$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d51c4743-4074-3a89-8a66-a47552391df6.roa File: d51c4743-4074-3a89-8a66-a47552391df6.roa (raw, json) Hash identifier: 2M+zOVJHP8t2aTbkaKR/1Q5F0qRiN2y+HlpLHl/q4UI= Subject key identifier: 65:F5:B3:3D:20:4F:00:AE:8B:30:25:A7:48:DA:2F:A7:85:14:E3:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584D24DFB095017F50C52CE2E500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d51c4743-4074-3a89-8a66-a47552391df6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 7155 IP address blocks: 70.41.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:b0:95:01:7f:50:c5:2c:e2:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b7a3d2e6-bef6-46f9-a907-46bfb0e7a0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:50:9c:0d:39:d5:ca:f2:08:e7:2e:a1:b9: 45:3b:83:15:a1:84:ad:5c:8e:e1:6d:23:2f:61:6d: 7f:db:65:fa:43:b8:e5:d3:03:83:6c:41:d1:2c:f1: f0:18:42:30:b5:f6:4c:82:f1:84:a6:fe:47:c9:b0: dd:97:95:a2:c2:7d:4c:c6:d2:e8:4c:97:93:14:37: 63:6c:e9:51:10:94:ec:8e:45:b3:d3:e0:21:3b:3d: 07:08:ec:76:63:1b:f0:43:a1:05:40:99:5d:17:aa: 82:8e:e7:0c:a4:04:19:58:be:57:8d:b3:8e:41:43: c2:a0:95:3b:f0:95:c5:10:15:ae:3c:6e:4b:3d:4a: e2:25:e4:c8:c0:1c:65:50:3c:48:da:63:b2:96:0a: 4a:9e:9c:93:a0:84:d6:5f:b4:6b:be:20:cc:53:77: bc:47:59:1a:2b:07:d5:b6:a7:b3:37:e9:4c:04:88: 35:8c:43:aa:90:1e:c6:62:ce:22:de:ba:8d:d6:ec: d0:b7:2b:9c:9d:9e:ef:dc:b5:30:10:83:ae:7f:59: 7c:c1:72:48:77:be:d7:08:f2:5d:a1:7b:5b:5c:38: e5:f2:07:e2:5f:17:34:ef:bb:0d:a6:07:41:6b:07: 69:8a:a5:47:3c:d0:0c:5b:b7:c0:01:e0:cc:00:c6: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F5:B3:3D:20:4F:00:AE:8B:30:25:A7:48:DA:2F:A7:85:14:E3:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d51c4743-4074-3a89-8a66-a47552391df6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 70.41.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e6:0f:8e:ea:f1:82:e4:e3:d0:51:08:41:30:57:5c:f4:44: 8d:63:fb:65:9f:18:51:0e:2c:d2:ec:66:8c:74:c5:f7:e4:fa: 0b:6b:e4:56:3a:d7:cf:87:dd:02:91:46:0f:59:4e:f3:33:c3: 43:0a:12:95:3b:d5:c2:9f:45:5b:2b:dc:ad:a8:1c:53:82:36: 84:69:56:2e:50:cb:95:76:de:9a:3a:42:4a:7d:f3:af:38:e7: b6:08:48:b2:c2:ab:2e:bf:65:f0:a1:e3:a1:aa:6e:45:25:1e: 24:c9:65:fb:17:88:a6:cf:f1:5f:60:15:75:db:16:f7:39:15: e0:d9:48:9e:9b:7f:3e:97:bb:81:b2:37:5b:3b:57:dc:1a:69: 14:b5:ae:4f:bc:ec:fc:f0:c3:06:0e:d9:8d:84:91:d4:c7:69: c5:e0:ea:34:f1:fc:cc:ba:56:3d:7d:50:a6:00:30:86:bc:57: 4f:82:da:33:53:59:a2:a5:18:a2:f9:c3:26:a7:d0:1e:1a:46: b4:54:12:09:3c:e4:b8:15:3b:16:85:dd:a8:36:cf:24:71:3b: ba:43:46:35:bd:aa:a2:d3:56:1b:11:45:9b:ae:4f:ad:1b:5f: d8:8d:17:36:7a:b0:45:7d:2e:81:13:7b:e0:a6:eb:f2:8a:da: 9b:9d:42:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k37CVAX9QxSzi5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjdhM2QyZTYtYmVmNi00NmY5LWE5MDctNDZiZmIwZTdhMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0JQnA051cryCOcuoblFO4MVoYStXI7hbSMv YW1/22X6Q7jl0wODbEHRLPHwGEIwtfZMgvGEpv5HybDdl5Wiwn1MxtLoTJeTFDdj bOlREJTsjkWz0+AhOz0HCOx2YxvwQ6EFQJldF6qCjucMpAQZWL5XjbOOQUPCoJU7 8JXFEBWuPG5LPUriJeTIwBxlUDxI2mOylgpKnpyToITWX7RrviDMU3e8R1kaKwfV tqezN+lMBIg1jEOqkB7GYs4i3rqN1uzQtyucnZ7v3LUwEIOuf1l8wXJId77XCPJd oXtbXDjl8gfiXxc077sNpgdBawdpiqVHPNAMW7fAAeDMAMYD/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX1sz0gTwCuizAlp0jaL6eFFOPwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUxYzQ3NDMtNDA3NC0z YTg5LThhNjYtYTQ3NTUyMzkxZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARilHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrmD47q8YLk49BRCEEwV1z0RI1j+2WfGFEOLNLsZox0xffk+gtr5FY6 18+H3QKRRg9ZTvMzw0MKEpU71cKfRVsr3K2oHFOCNoRpVi5Qy5V23po6Qkp98684 57YISLLCqy6/ZfCh46GqbkUlHiTJZfsXiKbP8V9gFXXbFvc5FeDZSJ6bfz6Xu4Gy N1s7V9waaRS1rk+87PzwwwYO2Y2EkdTHacXg6jTx/My6Vj19UKYAMIa8V0+C2jNT WaKlGKL5wyan0B4aRrRUEgk85LgVOxaF3ag2zyRxO7pDRjW9qqLTVhsRRZuuT60b X9iNFzZ6sEV9LoETe+Cm6/KK2pudQjY= -----END CERTIFICATE-----Generated at Fri Mar 13 05:51:56 2026 by rpki-client