$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96050ab-39fb-387e-8490-1d61c05f30b2.roa File: b96050ab-39fb-387e-8490-1d61c05f30b2.roa (raw, json) Hash identifier: SO+yt6M1K3KfsF0OneaXRB99KImzQIUJL+7DwaE1WjQ= Subject key identifier: 33:D5:11:BC:A1:80:5A:17:CA:27:F0:57:90:41:C4:95:2C:34:03:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D71B63AB082780C4DF500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96050ab-39fb-387e-8490-1d61c05f30b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 70.41.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:71:b6:3a:b0:82:78:0c:4d:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1851311d-7e32-4f70-8bdd-d9438e382125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:b7:0a:e8:32:cf:86:01:c8:3a:02:05:d5: b8:42:2d:d1:d0:2c:26:ae:4d:e9:9e:98:cb:2a:64: ab:1a:8d:07:58:67:2c:36:5c:6f:ec:32:a5:26:9c: 71:71:7b:6e:21:65:3d:e0:e6:b3:93:79:78:38:63: f5:06:f3:12:e7:6e:d4:38:27:e9:cf:58:46:b6:54: cd:e6:87:0b:bb:59:68:54:0e:2f:9f:27:42:58:d0: 71:f0:bf:79:c5:aa:e2:c1:a3:b5:6e:7e:15:ca:38: 51:12:68:2b:0d:ed:09:ec:1d:34:92:68:d6:b0:42: 64:65:e4:65:79:ef:d7:61:dc:cb:cb:bd:61:95:ae: 9c:2a:68:f3:f5:5a:b1:a2:b7:fa:3e:0f:49:b2:00: 5e:ca:cd:11:80:d2:b8:5d:68:e7:ad:b8:45:fe:8b: e4:5e:14:45:b6:80:35:9c:d0:52:6c:bc:28:d1:1b: 57:76:11:f4:40:6a:23:7a:08:58:73:61:99:30:21: d4:98:89:20:e8:62:2a:ae:58:4a:9a:9e:89:bb:56: c6:48:99:31:34:4b:52:32:31:02:a9:d5:14:19:8e: 36:5b:f6:a6:3c:c0:e0:08:92:36:ce:96:03:0e:f0: 6c:c4:cc:d5:78:6d:b1:06:95:08:13:e1:84:00:cb: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D5:11:BC:A1:80:5A:17:CA:27:F0:57:90:41:C4:95:2C:34:03:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b96050ab-39fb-387e-8490-1d61c05f30b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:56:c5:e6:68:71:b5:db:1f:40:c8:df:de:10:fa:1f:d5:6a: 59:f3:d8:38:15:70:18:99:4c:41:5b:48:18:78:b4:58:dd:b7: d7:13:fe:2b:31:98:ba:39:eb:08:43:44:9f:af:06:d9:3a:22: a0:a3:bb:0c:ae:d2:90:22:1c:68:b3:65:3c:4c:de:8f:48:18: d4:5b:6d:36:1a:17:fb:cc:44:6e:c3:01:c0:75:d9:ff:35:55: e4:9b:ba:0f:4a:ec:87:0f:5e:cf:cc:3c:1f:55:e6:b4:87:fe: ee:ce:b1:a6:61:14:38:d8:ca:e2:9f:c9:fb:7d:b7:0d:5f:b8: 0a:82:c2:e6:7f:7f:2b:bf:01:7a:c2:04:33:2c:5f:36:fd:73: 54:b9:a8:c0:2d:67:c9:4a:88:91:e2:af:af:9f:f0:e9:24:a6: 18:67:a9:6d:a0:36:d3:19:8d:b2:81:26:4a:92:2c:c8:ef:76: 0e:d1:c2:ae:95:f6:b0:2a:55:d5:ce:05:c0:76:42:3d:a7:39: 91:75:72:8f:e3:38:b2:52:7e:b8:ef:63:26:e3:56:da:32:13: d9:47:33:a3:b9:29:7a:a7:75:59:61:79:3a:d1:64:48:74:34: 4c:71:b6:6e:f6:4f:2f:0a:6d:95:b6:0a:52:63:8f:23:9c:c7: 1e:af:68:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnXG2OrCCeAxN9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTg1MTMxMWQtN2UzMi00ZjcwLThiZGQtZDk0MzhlMzgyMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji63Cugyz4YByDoCBdW4Qi3R0Cwmrk3pnpjL KmSrGo0HWGcsNlxv7DKlJpxxcXtuIWU94Oazk3l4OGP1BvMS527UOCfpz1hGtlTN 5ocLu1loVA4vnydCWNBx8L95xariwaO1bn4VyjhREmgrDe0J7B00kmjWsEJkZeRl ee/XYdzLy71hla6cKmjz9Vqxorf6Pg9JsgBeys0RgNK4XWjnrbhF/ovkXhRFtoA1 nNBSbLwo0RtXdhH0QGojeghYc2GZMCHUmIkg6GIqrlhKmp6Ju1bGSJkxNEtSMjEC qdUUGY42W/amPMDgCJI2zpYDDvBsxMzVeG2xBpUIE+GEAMtIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPVEbyhgFoXyifwV5BBxJUsNAP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk2MDUwYWItMzlmYi0z ODdlLTg0OTAtMWQ2MWMwNWYzMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZWxeZocbXbH0DI394Q+h/Valnz2DgVcBiZTEFbSBh4tFjdt9cT/isx mLo56whDRJ+vBtk6IqCjuwyu0pAiHGizZTxM3o9IGNRbbTYaF/vMRG7DAcB12f81 VeSbug9K7IcPXs/MPB9V5rSH/u7OsaZhFDjYyuKfyft9tw1fuAqCwuZ/fyu/AXrC BDMsXzb9c1S5qMAtZ8lKiJHir6+f8OkkphhnqW2gNtMZjbKBJkqSLMjvdg7Rwq6V 9rAqVdXOBcB2Qj2nOZF1co/jOLJSfrjvYybjVtoyE9lHM6O5KXqndVlheTrRZEh0 NExxtm72Ty8KbZW2ClJjjyOcxx6vaKc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:00:06 2026 by rpki-client