$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa File: 7c424fa9-46f5-3187-adf7-7a212a02a771.roa (raw, json) Hash identifier: GznFS+JnV+XXUOEJmr1SHhm4USuw1dwR+iuwIY4VmL4= Subject key identifier: 38:70:78:EF:C7:4B:60:BC:D3:0D:AB:8E:A7:6E:04:18:81:9C:B4:7F Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584F5CFD599BAE7F618337F99100 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa Signing time: Fri 02 Oct 2026 01:00:12 +0000 ROA not before: Fri 02 Oct 2026 01:00:12 +0000 ROA not after: Thu 31 Dec 2026 02:00:12 +0000 asID: 40933 IP address blocks: 70.33.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:fd:59:9b:ae:7f:61:83:37:f9:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Oct 2 01:00:12 2026 GMT Not After : Dec 31 02:00:12 2026 GMT Subject: CN=b359f5f3-a04e-4283-a363-05090bd9fdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:61:22:d4:21:ea:47:1a:76:fd:3a:75:85:a0: a1:33:57:fd:03:ab:f9:30:e6:c4:23:41:bc:08:d2: 49:93:23:06:5e:f3:7e:54:38:a5:2b:9a:99:58:93: 67:bd:b2:74:c2:23:b4:7f:67:91:00:6b:c6:60:86: c6:73:8a:9a:80:cf:3d:2f:a4:b5:e2:26:33:2d:05: 4d:e0:49:32:d2:df:f7:6c:11:7d:3e:82:00:34:6a: e7:25:10:d9:b3:27:02:17:62:9a:47:eb:c7:5e:17: 75:36:39:9c:26:95:e7:1e:a6:a6:ab:df:fe:3b:c6: 37:6d:95:1e:77:7d:f0:6f:26:86:1b:0f:0b:06:54: 0d:c4:28:ea:b9:f8:04:12:b0:c7:43:1f:9a:39:f1: e0:a3:3d:7f:6d:8a:a2:9b:af:2d:48:b7:60:4a:a8: 2a:4f:ab:a5:02:be:5e:b7:9d:e6:69:b5:51:20:9f: b6:fc:46:65:5e:33:12:c9:cc:87:8a:6d:0f:53:43: 14:c3:fc:ab:de:35:f5:ed:3d:99:2c:72:b6:be:92: 62:d4:b7:66:c4:d5:d3:02:67:49:ba:0d:3c:80:cd: 54:20:25:23:ed:ec:c7:ce:57:58:c8:cc:b8:f7:61: 0c:ef:d4:69:b1:22:0c:d4:a7:66:91:cf:ad:85:73: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:78:EF:C7:4B:60:BC:D3:0D:AB:8E:A7:6E:04:18:81:9C:B4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 70.33.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:d6:99:4f:09:5d:34:22:be:62:fa:55:fe:30:28:00:48:a1: 59:77:a3:c6:77:88:3e:45:13:a3:07:24:5e:f4:d6:6d:fd:41: 0d:76:5a:72:41:cc:20:ac:e5:ff:29:9b:84:cb:c3:2b:18:8d: 6c:ca:c9:4c:4f:7d:e3:60:5a:eb:ba:9a:ed:d4:03:6d:fd:21: 35:02:3c:ba:58:86:de:d6:0d:7f:24:4d:b4:eb:6e:09:f9:e7: c6:04:53:74:90:64:f6:45:38:29:48:7f:97:11:84:39:3c:0e: 05:6c:27:fa:ac:7c:a3:6c:53:9b:1d:07:98:ed:c3:c7:39:a5: 63:18:4e:81:14:33:3b:b2:9a:52:6d:a1:78:11:7a:9e:1f:67: 56:8c:ab:5c:c5:7e:0e:cf:84:6a:5d:68:92:b2:77:23:26:e8: ee:79:65:aa:bb:a2:b4:0b:cd:9a:5c:b7:a3:cc:be:f2:dd:13: e5:e3:c5:68:b2:79:c2:44:1b:b9:1e:64:82:ac:e5:bd:4a:33: cf:55:53:2f:6c:6f:8d:3e:77:b8:18:89:3c:0b:95:3c:dc:de: 7a:c9:53:47:34:b6:00:d0:7e:db:49:2e:63:0b:55:9b:d7:12: fa:42:02:7a:03:84:cd:14:94:34:c9:09:ef:82:56:68:52:6f: be:8f:05:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9c/Vmbrn9hgzf5kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MTAwMjAxMDAxMloXDTI2MTIzMTAyMDAxMlowLzEtMCsGA1UEAxMk YjM1OWY1ZjMtYTA0ZS00MjgzLWEzNjMtMDUwOTBiZDlmZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Ei1CHqRxp2/Tp1haChM1f9A6v5MObEI0G8 CNJJkyMGXvN+VDilK5qZWJNnvbJ0wiO0f2eRAGvGYIbGc4qagM89L6S14iYzLQVN 4Eky0t/3bBF9PoIANGrnJRDZsycCF2KaR+vHXhd1NjmcJpXnHqamq9/+O8Y3bZUe d33wbyaGGw8LBlQNxCjqufgEErDHQx+aOfHgoz1/bYqim68tSLdgSqgqT6ulAr5e t53mabVRIJ+2/EZlXjMSycyHim0PU0MUw/yr3jX17T2ZLHK2vpJi1LdmxNXTAmdJ ug08gM1UICUj7ezHzldYyMy492EM79RpsSIM1Kdmkc+thXOnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhweO/HS2C80w2rjqduBBiBnLR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvN2M0MjRmYTktNDZmNS0z MTg3LWFkZjctN2EyMTJhMDJhNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnWmU8JXTQivmL6Vf4wKABIoVl3o8Z3iD5FE6MHJF701m39QQ12WnJB zCCs5f8pm4TLwysYjWzKyUxPfeNgWuu6mu3UA239ITUCPLpYht7WDX8kTbTrbgn5 58YEU3SQZPZFOClIf5cRhDk8DgVsJ/qsfKNsU5sdB5jtw8c5pWMYToEUMzuymlJt oXgRep4fZ1aMq1zFfg7PhGpdaJKydyMm6O55Zaq7orQLzZpct6PMvvLdE+XjxWiy ecJEG7keZIKs5b1KM89VUy9sb40+d7gYiTwLlTzc3nrJU0c0tgDQfttJLmMLVZvX EvpCAnoDhM0UlDTJCe+CVmhSb76PBdg= -----END CERTIFICATE-----Generated at Sun Oct 11 20:13:41 2026 by rpki-client