$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa File: 936fa4c3-1957-37f6-8e85-0c16e33783a6.roa (raw, json) Hash identifier: B3Dm6mqDuaSnu/ffgc15NX76WsPVRwnq6lfGvgxDdlo= Subject key identifier: FC:7D:A2:E2:56:3A:CB:72:14:8A:A2:E6:2B:47:24:1C:E2:46:2E:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D7F84251447812CAF1F88 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 70.41.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:7f:84:25:14:47:81:2c:af:1f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6c9df7c6-f306-4fe6-8187-9ac320c44bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c4:fb:5a:7b:b1:c8:7b:20:d5:6e:b3:3d:bb: 7e:4d:88:df:86:ee:ed:fc:80:b5:7d:32:b2:79:11: d7:87:52:41:be:02:b7:63:05:be:3f:78:96:a2:7b: 6d:44:3c:c6:cf:57:11:10:ab:03:35:58:a7:29:3e: ce:d9:32:bf:f7:0e:d7:e1:46:43:21:23:15:a2:6c: 86:57:e9:8f:d8:5a:96:6d:4e:8f:47:01:98:78:ce: 87:cd:1f:f4:f3:83:73:c2:a3:f6:db:d2:c4:77:9f: bd:e1:ee:9a:57:48:2c:24:cb:c6:d2:a2:1e:9d:82: bd:bf:45:d3:4a:25:6b:4b:2b:13:48:56:eb:d0:2f: 4c:5e:46:df:57:04:87:1f:66:d4:ed:9c:5f:4a:6a: ee:1f:89:46:f5:5f:9c:c4:47:ca:20:86:a6:58:8c: a8:f4:33:cf:17:aa:fb:b2:7b:be:16:25:35:78:06: 4b:3b:21:dc:b0:95:26:8e:ba:25:e6:c3:f5:a7:bd: 93:4f:fd:e5:c8:c5:25:a4:13:0e:24:f3:4e:f3:14: 62:ae:66:26:c3:2d:af:dd:37:49:c2:be:d8:6d:3c: 5a:40:d2:67:11:ce:ed:ea:b1:67:ef:67:96:a7:68: 31:d1:53:2a:b2:ca:d1:b6:4f:40:d2:16:31:b7:05: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7D:A2:E2:56:3A:CB:72:14:8A:A2:E6:2B:47:24:1C:E2:46:2E:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/936fa4c3-1957-37f6-8e85-0c16e33783a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f0:6f:e4:df:e8:5f:1e:7d:ea:fc:17:0a:56:4a:88:c2:48: d0:6b:9c:3d:9f:27:e7:20:e6:e6:8a:e8:84:94:e5:31:04:d6: 93:62:99:26:2b:9c:5e:98:68:70:c1:a5:a0:d0:b8:7d:af:c1: 16:a8:41:00:90:63:47:8c:ce:c2:14:d2:19:11:67:f3:56:f1: 99:60:da:72:1e:6b:c9:68:72:2e:d5:50:1e:35:52:9c:ef:14: 54:9f:fc:eb:d8:37:3d:c2:8d:70:07:a4:25:f6:b0:e2:c3:a2: 16:df:08:fa:08:8e:5b:01:01:7b:83:77:f7:bd:e1:0b:24:07: 01:69:6b:cc:68:2e:8c:25:c2:e8:4f:38:78:5a:b5:59:00:c6: d1:68:b6:2e:c9:cc:74:8d:e7:5c:62:d7:ef:3c:11:71:5a:87: b5:02:27:29:70:97:ee:ba:63:7d:d3:e4:07:29:8b:cd:97:58: 47:e1:bc:05:d0:f3:06:ac:96:9c:fa:81:52:f0:ff:5c:c5:97: 0b:12:6a:bb:23:9c:04:09:65:bb:48:28:70:00:50:89:b3:6c: b5:a9:dd:61:45:85:13:cf:2f:f6:79:96:b8:88:8f:0e:dd:85: 20:fd:16:a9:37:6c:a1:d6:cb:91:3d:23:40:36:bf:5b:70:83: 0f:15:17:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnX+EJRRHgSyvH4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmM5ZGY3YzYtZjMwNi00ZmU2LTgxODctOWFjMzIwYzQ0YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMT7WnuxyHsg1W6zPbt+TYjfhu7t/IC1fTKy eRHXh1JBvgK3YwW+P3iWonttRDzGz1cREKsDNVinKT7O2TK/9w7X4UZDISMVomyG V+mP2FqWbU6PRwGYeM6HzR/084NzwqP229LEd5+94e6aV0gsJMvG0qIenYK9v0XT SiVrSysTSFbr0C9MXkbfVwSHH2bU7ZxfSmruH4lG9V+cxEfKIIamWIyo9DPPF6r7 snu+FiU1eAZLOyHcsJUmjrol5sP1p72TT/3lyMUlpBMOJPNO8xRirmYmwy2v3TdJ wr7YbTxaQNJnEc7t6rFn72eWp2gx0VMqssrRtk9A0hYxtwXaXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx9ouJWOstyFIqi5itHJBziRi4sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTM2ZmE0YzMtMTk1Ny0z N2Y2LThlODUtMGMxNmUzMzc4M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARinjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXwb+Tf6F8efer8FwpWSojCSNBrnD2fJ+cg5uaK6ISU5TEE1pNimSYr nF6YaHDBpaDQuH2vwRaoQQCQY0eMzsIU0hkRZ/NW8Zlg2nIea8loci7VUB41Upzv FFSf/OvYNz3CjXAHpCX2sOLDohbfCPoIjlsBAXuDd/e94QskBwFpa8xoLowlwuhP OHhatVkAxtFoti7JzHSN51xi1+88EXFah7UCJylwl+66Y33T5Acpi82XWEfhvAXQ 8waslpz6gVLw/1zFlwsSarsjnAQJZbtIKHAAUImzbLWp3WFFhRPPL/Z5lriIjw7d hSD9Fqk3bKHWy5E9I0A2v1twgw8VFyQ= -----END CERTIFICATE-----Generated at Thu Sep 10 13:22:49 2026 by rpki-client