$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa File: d2acef8d-3753-3089-ad8a-91356efd77a0.roa (raw, json) Hash identifier: kcfTsBY9ger3HZgTGidMW2+1Em5ebUdHnri6ZbiKE8w= Subject key identifier: 24:32:4D:0D:36:30:6D:94:C2:F6:77:99:A9:DA:90:77:F2:5B:94:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF9E70BBD2889DF389980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f9:e7:0b:bd:28:89:df:38:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5eefd72-8f28-4983-8d11-582deca31b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:32:d2:97:c8:87:12:5c:d1:7f:8b:67:76:29: 17:40:59:16:54:52:c4:56:11:0f:36:47:ed:16:cb: 98:9d:e5:e9:89:dc:ca:2f:32:e2:8f:93:d5:01:13: 26:d2:4f:55:0f:ff:de:c7:ee:eb:6d:d0:d3:32:34: 6a:f5:c6:bb:ec:84:d8:65:f1:bf:ac:07:25:1c:85: cd:22:b2:5a:3a:39:13:b3:0f:49:e1:14:57:ac:64: c6:bd:09:d6:17:48:32:dd:ef:e0:1a:aa:51:d6:ac: 0c:86:76:61:d0:f2:90:56:46:de:15:be:ec:f0:1b: b3:72:43:26:b1:fb:c4:06:a1:45:c6:22:29:de:39: 75:60:7b:63:9d:59:b7:f2:3d:a3:fd:88:2c:5f:7f: ad:f7:c1:bc:8a:d6:94:71:ad:89:24:ce:3a:f1:28: 10:05:f2:d6:fe:9f:c1:c3:c0:38:ba:fb:35:26:11: f2:8d:b2:32:6b:cd:33:77:72:8e:b6:5f:57:2d:fa: 95:10:f3:60:ba:af:81:ea:90:09:be:74:d1:0d:5a: a1:c2:78:da:9d:13:04:4b:4c:56:63:44:9b:0b:d2: ce:3b:c0:ef:e7:91:ff:af:0a:70:1a:36:47:4c:6a: a6:9b:c0:9a:be:2d:a5:32:20:74:82:79:61:70:f0: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:32:4D:0D:36:30:6D:94:C2:F6:77:99:A9:DA:90:77:F2:5B:94:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2acef8d-3753-3089-ad8a-91356efd77a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7f:b5:42:4c:d2:5f:06:b5:a2:24:16:29:a1:31:8b:b9:ac: 1b:91:06:2e:7a:5f:b1:21:2a:60:33:3e:a6:87:55:bf:8b:0e: 7b:24:5a:12:f3:87:92:4d:63:8c:55:04:ea:9c:f0:6c:df:2c: 15:fb:e4:43:6f:cd:eb:69:7e:70:a0:f5:f9:63:d4:25:05:83: 69:de:09:eb:fd:4f:ba:73:1e:ae:02:62:60:36:e7:c1:dd:e6: 2b:03:9a:97:49:6b:37:51:45:f6:64:d2:9c:cc:dd:a8:32:1e: 06:71:d8:0c:74:99:64:75:84:ce:b2:56:1e:64:50:93:46:78: 76:08:09:b2:3e:52:8a:64:0b:ac:b5:57:98:44:19:f7:b8:98: d6:f4:d3:da:17:a4:b9:b0:1b:a0:c7:35:d0:c3:df:01:cd:cd: 1e:52:cf:57:98:14:bf:84:f8:7c:fb:83:3e:6d:78:79:28:94: 7d:1a:8a:05:ee:e6:54:01:11:85:80:5c:bd:2a:a2:ba:db:84: 2b:ee:5f:a9:5f:a0:fb:36:ce:d2:2f:c5:a9:c9:52:7d:9f:88: 97:2e:df:b4:23:e5:0c:97:15:7a:25:85:82:40:c2:ee:5c:26: 99:a3:f0:36:80:d5:8a:11:fb:0f:14:ad:1e:9c:18:ee:b8:cf: 79:24:67:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevnnC70oid84mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVlZWZkNzItOGYyOC00OTgzLThkMTEtNTgyZGVjYTMxYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDLSl8iHElzRf4tndikXQFkWVFLEVhEPNkft FsuYneXpidzKLzLij5PVARMm0k9VD//ex+7rbdDTMjRq9ca77ITYZfG/rAclHIXN IrJaOjkTsw9J4RRXrGTGvQnWF0gy3e/gGqpR1qwMhnZh0PKQVkbeFb7s8BuzckMm sfvEBqFFxiIp3jl1YHtjnVm38j2j/YgsX3+t98G8itaUca2JJM468SgQBfLW/p/B w8A4uvs1JhHyjbIya80zd3KOtl9XLfqVEPNguq+B6pAJvnTRDVqhwnjanRMES0xW Y0SbC9LOO8Dv55H/rwpwGjZHTGqmm8Cavi2lMiB0gnlhcPCXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQyTQ02MG2UwvZ3manakHfyW5SMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJhY2VmOGQtMzc1My0z MDg5LWFkOGEtOTEzNTZlZmQ3N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARimpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF/tUJM0l8GtaIkFimhMYu5rBuRBi56X7EhKmAzPqaHVb+LDnskWhLz h5JNY4xVBOqc8GzfLBX75ENvzetpfnCg9flj1CUFg2neCev9T7pzHq4CYmA258Hd 5isDmpdJazdRRfZk0pzM3agyHgZx2Ax0mWR1hM6yVh5kUJNGeHYICbI+UopkC6y1 V5hEGfe4mNb009oXpLmwG6DHNdDD3wHNzR5Sz1eYFL+E+Hz7gz5teHkolH0aigXu 5lQBEYWAXL0qorrbhCvuX6lfoPs2ztIvxanJUn2fiJcu37Qj5QyXFXolhYJAwu5c Jpmj8DaA1YoR+w8UrR6cGO64z3kkZ48= -----END CERTIFICATE-----Generated at Mon Sep 28 14:38:17 2026 by rpki-client