7:80:a5:c7: 5b:a4:7b:de:dd:05:a0:24:00:7d:92:7d:d7:60:9f: d0:f7:bd:61:c4:cb:1b:ad:ce:2a:dd:9b:40:ee:b7: 94:87:65:6a:5b:9e:4f:e0:54:eb:d2:01:17:25:9c: 6e:db:16:2f:45:25:c2:94:58:a2:94:c2:23:e0:3c: 35:5b:4f:c5:a5:d5:15:0e:27:dc:12:30:a4:c4:88: 8c:52:6b:68:00:36:57:b9:54:41:2b:e5:43:fa:44: de:03:be:0b:ef:48:e7:be:c1:fb:1f:11:59:05:a1: 2f:fa:7f:59:3a:c2:a0:2f:d6:ea:63:94:75:54:d8: b8:19:af:65:41:43:a2:ea:af:44:5c:34:2e:31:f4: b0:61:c2:52:20:b8:aa:bb:bc:8d:ee:45:ee:9d:ae: a9:69:10:d5:12:db:9a:cc:e2:1b:c1:fd:02:4b:ac: 6e:e7:0f:38:f9:46:8f:ad:0d:02:1a:4a:92:88:bd: 95:37:40:60:c4:98:32:9f:7a:20:f1:ee:97:e2:2e: 32:bd:20:2e:12:09:a9:ca:68:e5:8f:0e:04:ad:28: cc:d9:0c:c5:bc:c8:0d:11:a4:17:9f:f4:43:88:be: 6c:b0:7e:75:89:2c:35:b4:13:e9:7f:2f:f3:e9:13: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:F0:29:9E:D1:B6:75:CA:35:B9:59:A2:20:CD:A9:35:F3:8A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b1:6d:4c:9c:da:5f:35:ed:70:32:eb:12:5d:bc:40:7a:ab: 41:b6:81:7d:27:80:c5:d9:61:59:1d:42:d5:63:f5:8c:14:60: 5e:9f:93:66:e1:dc:ff:31:99:e5:5b:f1:5d:21:a8:01:84:1a: 33:5a:6f:41:4d:80:8b:fe:5e:3c:cc:fc:d4:9f:c3:9e:98:41: 31:af:d4:f0:71:67:59:32:72:d8:1e:ae:40:8e:67:bd:aa:92: a6:82:42:2f:83:12:1b:25:ea:79:ff:a7:16:63:b4:4e:15:e3: 3d:74:dd:4d:a5:56:1f:b0:23:6b:b0:88:b0:3e:58:7c:3e:43: a8:68:a1:a3:39:1d:0c:98:df:33:97:25:e3:4d:cc:b1:aa:ef: c7:81:c8:1f:74:50:bc:93:d2:70:39:53:7b:f2:6c:cd:0e:97: 0d:7c:79:50:f5:19:07:0f:34:20:cb:2c:70:db:7a:7e:3a:67: bd:de:ea:c5:c0:17:63:46:f8:27:22:bd:1d:e7:97:a9:48:70: 40:65:cb:a8:89:dc:9b:88:bc:57:db:28:22:1a:d5:8d:b0:4c: 23:cd:07:ed:ea:d5:3f:51:33:13:d8:ab:9b:36:90:79:ca:cb: 72:c8:d3:49:0d:95:91:3d:21:71:bd:72:a6:8f:67:63:48:a5: e4:d6:b9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm2GAlQt0uSsCl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzViOWUxODYtNTlmZC00ZmQ2LWExZTQtZTUzZjc5NWRjN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdwWfScjM/F9f6eApcdbpHve3QWgJAB9kn3X YJ/Q971hxMsbrc4q3ZtA7reUh2VqW55P4FTr0gEXJZxu2xYvRSXClFiilMIj4Dw1 W0/FpdUVDifcEjCkxIiMUmtoADZXuVRBK+VD+kTeA74L70jnvsH7HxFZBaEv+n9Z OsKgL9bqY5R1VNi4Ga9lQUOi6q9EXDQuMfSwYcJSILiqu7yN7kXuna6paRDVEtua zOIbwf0CS6xu5w84+UaPrQ0CGkqSiL2VN0BgxJgyn3og8e6X4i4yvSAuEgmpymjl jw4ErSjM2QzFvMgNEaQXn/RDiL5ssH51iSw1tBPpfy/z6RPZkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTF8Cme0bZ1yjW5WaIgzak184rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5Mjc2YmUtOWY4YS0z ODFlLWEwMDItYzY5ODRlYmM4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECxbUyc2l817XAy6xJdvEB6q0G2gX0ngMXZYVkdQtVj9YwUYF6fk2bh 3P8xmeVb8V0hqAGEGjNab0FNgIv+XjzM/NSfw56YQTGv1PBxZ1kyctgerkCOZ72q kqaCQi+DEhsl6nn/pxZjtE4V4z103U2lVh+wI2uwiLA+WHw+Q6hooaM5HQyY3zOX JeNNzLGq78eByB90ULyT0nA5U3vybM0Olw18eVD1GQcPNCDLLHDben46Z73e6sXA F2NG+CcivR3nl6lIcEBly6iJ3JuIvFfbKCIa1Y2wTCPNB+3q1T9RMxPYq5s2kHnK y3LI00kNlZE9IXG9cqaPZ2NIpeTWufA= -----END CERTIFICATE-----Generated at Sat Jun 13 22:14:41 2026 by rpki-client