$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa File: 8d9df1a1-2d02-303b-931f-52fb364cee85.roa (raw, json) Hash identifier: n+TiwWRB8oAOH5odTNDgYijiSWk0RNIZyOy7IsaeibY= Subject key identifier: 2F:5B:6E:B3:23:42:8C:8F:A3:F6:95:80:43:41:8A:B9:11:B9:FE:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49831CC68E55E31490954F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 70.41.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:1c:c6:8e:55:e3:14:90:95:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=42ebf5b9-34b1-46f6-9b6d-2559556ff94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:94:ba:65:a9:fe:77:08:14:02:97:9f:86: 0d:ea:03:a7:3c:b0:30:3a:39:55:36:99:25:0e:b1: cd:96:a3:6f:c1:71:03:1e:5f:6d:bd:37:b6:63:1d: 20:92:1b:5e:22:02:53:4b:42:62:8b:43:2d:19:be: 58:cb:7f:09:6a:2a:6b:ab:fd:58:2d:c3:82:8c:84: 7a:09:ab:05:b7:eb:21:df:bd:ed:0c:09:b0:c9:e3: f2:a8:01:1b:95:2c:ab:72:eb:bd:1b:62:6a:fe:ff: d9:fe:d6:36:a1:68:08:c1:ee:b4:fd:e9:fb:c0:05: f3:85:31:6b:34:24:1f:43:8c:85:6c:6e:3b:cb:63: 28:70:a4:b5:75:75:ed:3f:ab:52:e7:44:a8:ec:5d: 1e:b7:41:07:6e:ea:d1:da:6e:17:97:96:8b:03:a5: ba:cd:e3:d2:ef:44:ad:cd:ed:9f:d4:9b:b7:14:56: 52:4a:44:63:0d:82:f2:54:6c:15:b3:6f:7f:e2:9e: 3a:50:56:c4:57:4a:f9:11:50:e7:86:29:b5:12:3a: 55:ff:53:f1:59:c7:4a:f4:98:ad:98:55:f6:0c:6a: df:50:ca:90:d3:4a:20:24:c9:17:23:28:9e:92:59: ae:f8:86:29:e6:32:b0:e1:72:93:c6:1f:bb:b5:1d: a1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5B:6E:B3:23:42:8C:8F:A3:F6:95:80:43:41:8A:B9:11:B9:FE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d9df1a1-2d02-303b-931f-52fb364cee85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:61:6a:d5:ae:1d:f8:f3:88:5b:96:75:33:17:db:eb:b3:be: db:5b:66:04:cb:1f:1d:fd:54:a3:07:72:bb:25:78:1a:6a:ca: c9:97:ea:17:00:55:ed:20:4a:a6:e9:2c:40:71:78:83:77:a5: d8:cd:8c:ad:fe:fc:c2:7e:ff:e1:ee:49:0d:82:02:24:02:85: e4:61:8a:67:b9:51:ee:a3:c2:e6:01:4d:30:43:2f:37:6d:ce: 35:60:4a:09:ca:40:76:3f:38:9f:b3:cb:5b:af:8b:0a:d3:51: 24:8b:d0:c5:ac:ac:34:fc:be:26:f0:b2:91:aa:25:fc:42:99: de:70:8b:f7:54:10:70:85:e1:7e:d7:25:ae:0e:ba:2e:40:a1: 84:59:d0:c4:4e:ac:55:c6:d4:41:3e:64:4c:df:1f:ef:ed:2f: 3d:e6:8b:c9:32:82:e4:b8:91:37:eb:3c:0f:59:df:5d:39:bd: 45:72:a7:ea:83:e6:85:3e:fc:c3:3b:db:67:03:4d:cd:2a:5d: c2:82:35:e7:9f:b1:79:6c:41:c8:89:d2:6c:15:3a:46:c7:90: 08:56:b4:6a:e6:75:9b:ca:1c:20:f3:60:ca:29:84:65:c0:e5: b7:d2:43:bf:51:d7:02:b8:90:1f:d0:b8:db:ca:ca:61:00:0b: 9d:82:e5:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgxzGjlXjFJCVT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDJlYmY1YjktMzRiMS00NmY2LTliNmQtMjU1OTU1NmZmOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttSUumWp/ncIFAKXn4YN6gOnPLAwOjlVNpkl DrHNlqNvwXEDHl9tvTe2Yx0gkhteIgJTS0Jii0MtGb5Yy38Jaiprq/1YLcOCjIR6 CasFt+sh373tDAmwyePyqAEblSyrcuu9G2Jq/v/Z/tY2oWgIwe60/en7wAXzhTFr NCQfQ4yFbG47y2MocKS1dXXtP6tS50So7F0et0EHburR2m4Xl5aLA6W6zePS70St ze2f1Ju3FFZSSkRjDYLyVGwVs29/4p46UFbEV0r5EVDnhim1EjpV/1PxWcdK9Jit mFX2DGrfUMqQ00ogJMkXIyieklmu+IYp5jKw4XKTxh+7tR2hgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9bbrMjQoyPo/aVgENBirkRuf54MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQ5ZGYxYTEtMmQwMi0z MDNiLTkzMWYtNTJmYjM2NGNlZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBhatWuHfjziFuWdTMX2+uzvttbZgTLHx39VKMHcrsleBpqysmX6hcA Ve0gSqbpLEBxeIN3pdjNjK3+/MJ+/+HuSQ2CAiQCheRhime5Ue6jwuYBTTBDLzdt zjVgSgnKQHY/OJ+zy1uviwrTUSSL0MWsrDT8vibwspGqJfxCmd5wi/dUEHCF4X7X Ja4Oui5AoYRZ0MROrFXG1EE+ZEzfH+/tLz3mi8kyguS4kTfrPA9Z3105vUVyp+qD 5oU+/MM722cDTc0qXcKCNeefsXlsQciJ0mwVOkbHkAhWtGrmdZvKHCDzYMophGXA 5bfSQ79R1wK4kB/QuNvKymEAC52C5Xo= -----END CERTIFICATE-----Generated at Wed Oct 28 14:57:44 2026 by rpki-client