$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/043b0587-60f2-31a8-b052-a7b11b29ca04.roa File: 043b0587-60f2-31a8-b052-a7b11b29ca04.roa (raw, json) Hash identifier: /CYv9lQMmPgQ+iyGRzgqICzbmL6B4bk/uKdGqPIFNFk= Subject key identifier: CA:87:28:EE:64:38:F1:1A:12:03:9B:80:2C:4F:CC:C9:8D:BD:FF:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB2791CAA2AEE2BC09500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/043b0587-60f2-31a8-b052-a7b11b29ca04.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b2:79:1c:aa:2a:ee:2b:c0:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b714dd60-abf0-4f32-9aad-e8dd284b5126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:8d:e9:e9:06:aa:83:46:97:17:e0:86:56: 83:55:b2:16:d7:ff:50:9c:0b:13:86:72:bb:25:be: ca:2f:7e:af:53:19:1e:3d:dc:52:fc:2b:0f:cf:00: 0e:55:f3:da:02:28:a2:c1:06:9b:f1:6f:39:5f:36: db:3c:6a:0b:48:34:29:d1:80:c7:b5:6c:2e:dd:2b: 2d:c6:85:c0:83:34:9d:24:fd:26:92:d8:9e:07:51: cc:dd:17:36:96:5d:93:1e:71:98:a6:8b:86:ff:c4: e5:ce:19:69:9b:53:31:5a:ac:82:3b:68:44:1d:9e: 57:56:08:52:c4:49:0a:f3:f8:f0:d0:55:5d:29:99: 38:7c:6b:43:f0:1c:27:98:3c:81:d7:f7:60:00:a6: 79:ed:4e:fe:ad:b1:ab:83:68:2a:c6:6c:9b:48:27: a4:fd:4b:e8:0a:83:42:b6:8f:71:61:f6:53:18:a0: c1:d6:2c:ea:2e:01:16:79:9d:b7:e5:b2:56:b8:9b: 56:e8:df:1f:78:72:28:5b:07:ba:c3:18:68:09:3d: 4b:22:69:cb:c2:f5:53:9d:2a:fa:43:45:a3:c0:33: a6:4d:a2:86:70:29:2f:fe:92:16:12:b2:50:5f:e1: b5:07:87:db:df:8a:b3:f9:2a:a4:52:11:4f:7d:b5: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:87:28:EE:64:38:F1:1A:12:03:9B:80:2C:4F:CC:C9:8D:BD:FF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/043b0587-60f2-31a8-b052-a7b11b29ca04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:fa:cd:cf:d6:ea:2d:18:a9:fb:7a:18:d0:49:5d:93:25:75: f4:9b:23:e0:78:71:f9:25:a9:59:3d:a2:3f:b2:5d:0e:be:e6: d9:09:cf:26:20:af:32:9d:f2:a5:df:72:5e:ff:ce:67:45:08: 42:a1:8e:c8:f5:7f:db:7a:9c:ef:b5:f0:53:22:b2:85:f4:3a: 4f:34:82:bb:e7:2f:ef:bb:5f:7b:db:a1:0b:84:bc:a7:75:17: 99:7d:ba:ed:fd:14:7a:b0:2f:07:5b:2c:36:93:63:c4:bd:37: d3:cb:ac:6b:03:f4:a9:54:a8:02:53:f8:2b:8a:9f:be:a6:7e: d2:eb:64:ee:72:f1:65:d6:f7:32:2d:7d:68:9d:2d:f1:18:9b: 2a:fc:ad:ee:bf:bd:0e:04:d7:9e:e0:06:85:d0:85:94:d2:f0: 72:6a:c2:fd:29:2e:f4:53:fa:c1:a9:df:45:d2:23:f8:ef:f4: 80:75:37:a3:4d:3f:ca:08:95:ab:7e:69:ed:d0:c7:b8:72:8a: b0:79:5e:59:73:40:13:03:c3:77:97:03:c4:5f:35:8c:9f:66: 25:5a:b3:8e:bc:2f:8f:c2:ac:42:60:18:30:49:51:e1:fc:ff: 68:1d:dc:2a:13:a9:12:7d:e2:c6:b1:37:4b:97:dd:ab:5e:70: d0:7d:59:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37J5HKoq7ivAlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjcxNGRkNjAtYWJmMC00ZjMyLTlhYWQtZThkZDI4NGI1MTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhON6ekGqoNGlxfghlaDVbIW1/9QnAsThnK7 Jb7KL36vUxkePdxS/CsPzwAOVfPaAiiiwQab8W85XzbbPGoLSDQp0YDHtWwu3Sst xoXAgzSdJP0mktieB1HM3Rc2ll2THnGYpouG/8Tlzhlpm1MxWqyCO2hEHZ5XVghS xEkK8/jw0FVdKZk4fGtD8BwnmDyB1/dgAKZ57U7+rbGrg2gqxmybSCek/UvoCoNC to9xYfZTGKDB1izqLgEWeZ235bJWuJtW6N8feHIoWwe6wxhoCT1LImnLwvVTnSr6 Q0WjwDOmTaKGcCkv/pIWErJQX+G1B4fb34qz+SqkUhFPfbVKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqHKO5kOPEaEgObgCxPzMmNvf9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQzYjA1ODctNjBmMi0z MWE4LWIwNTItYTdiMTFiMjljYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiluMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH6zc/W6i0Yqft6GNBJXZMldfSbI+B4cfklqVk9oj+yXQ6+5tkJzyYg rzKd8qXfcl7/zmdFCEKhjsj1f9t6nO+18FMisoX0Ok80grvnL++7X3vboQuEvKd1 F5l9uu39FHqwLwdbLDaTY8S9N9PLrGsD9KlUqAJT+CuKn76mftLrZO5y8WXW9zIt fWidLfEYmyr8re6/vQ4E157gBoXQhZTS8HJqwv0pLvRT+sGp30XSI/jv9IB1N6NN P8oIlat+ae3Qx7hyirB5XllzQBMDw3eXA8RfNYyfZiVas468L4/CrEJgGDBJUeH8 /2gd3CoTqRJ94saxN0uX3atecNB9WWI= -----END CERTIFICATE-----Generated at Fri Mar 13 05:52:25 2026 by rpki-client