$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa File: 2a528825-cc34-395a-a8fe-a399eadad177.roa (raw, json) Hash identifier: EYcl+xxA/lFzUcgEqGakK9nzt5Jsvl2tGtDy59QTOkU= Subject key identifier: DB:E7:37:FC:44:01:0E:2E:FA:9F:BB:AB:74:33:F2:0B:5F:6A:AC:AC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EAFE6F852D393BCC9F4006738 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 40306 IP address blocks: 70.41.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f8:52:d3:93:bc:c9:f4:00:67:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=bf7deeb3-1310-48c7-94b7-6144ba4a0f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:5e:24:58:1a:85:38:a2:77:73:0c:fb:02: ff:1e:e3:e0:4e:b1:17:4d:8a:6a:64:53:53:e1:0d: d9:f6:fe:2c:8c:e2:49:c8:eb:82:62:4d:98:22:40: 55:e4:03:a6:f6:74:9f:3c:cf:79:f8:b0:d9:ab:b5: c7:f0:74:6c:81:8b:0a:ea:5a:25:a6:a5:24:f5:60: ea:99:06:24:86:cf:28:a5:35:81:d8:80:97:b2:ad: ba:da:9f:9a:ca:78:7f:04:84:ee:7b:a4:d1:37:12: 5c:95:a2:8b:74:23:3c:84:0b:ab:4f:08:aa:cf:95: 89:86:34:dc:13:f9:94:d5:2a:69:a3:4d:71:f5:6b: b8:02:dd:b6:c8:63:3d:93:ed:3e:d5:ba:56:14:bd: ae:d7:f6:77:52:4e:33:7b:9a:36:16:75:d5:09:4e: 54:2f:f7:88:0b:c9:9f:17:69:29:22:fa:38:a7:42: 5f:e5:02:1b:dc:1e:9b:5d:80:17:55:06:c2:7e:61: bc:a4:a9:ec:16:94:f9:c1:63:af:50:89:85:f6:ca: 15:bd:1e:35:29:2d:21:d9:53:85:ba:ab:75:f3:ee: 93:0c:53:8a:40:b1:dd:d0:07:fa:1c:88:ec:32:60: 3d:33:af:59:58:e2:24:d1:6a:b8:cb:0b:05:d4:5f: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:37:FC:44:01:0E:2E:FA:9F:BB:AB:74:33:F2:0B:5F:6A:AC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a528825-cc34-395a-a8fe-a399eadad177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:43:e6:29:36:23:55:81:81:b1:ee:ab:22:35:4e:56:a3:4d: d7:a1:6c:c0:88:0f:b0:9e:0c:42:02:50:bf:09:fb:0b:51:82: 3d:d5:7c:c7:29:ca:cb:2c:a8:2e:c8:91:d2:59:42:18:8d:2b: 9b:c2:dd:98:46:1b:bd:57:09:66:b1:4a:9e:b4:9d:a2:26:c3: 8b:4d:87:3f:c1:8f:d7:58:0c:12:47:9e:c2:5d:71:7a:5c:da: 31:59:f6:4c:7d:43:b8:4a:55:e2:72:08:7d:3c:57:bf:ed:9a: bb:ac:64:74:ce:eb:f3:cd:9e:29:bf:e1:61:4a:1c:a6:67:d4: b5:5a:72:e0:d2:e2:1a:3c:d2:6e:21:c2:1d:c3:44:5f:47:0c: 5b:b7:d0:0a:49:12:2a:77:f2:81:fe:1b:d7:e1:c9:c2:93:3c: 44:1e:48:d1:5e:39:a7:3f:56:48:db:29:83:7d:65:29:0a:27: fc:a9:f7:97:e7:26:25:fd:51:2b:73:e7:e7:69:1a:35:2d:2a: 4d:54:4b:d0:3f:d8:45:03:12:02:cf:f5:73:e7:82:13:cf:0c: 65:cf:e7:51:d5:62:3f:64:7d:40:c8:59:42:d9:72:d0:14:23: c1:a3:5d:db:c7:cc:e2:1f:b6:8a:37:77:b8:dc:80:0f:f0:aa: 25:0d:c0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vhS05O8yfQAZzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk YmY3ZGVlYjMtMTMxMC00OGM3LTk0YjctNjE0NGJhNGEwZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDFeJFgahTiid3MM+wL/HuPgTrEXTYpqZFNT 4Q3Z9v4sjOJJyOuCYk2YIkBV5AOm9nSfPM95+LDZq7XH8HRsgYsK6lolpqUk9WDq mQYkhs8opTWB2ICXsq262p+aynh/BITue6TRNxJclaKLdCM8hAurTwiqz5WJhjTc E/mU1Sppo01x9Wu4At22yGM9k+0+1bpWFL2u1/Z3Uk4ze5o2FnXVCU5UL/eIC8mf F2kpIvo4p0Jf5QIb3B6bXYAXVQbCfmG8pKnsFpT5wWOvUImF9soVvR41KS0h2VOF uqt18+6TDFOKQLHd0Af6HIjsMmA9M69ZWOIk0Wq4ywsF1F9lgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvnN/xEAQ4u+p+7q3Qz8gtfaqysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1Mjg4MjUtY2MzNC0z OTVhLWE4ZmUtYTM5OWVhZGFkMTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARincMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9D5ik2I1WBgbHuqyI1TlajTdehbMCID7CeDEICUL8J+wtRgj3VfMcp ysssqC7IkdJZQhiNK5vC3ZhGG71XCWaxSp60naImw4tNhz/Bj9dYDBJHnsJdcXpc 2jFZ9kx9Q7hKVeJyCH08V7/tmrusZHTO6/PNnim/4WFKHKZn1LVacuDS4ho80m4h wh3DRF9HDFu30ApJEip38oH+G9fhycKTPEQeSNFeOac/VkjbKYN9ZSkKJ/yp95fn JiX9UStz5+dpGjUtKk1US9A/2EUDEgLP9XPnghPPDGXP51HVYj9kfUDIWULZctAU I8GjXdvHzOIftoo3d7jcgA/wqiUNwCE= -----END CERTIFICATE-----Generated at Thu Sep 10 18:46:03 2026 by rpki-client