$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa File: 29bb7170-7a90-39aa-ad83-71606197544b.roa (raw, json) Hash identifier: ZcMZuH1JzITSqKp1VNzRfydtj58eFuEkxJPXSTPUrAU= Subject key identifier: 03:C4:0E:88:26:6B:E1:6F:B2:3E:66:BF:0D:78:64:FB:8E:49:7B:D7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584E059BDD1025BE332BE642B4FC Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 7155 IP address blocks: 70.41.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Jun 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:dd:10:25:be:33:2b:e6:42:b4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=86a8c0af-675a-49f3-8bae-7789e1cbd3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:8b:69:c6:90:6d:7b:ea:5a:63:a2:3a:52: 3b:70:3f:4c:15:71:b3:92:8c:d6:e0:2b:aa:ac:74: 43:87:a9:22:ae:ab:ba:bc:2e:2b:20:f7:01:f0:81: 31:30:46:fc:06:0a:8f:f7:9a:fa:76:06:e5:31:38: 16:5e:de:c2:96:dc:b2:52:00:65:1d:e9:99:7b:be: 72:09:6a:df:19:b0:81:3e:15:87:99:e3:ed:cb:62: 77:b8:1f:a0:33:db:48:5b:da:e9:58:ce:b3:52:88: ab:f2:35:22:6a:f4:f2:cf:ce:58:f4:de:bb:ea:c6: f8:92:74:52:21:7c:a5:a0:a2:cc:47:0f:ed:30:1b: 70:2f:14:f6:8f:98:3f:d3:6a:97:9e:1d:88:d6:45: 66:b0:28:4e:13:af:42:ec:5a:4b:ea:e9:e3:c1:5e: 83:26:aa:1b:e6:a7:84:9e:71:8c:c6:f5:48:17:c3: 81:3e:1e:97:c6:02:87:9e:f3:da:5c:a0:2d:ca:e4: 8b:98:aa:d5:b5:49:1a:4d:39:80:cc:b6:e4:39:9d: a7:86:9d:4e:3e:04:10:c0:d5:b0:d6:a7:18:13:45: ad:3f:4f:5e:f2:2e:02:4d:16:d5:a7:1f:f8:54:17: bb:03:e9:6b:e8:59:e5:cb:94:22:41:79:38:45:69: b7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:0E:88:26:6B:E1:6F:B2:3E:66:BF:0D:78:64:FB:8E:49:7B:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29bb7170-7a90-39aa-ad83-71606197544b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:62:ef:45:e5:f3:92:cc:bb:8e:ea:23:9e:a4:cd:ca:3b:d2: c1:9f:23:58:66:1a:d9:13:2b:86:c0:67:b4:39:ea:4d:29:b3: 72:6e:4c:9c:0f:97:74:0b:53:5f:ec:0c:64:6e:75:61:d4:4e: 95:84:84:53:bf:42:47:44:a2:8c:fa:03:63:e6:b8:79:96:c7: 15:c6:8b:82:d5:ab:de:d4:d0:d6:84:6a:9c:f1:3e:af:f3:a7: 24:b9:52:41:e7:64:2f:ed:f6:57:4e:9a:d4:3b:6f:de:87:dd: 8a:35:8a:bf:fd:38:de:14:7f:85:ea:95:43:8b:ac:96:43:85: 54:aa:c3:36:4b:3c:8b:c3:65:e8:21:b5:4b:35:b2:33:f8:8e: ee:91:67:30:6e:9a:b6:ea:62:5e:87:b2:e3:a2:3d:d7:ea:45: 6b:6b:92:79:f3:ee:81:af:32:5a:a5:39:9d:35:24:f7:11:1b: a2:ed:95:35:fa:87:8e:13:78:5f:99:f4:b1:c0:ab:3a:a7:4e: de:2a:a3:04:89:1f:69:2e:bc:da:ca:c8:e8:7f:2b:2a:45:d0: 1f:2f:66:22:dc:9a:71:c4:82:e3:0a:8d:02:e1:e9:4b:6d:42: b8:15:0f:25:ac:22:13:3c:d9:3c:51:d8:26:cd:af:5c:7a:bf: a8:68:73:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm90QJb4zK+ZCtPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ODZhOGMwYWYtNjc1YS00OWYzLThiYWUtNzc4OWUxY2JkM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6LacaQbXvqWmOiOlI7cD9MFXGzkozW4Cuq rHRDh6kirqu6vC4rIPcB8IExMEb8BgqP95r6dgblMTgWXt7CltyyUgBlHemZe75y CWrfGbCBPhWHmePty2J3uB+gM9tIW9rpWM6zUoir8jUiavTyz85Y9N676sb4knRS IXyloKLMRw/tMBtwLxT2j5g/02qXnh2I1kVmsChOE69C7FpL6unjwV6DJqob5qeE nnGMxvVIF8OBPh6XxgKHnvPaXKAtyuSLmKrVtUkaTTmAzLbkOZ2nhp1OPgQQwNWw 1qcYE0WtP09e8i4CTRbVpx/4VBe7A+lr6Fnly5QiQXk4RWm3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPEDogma+Fvsj5mvw14ZPuOSXvXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjliYjcxNzAtN2E5MC0z OWFhLWFkODMtNzE2MDYxOTc1NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1i70Xl85LMu47qI56kzco70sGfI1hmGtkTK4bAZ7Q56k0ps3JuTJwP l3QLU1/sDGRudWHUTpWEhFO/QkdEooz6A2PmuHmWxxXGi4LVq97U0NaEapzxPq/z pyS5UkHnZC/t9ldOmtQ7b96H3Yo1ir/9ON4Uf4XqlUOLrJZDhVSqwzZLPIvDZegh tUs1sjP4ju6RZzBumrbqYl6HsuOiPdfqRWtrknnz7oGvMlqlOZ01JPcRG6LtlTX6 h44TeF+Z9LHAqzqnTt4qowSJH2kuvNrKyOh/KypF0B8vZiLcmnHEguMKjQLh6Utt QrgVDyWsIhM82TxR2CbNr1x6v6hocxw= -----END CERTIFICATE-----Generated at Thu Jun 11 21:26:42 2026 by rpki-client