$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dfd42b1-ec68-35ff-95e9-ea604a3fac0d.roa File: 2dfd42b1-ec68-35ff-95e9-ea604a3fac0d.roa (raw, json) Hash identifier: jwAh9ne+StzG0ofNY3xF6QBUoL5tj/s4fa2iNgxtd4I= Subject key identifier: F8:63:D2:BB:20:20:BD:50:0A:0C:D3:4E:6C:40:83:5B:52:A6:44:A8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AF718C17210FE12C44E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dfd42b1-ec68-35ff-95e9-ea604a3fac0d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:f7:18:c1:72:10:fe:12:c4:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5af78cce-3913-450e-92f9-ea275d4c0ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:f4:a7:c2:83:84:84:44:59:6a:47:7b:15: 30:9e:ed:5a:43:cc:d7:b6:36:c1:e9:80:ee:d6:d1: 2c:ff:1f:cf:54:1b:a0:75:d0:75:a8:73:bc:ff:50: cd:0f:fe:8d:86:3a:66:82:a1:81:ab:48:41:81:e6: 58:eb:f3:db:2b:10:75:e0:1c:53:1c:c6:63:bf:5e: 9a:c3:e3:9f:c6:04:fa:bd:85:b4:c1:3a:af:e8:b4: c2:45:27:4a:1c:da:a7:f6:84:9a:3c:ef:bd:b2:68: 1e:46:b0:a3:fb:a3:4b:33:cb:ef:0a:b6:14:11:2f: 89:da:be:8d:d9:59:8c:1d:f8:e9:36:a9:12:68:9e: db:4b:28:fe:87:68:5e:d5:15:b3:70:b5:b2:d4:9d: 23:0c:16:fe:7c:53:7e:f7:44:52:60:cb:1c:db:46: 13:b5:e3:7f:52:0e:9c:be:5f:04:de:3d:fc:6e:e4: c4:b1:bc:3a:82:35:d2:36:ac:3e:ee:bc:87:32:f6: a2:c2:ba:f8:39:dd:b1:92:75:c0:75:b7:3a:52:65: e5:2b:ba:a1:e7:37:79:12:19:e9:d7:27:b6:57:67: 4b:70:f1:a8:0d:3b:0d:7a:1e:4d:f2:b0:7a:75:9d: e6:4a:98:36:bc:1a:91:2b:0a:c2:cf:9d:4c:72:1a: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:D2:BB:20:20:BD:50:0A:0C:D3:4E:6C:40:83:5B:52:A6:44:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2dfd42b1-ec68-35ff-95e9-ea604a3fac0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:60:60:32:e5:b4:4d:d7:b9:cc:45:54:b9:01:21:ac:a9:83: 5b:e4:f1:a9:09:c2:f5:9b:53:11:82:97:14:59:8e:a8:ac:4e: 32:46:ac:d8:87:0c:ae:b1:b6:3c:2c:be:a7:2e:d3:fb:00:be: 14:7d:69:1a:a1:f5:36:75:6f:ab:ab:2e:92:59:7c:da:d0:1b: ea:11:b6:69:d0:c4:be:de:c3:81:88:aa:12:7f:2d:3c:46:a5: de:f8:18:0d:c0:53:9a:57:17:98:ed:24:d3:df:b7:56:44:f0: 5b:c6:5e:62:b7:1e:12:d2:58:37:49:16:3c:3f:26:3d:9b:b0: 84:4a:98:70:65:9b:95:70:07:6a:38:34:1d:4f:db:fa:d3:d3: 35:17:7d:2d:51:28:95:73:55:ea:b1:77:d4:e6:3a:03:58:6c: a9:d5:ae:49:b5:27:20:87:a7:2b:63:e1:29:93:76:ae:e6:93: 77:0b:04:68:94:b0:68:e6:37:8e:81:98:0e:f0:f9:f9:bc:e5: 63:df:3e:11:1b:a0:b0:34:0c:2d:4d:c3:49:b2:68:8b:7c:66: 42:30:81:ec:63:7c:b9:f9:81:8e:a6:4e:46:9d:da:53:a7:6f: 6b:36:4e:f9:e2:9a:cb:96:76:9a:ae:5a:6f:e0:a7:32:83:4f: 9f:bb:21:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JevcYwXIQ/hLETgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFmNzhjY2UtMzkxMy00NTBlLTkyZjktZWEyNzVkNGMwZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofv0p8KDhIREWWpHexUwnu1aQ8zXtjbB6YDu 1tEs/x/PVBugddB1qHO8/1DND/6NhjpmgqGBq0hBgeZY6/PbKxB14BxTHMZjv16a w+OfxgT6vYW0wTqv6LTCRSdKHNqn9oSaPO+9smgeRrCj+6NLM8vvCrYUES+J2r6N 2VmMHfjpNqkSaJ7bSyj+h2he1RWzcLWy1J0jDBb+fFN+90RSYMsc20YTteN/Ug6c vl8E3j38buTEsbw6gjXSNqw+7ryHMvaiwrr4Od2xknXAdbc6UmXlK7qh5zd5Ehnp 1ye2V2dLcPGoDTsNeh5N8rB6dZ3mSpg2vBqRKwrCz51MchrAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhj0rsgIL1QCgzTTmxAg1tSpkSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRmZDQyYjEtZWM2OC0z NWZmLTk1ZTktZWE2MDRhM2ZhYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARil+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9gYDLltE3XucxFVLkBIaypg1vk8akJwvWbUxGClxRZjqisTjJGrNiH DK6xtjwsvqcu0/sAvhR9aRqh9TZ1b6urLpJZfNrQG+oRtmnQxL7ew4GIqhJ/LTxG pd74GA3AU5pXF5jtJNPft1ZE8FvGXmK3HhLSWDdJFjw/Jj2bsIRKmHBlm5VwB2o4 NB1P2/rT0zUXfS1RKJVzVeqxd9TmOgNYbKnVrkm1JyCHpytj4SmTdq7mk3cLBGiU sGjmN46BmA7w+fm85WPfPhEboLA0DC1Nw0myaIt8ZkIwgexjfLn5gY6mTkad2lOn b2s2TvnimsuWdpquWm/gpzKDT5+7IWA= -----END CERTIFICATE-----Generated at Wed Oct 28 22:49:43 2026 by rpki-client