$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa File: af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa (raw, json) Hash identifier: Zb6UauSBEjH4SE+CK+opgEP7IsL8ElhDLb1cbdE7ns4= Subject key identifier: 7D:18:08:2E:6F:35:F1:9C:18:C7:9E:0C:24:99:78:D2:B8:DF:FB:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BDDB7B59330F357BD7080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 70.41.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:dd:b7:b5:93:30:f3:57:bd:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=fb639875-7f43-4094-8fa3-a50f3add1408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:8c:d4:e0:a6:00:ce:a4:d3:93:0e:58:e7: af:ca:df:48:aa:6a:59:67:75:24:e0:02:e0:da:fc: a3:e2:a2:44:e2:1f:86:28:1a:a1:fc:74:98:22:3b: ed:8f:fd:7b:a1:72:d8:f3:dc:0a:c5:93:8f:78:91: 52:f9:8d:97:0d:45:d7:51:eb:6d:0d:3a:80:64:31: b9:7a:b5:65:19:5f:be:57:93:4d:29:cf:5d:d1:01: c0:3e:19:35:e5:fb:7c:a2:bf:25:10:d1:c3:c6:37: e3:36:d0:53:6e:68:0a:c8:0d:7b:01:67:2d:91:0e: 29:0c:d6:31:6a:af:5e:03:42:5c:7a:5e:5d:e3:51: 88:91:64:95:6c:58:1b:3a:8d:a8:38:a2:f5:33:58: 8a:f1:cf:df:c2:4f:37:67:3a:1e:73:be:99:de:5b: 82:dc:e0:28:a0:9a:a1:cf:06:ee:da:4d:cc:db:ee: c8:5b:e4:d8:88:6e:94:0d:85:95:0e:f0:5a:cd:19: cd:0f:45:f1:71:d8:e8:37:7c:d8:81:7d:57:40:52: 53:4b:38:0c:68:0c:57:a6:b5:33:bb:67:ff:53:46: 55:e8:74:f6:01:2b:ef:ba:a4:2a:57:4f:b1:81:5e: b3:71:45:0b:d1:5e:46:01:48:9b:54:1a:26:ac:5a: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:18:08:2E:6F:35:F1:9C:18:C7:9E:0C:24:99:78:D2:B8:DF:FB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af81a8a0-3874-3c1d-9445-7ac2ae20c39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:22:b6:97:0f:11:63:76:18:92:50:99:c9:c9:f3:b7:17:9a: 18:3a:ec:46:70:98:43:dc:e9:8a:98:c4:6f:a5:ee:f5:d8:fd: b9:ad:08:c9:11:f1:ef:a3:2e:9f:73:da:eb:61:cb:02:90:df: ec:03:79:3d:7c:55:13:e4:b0:82:92:9f:1e:9b:1b:9d:83:b9: 5e:e8:c4:b5:af:eb:8b:5c:78:db:34:41:77:4e:4e:c3:fc:5f: 77:94:59:bd:a6:77:6f:c9:0a:d5:86:3b:b0:48:2f:e6:46:3e: b3:d1:21:4e:b7:27:91:e3:7d:67:23:a4:6f:d0:9b:c2:3a:46: 4a:26:2b:0c:c6:21:17:41:7a:af:ca:81:51:90:12:b2:93:fd: 40:69:e7:cf:85:69:a7:4c:1a:a3:d3:c0:ee:b8:66:a2:27:98: 5d:88:58:ad:62:b4:a1:b0:0f:a9:4b:24:ef:f3:78:2c:00:b9: 0e:cc:4e:93:fd:f4:a5:80:15:bc:77:2f:0a:c6:ea:f8:58:ef: 84:35:b0:d4:ed:ce:d9:bf:b3:69:06:4d:8f:48:53:26:e5:17: 0e:be:73:16:6d:f9:fa:c5:8a:63:72:f7:63:cd:98:e7:3d:36: c1:7e:30:cc:dd:24:87:28:7b:bd:18:0c:4b:46:ac:f6:39:fb: 87:dc:ab:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm923tZMw81e9cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZmI2Mzk4NzUtN2Y0My00MDk0LThmYTMtYTUwZjNhZGQxNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG+M1OCmAM6k05MOWOevyt9IqmpZZ3Uk4ALg 2vyj4qJE4h+GKBqh/HSYIjvtj/17oXLY89wKxZOPeJFS+Y2XDUXXUettDTqAZDG5 erVlGV++V5NNKc9d0QHAPhk15ft8or8lENHDxjfjNtBTbmgKyA17AWctkQ4pDNYx aq9eA0Jcel5d41GIkWSVbFgbOo2oOKL1M1iK8c/fwk83Zzoec76Z3luC3OAooJqh zwbu2k3M2+7IW+TYiG6UDYWVDvBazRnND0XxcdjoN3zYgX1XQFJTSzgMaAxXprUz u2f/U0ZV6HT2ASvvuqQqV0+xgV6zcUUL0V5GAUibVBomrFo3iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0YCC5vNfGcGMeeDCSZeNK43/t5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY4MWE4YTAtMzg3NC0z YzFkLTk0NDUtN2FjMmFlMjBjMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANQitpcPEWN2GJJQmcnJ87cXmhg67EZwmEPc6YqYxG+l7vXY/bmtCMkR 8e+jLp9z2uthywKQ3+wDeT18VRPksIKSnx6bG52DuV7oxLWv64tceNs0QXdOTsP8 X3eUWb2md2/JCtWGO7BIL+ZGPrPRIU63J5HjfWcjpG/Qm8I6RkomKwzGIRdBeq/K gVGQErKT/UBp58+FaadMGqPTwO64ZqInmF2IWK1itKGwD6lLJO/zeCwAuQ7MTpP9 9KWAFbx3LwrG6vhY74Q1sNTtztm/s2kGTY9IUyblFw6+cxZt+frFimNy92PNmOc9 NsF+MMzdJIcoe70YDEtGrPY5+4fcq8E= -----END CERTIFICATE-----Generated at Sat Jun 13 23:35:05 2026 by rpki-client