$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa File: aa9276be-9f8a-381e-a002-c6984ebc8321.roa (raw, json) Hash identifier: 3FG8E3K1sd717cUnuygwBOk2A7/e2lCkNgx5+DvSf1Q= Subject key identifier: C9:6C:EB:FF:D0:A7:72:1A:09:CA:3C:0C:13:DE:B3:9D:14:FC:BF:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D72BF46BEAE30A7B40330 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 70.41.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:72:bf:46:be:ae:30:a7:b4:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7063a7bc-d6d2-40bc-a8ac-c45802e4e194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5e:99:c1:75:71:0c:68:70:11:00:90:92:a7: 33:6c:13:58:c1:60:cc:bb:d2:44:50:24:92:19:00: 46:d0:5a:be:eb:38:76:df:14:9f:e3:8a:1d:57:9c: 2e:95:32:d5:bc:09:c3:52:89:bc:ac:a8:54:f4:7b: 15:54:8f:d1:c2:bc:23:53:ac:e6:c6:ee:d6:3a:7f: 0e:fa:af:ae:71:a9:7b:bb:38:1f:07:a3:4a:e0:01: 1d:32:82:6e:d7:50:3d:22:85:15:6e:33:6f:bc:82: 28:22:09:bf:1c:51:00:83:46:28:7a:0d:6c:97:59: 5f:14:70:87:87:0e:2a:ad:d4:a0:2e:20:62:8a:30: f6:d4:79:93:3f:21:12:f4:fe:78:55:17:5f:df:0d: c4:c5:ab:95:48:d7:e2:00:ed:7e:8a:60:9b:66:6d: 78:bd:b9:0b:f9:49:22:19:32:8b:b9:18:5c:2b:fc: 1e:bc:1c:6e:57:14:4e:cf:67:1b:9d:5e:7d:63:4a: c6:ca:74:65:ea:83:83:ce:e9:62:79:38:19:cc:16: fa:29:69:0c:0b:17:fc:36:11:6f:bf:b6:bf:f3:b7: ef:89:84:3e:88:b8:8b:c1:e5:3c:9d:20:60:a3:9a: 33:16:61:65:99:cc:29:a9:10:06:ff:c0:14:b2:de: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6C:EB:FF:D0:A7:72:1A:09:CA:3C:0C:13:DE:B3:9D:14:FC:BF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa9276be-9f8a-381e-a002-c6984ebc8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:f5:6f:44:ff:f1:c9:94:6d:c6:69:32:86:0a:c3:8f:ac:94: 5c:cd:28:ca:20:14:af:a0:b1:25:78:b6:8d:50:6b:8b:3e:b0: 38:82:01:5f:18:89:17:a6:92:02:d0:e2:b7:7d:0f:14:d4:a9: ee:5b:e8:c1:c5:5b:0d:52:e6:aa:64:72:e3:a3:b8:85:98:d6: 17:00:18:33:9c:a3:04:bd:49:0d:9e:10:91:76:7b:d5:3a:b9: d5:0b:c9:23:9b:bf:c7:2f:1c:15:b3:68:75:40:cd:65:9b:68: 8a:55:d6:c0:08:42:55:89:0d:49:44:ab:b6:f6:6e:e5:f0:9a: b5:48:e5:fc:0c:c1:b5:db:f1:bd:b7:13:94:f9:1e:d4:10:98: cb:51:18:95:23:47:af:e4:11:db:3a:10:20:4d:e4:32:64:b7: 59:f9:b6:33:e9:fa:ad:67:b7:d2:de:28:45:42:57:19:98:1a: d0:10:99:2f:cc:f8:77:b1:07:bc:13:07:29:9a:f0:73:31:82: 9a:53:20:24:a0:be:1e:78:b8:53:b9:c8:5e:d2:22:48:3d:41: 3b:69:aa:2e:41:eb:ac:5e:fb:d7:bd:6f:bf:8a:ed:c0:cb:82: 3b:3a:e4:f5:01:83:5d:43:6c:cb:68:3c:28:ae:62:02:bb:5e: 9d:c2:79:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnXK/Rr6uMKe0AzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzA2M2E3YmMtZDZkMi00MGJjLWE4YWMtYzQ1ODAyZTRlMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo16ZwXVxDGhwEQCQkqczbBNYwWDMu9JEUCSS GQBG0Fq+6zh23xSf44odV5wulTLVvAnDUom8rKhU9HsVVI/RwrwjU6zmxu7WOn8O +q+ucal7uzgfB6NK4AEdMoJu11A9IoUVbjNvvIIoIgm/HFEAg0Yoeg1sl1lfFHCH hw4qrdSgLiBiijD21HmTPyES9P54VRdf3w3ExauVSNfiAO1+imCbZm14vbkL+Uki GTKLuRhcK/wevBxuVxROz2cbnV59Y0rGynRl6oODzulieTgZzBb6KWkMCxf8NhFv v7a/87fviYQ+iLiLweU8nSBgo5ozFmFlmcwpqRAG/8AUst4SPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMls6//Qp3IaCco8DBPes50U/L8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5Mjc2YmUtOWY4YS0z ODFlLWEwMDItYzY5ODRlYmM4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARikOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANT1b0T/8cmUbcZpMoYKw4+slFzNKMogFK+gsSV4to1Qa4s+sDiCAV8Y iRemkgLQ4rd9DxTUqe5b6MHFWw1S5qpkcuOjuIWY1hcAGDOcowS9SQ2eEJF2e9U6 udULySObv8cvHBWzaHVAzWWbaIpV1sAIQlWJDUlEq7b2buXwmrVI5fwMwbXb8b23 E5T5HtQQmMtRGJUjR6/kEds6ECBN5DJkt1n5tjPp+q1nt9LeKEVCVxmYGtAQmS/M +HexB7wTByma8HMxgppTICSgvh54uFO5yF7SIkg9QTtpqi5B66xe+9e9b7+K7cDL gjs65PUBg11DbMtoPCiuYgK7Xp3Ceac= -----END CERTIFICATE-----Generated at Thu Sep 10 09:40:22 2026 by rpki-client