$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1db32560-6e79-325d-9669-166f0dc25cdc.roa File: 1db32560-6e79-325d-9669-166f0dc25cdc.roa (raw, json) Hash identifier: p9j1uZBa5Hflx+xi4SOB9xUgrLYFe9lmTKxwk39o6JU= Subject key identifier: A1:67:79:AD:E8:34:6E:57:A9:84:B5:E2:B9:C8:37:C4:F6:96:85:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D79BCCBA6B58177958200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1db32560-6e79-325d-9669-166f0dc25cdc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 70.41.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:79:bc:cb:a6:b5:81:77:95:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=357ea22b-2ea8-4a30-9810-1338f0c4a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:51:be:c6:42:93:18:78:d7:d6:5f:14:90: 02:bb:ad:0e:c8:02:11:72:90:f1:e3:e3:ca:6c:a0: a0:60:ce:1c:f4:d5:4a:e3:74:27:e5:5c:07:77:62: 69:2e:1f:7c:2d:05:b5:ab:de:4b:e0:76:e7:01:64: 7e:78:d4:59:cd:fe:74:63:30:10:4e:64:e3:23:b3: 8e:91:23:98:4e:2b:88:ec:89:fa:a8:62:2d:ce:d4: 69:bf:14:81:15:70:d2:87:35:b6:79:33:78:f5:5e: 19:06:33:95:4f:ae:b0:0f:e9:1b:e8:38:83:9e:53: 80:d0:a8:50:95:92:30:ac:10:88:04:82:01:32:ff: 36:55:76:6d:ec:65:d0:44:27:3a:77:83:7a:b1:ed: 44:44:ff:66:09:e1:2b:83:59:53:92:f7:c6:6a:ac: 71:a5:9e:39:0f:b1:8c:ff:9b:23:b9:34:e4:d0:1e: 08:8a:93:2b:b5:d6:14:76:35:c4:da:02:ed:40:8e: e6:07:6b:87:ad:c1:b9:cd:1d:f2:2c:83:ee:96:ae: b3:88:13:49:70:69:54:00:f7:17:5e:fe:28:c0:b6: 82:e7:e6:31:63:28:80:1a:9e:c6:84:9e:ba:9b:fa: e6:e8:a9:ce:54:12:11:bd:6f:d6:1d:97:87:91:76: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:67:79:AD:E8:34:6E:57:A9:84:B5:E2:B9:C8:37:C4:F6:96:85:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1db32560-6e79-325d-9669-166f0dc25cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d0:78:9b:ad:b6:76:17:70:fb:d5:63:3f:c4:08:b2:78:e8: f3:f6:dc:87:e9:42:61:6e:e2:6e:3e:c6:d9:0b:8a:cd:e2:f0: 59:bf:9e:61:af:a5:49:3b:1c:99:60:97:89:5e:78:5d:b8:4a: b8:4f:ca:10:28:b9:8f:6a:8a:19:63:61:93:3c:80:ad:f9:b8: a6:7f:71:e9:ba:eb:83:e8:c1:60:33:72:48:13:32:6a:0f:e8: 9c:5c:62:07:f9:7b:ba:a5:2b:7e:2d:91:b7:bd:9d:08:2d:d3: dc:28:15:27:bb:a2:a0:38:2a:dd:74:5a:ce:f0:61:bc:33:64: 6f:4f:81:dc:db:f3:d6:7c:5b:e1:de:1e:5a:1a:93:16:e7:66: f3:cb:ae:47:2d:75:04:15:e6:b4:11:68:cb:c7:ce:8e:94:49: de:90:0b:6f:c0:46:71:a3:49:d0:0a:a4:c5:bf:b4:94:04:4e: da:26:a8:e7:db:ec:56:8d:2c:7c:44:8b:a0:64:35:35:1b:1c: 80:4c:9d:bf:02:3c:f8:63:3c:3c:9f:06:28:16:d6:8a:fe:17: 52:8e:c6:f7:92:b7:93:36:e6:da:8e:5f:52:9e:6c:62:c5:52: 17:6c:4d:ee:22:4e:fc:50:f2:fa:a5:33:4f:73:4f:bc:fd:e3: d6:1d:d2:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnXm8y6a1gXeVggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzU3ZWEyMmItMmVhOC00YTMwLTk4MTAtMTMzOGYwYzRhNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZxRvsZCkxh419ZfFJACu60OyAIRcpDx4+PK bKCgYM4c9NVK43Qn5VwHd2JpLh98LQW1q95L4HbnAWR+eNRZzf50YzAQTmTjI7OO kSOYTiuI7In6qGItztRpvxSBFXDShzW2eTN49V4ZBjOVT66wD+kb6DiDnlOA0KhQ lZIwrBCIBIIBMv82VXZt7GXQRCc6d4N6se1ERP9mCeErg1lTkvfGaqxxpZ45D7GM /5sjuTTk0B4IipMrtdYUdjXE2gLtQI7mB2uHrcG5zR3yLIPulq6ziBNJcGlUAPcX Xv4owLaC5+YxYyiAGp7GhJ66m/rm6KnOVBIRvW/WHZeHkXZDtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFnea3oNG5XqYS14rnIN8T2loUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWRiMzI1NjAtNmU3OS0z MjVkLTk2NjktMTY2ZjBkYzI1Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTQeJuttnYXcPvVYz/ECLJ46PP23IfpQmFu4m4+xtkLis3i8Fm/nmGv pUk7HJlgl4leeF24SrhPyhAouY9qihljYZM8gK35uKZ/cem664PowWAzckgTMmoP 6JxcYgf5e7qlK34tkbe9nQgt09woFSe7oqA4Kt10Ws7wYbwzZG9Pgdzb89Z8W+He HloakxbnZvPLrkctdQQV5rQRaMvHzo6USd6QC2/ARnGjSdAKpMW/tJQETtomqOfb 7FaNLHxEi6BkNTUbHIBMnb8CPPhjPDyfBigW1or+F1KOxveSt5M25tqOX1KebGLF UhdsTe4iTvxQ8vqlM09zT7z949Yd0mE= -----END CERTIFICATE-----Generated at Thu Sep 10 17:44:47 2026 by rpki-client