$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa File: d3681e21-b789-3e42-bd09-5ab209510e5d.roa (raw, json) Hash identifier: 9mItZ3AKI5Jfwo1Mj2dEnnrhh9b2jBDTG1QxKvvB6c4= Subject key identifier: 42:29:8C:11:20:59:E8:CC:85:BC:32:0E:72:64:54:EC:CF:30:E3:A1 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584ED861E03D9D35563A84049700 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 36283 IP address blocks: 72.27.244.0/22 maxlen: 22 72.27.248.0/23 maxlen: 24 72.250.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e0:3d:9d:35:56:3a:84:04:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=f148e7f5-0e33-4d2a-adb3-9539efc685b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:d5:41:a1:ce:de:49:ac:7a:43:3e:52:1a: 9c:7c:30:38:b1:91:87:4a:ca:9b:ec:c1:69:92:46: 62:69:ff:d1:ce:ce:74:09:37:58:17:34:53:3c:6b: 32:5a:a8:e5:de:95:37:e4:c1:80:4d:a5:93:89:97: df:91:11:19:db:f0:ef:89:1a:c2:44:cb:f4:f1:95: f4:a3:d7:0c:0a:9a:8e:bf:49:7e:7c:a3:4f:1a:34: 42:1d:ec:29:f4:ce:92:3a:0e:b0:89:57:33:87:3f: 04:1c:1a:f5:c3:e4:34:4c:3e:d2:28:68:1d:21:fe: b9:8b:09:d6:89:43:d8:0e:75:0b:d9:6a:39:da:ab: 50:a2:0d:23:b2:f9:dd:63:4d:2a:c4:f4:1b:30:c0: f3:2e:6b:65:c6:6b:c7:8e:0d:7c:6b:54:71:bc:a6: e7:ae:31:b2:fb:d1:e7:5b:2d:d8:c9:5a:99:f6:66: 4d:e6:d0:14:e9:c7:80:59:eb:0c:e1:4a:34:8d:67: e7:86:45:59:5b:21:98:45:f2:bf:b2:61:df:d3:66: 4d:82:5d:27:66:8f:c7:03:33:46:9b:82:7d:d6:13: e0:4d:da:c1:9c:38:ae:cc:a2:d7:25:dc:a6:2a:ed: db:ae:81:37:31:da:0c:fa:3e:20:51:a3:ca:89:23: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:29:8C:11:20:59:E8:CC:85:BC:32:0E:72:64:54:EC:CF:30:E3:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.27.244.0-72.27.249.255 72.250.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:81:03:31:80:2c:8f:da:cd:e4:27:58:f3:56:f1:be:6c:b8: b3:12:b8:bf:b1:74:6b:1e:77:32:d5:c9:f1:4c:cf:30:04:a5: 04:ce:f6:5a:ea:e5:62:84:6a:66:f7:5d:48:14:40:a3:c2:a5: 63:5d:ec:0c:ba:2f:13:e6:cb:37:22:90:e1:fa:22:29:2c:76: 7e:77:b7:40:a7:1d:f5:54:39:3d:7e:7c:75:ff:73:87:aa:bd: 6c:d5:0b:b6:4e:46:80:a3:9e:68:08:1f:9d:51:8e:b4:68:02: 15:55:09:70:42:12:e8:30:45:4f:5a:93:29:85:ce:97:1f:89: d9:d3:87:4f:95:24:45:97:da:95:50:34:05:ee:8d:fb:33:30: 6a:99:b5:05:2d:0a:a5:c7:f9:19:1f:6d:f2:08:81:70:80:64: 40:84:39:7d:d5:71:e4:d9:41:9a:73:12:48:e0:78:ad:43:c8: fe:19:69:b1:55:c2:ce:16:b4:e1:76:d9:79:85:f1:d0:80:71: f7:ec:dc:c3:2f:8c:29:0a:d2:c0:aa:59:f7:23:11:c8:a9:c9: e1:77:d3:b1:b1:25:a9:ea:a2:5b:6c:72:f7:9a:16:44:56:b9: fd:80:70:d5:b9:32:65:ab:3b:b8:06:90:60:ab:f6:72:7c:2a: 6f:a5:98:94 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE7YYeA9nTVWOoQElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZjE0OGU3ZjUtMGUzMy00ZDJhLWFkYjMtOTUzOWVmYzY4NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheDVQaHO3kmsekM+UhqcfDA4sZGHSsqb7MFp kkZiaf/Rzs50CTdYFzRTPGsyWqjl3pU35MGATaWTiZffkREZ2/DviRrCRMv08ZX0 o9cMCpqOv0l+fKNPGjRCHewp9M6SOg6wiVczhz8EHBr1w+Q0TD7SKGgdIf65iwnW iUPYDnUL2Wo52qtQog0jsvndY00qxPQbMMDzLmtlxmvHjg18a1RxvKbnrjGy+9Hn Wy3YyVqZ9mZN5tAU6ceAWesM4Uo0jWfnhkVZWyGYRfK/smHf02ZNgl0nZo/HAzNG m4J91hPgTdrBnDiuzKLXJdymKu3broE3MdoM+j4gUaPKiSNs3wIDAQABo4IDYzCC A18wHQYDVR0OBBYEFEIpjBEgWejMhbwyDnJkVOzPMOOhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZDM2ODFlMjEtYjc4OS0z ZTQyLWJkMDktNWFiMjA5NTEwZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJIG/QD BAFIG/gDBABI+v8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAR4EDMYAsj9rN5CdY81bxvmy4sxK4v7F0ax53 MtXJ8UzPMASlBM72WurlYoRqZvddSBRAo8KlY13sDLovE+bLNyKQ4foiKSx2fne3 QKcd9VQ5PX58df9zh6q9bNULtk5GgKOeaAgfnVGOtGgCFVUJcEIS6DBFT1qTKYXO lx+J2dOHT5UkRZfalVA0Be6N+zMwapm1BS0Kpcf5GR9t8giBcIBkQIQ5fdVx5NlB mnMSSOB4rUPI/hlpsVXCzha04XbZeYXx0IBx9+zcwy+MKQrSwKpZ9yMRyKnJ4XfT sbElqeqiW2xy95oWRFa5/YBw1bkyZas7uAaQYKv2cnwqb6WYlA== -----END CERTIFICATE-----Generated at Mon Aug 24 13:23:20 2026 by rpki-client