$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa File: d3681e21-b789-3e42-bd09-5ab209510e5d.roa (raw, json) Hash identifier: qoPKYX7eSrMWQzIAk5rR8tzKXSo9p1NPAluS9R3373U= Subject key identifier: 11:4C:7C:58:BC:09:5E:E4:72:75:1E:BC:24:15:07:0D:04:3A:47:ED Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584E35FF14FE46E6DC4B07E3C840 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 36283 IP address blocks: 72.27.244.0/22 maxlen: 22 72.27.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:14:fe:46:e6:dc:4b:07:e3:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=652738ba-bfaf-4478-b72f-323ec9d68587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:70:d3:09:96:a5:02:5d:04:c1:36:21:82: 77:71:f0:ee:76:85:e1:3e:b6:6f:4a:8b:e1:90:03: 42:49:e4:fd:25:bd:a5:7c:67:59:ae:7f:9a:50:3e: 16:74:66:1f:6a:05:40:89:5a:75:c3:f7:c4:e9:0f: df:06:8e:5b:c7:86:cb:36:d2:05:3c:45:5d:03:13: 0f:56:5b:68:2b:03:ad:10:0f:98:f2:27:58:1f:4a: a4:28:43:45:64:7c:3b:1e:c9:2f:df:a1:f5:b2:d6: 77:0c:52:b2:f0:a9:db:ce:80:3d:73:bf:91:35:19: 09:ee:e6:48:1f:36:f3:11:97:58:f3:af:42:fd:b9: b4:36:11:de:71:bd:1b:a0:0b:a2:cc:9b:f8:6c:35: 8b:c1:52:63:ec:f8:2a:5a:b4:4d:5f:38:da:3f:2c: 68:a5:1c:68:03:4e:c2:6c:2c:10:74:4a:f3:05:18: 04:00:bd:cc:69:0d:98:21:dc:5f:d9:cc:61:4e:02: c3:c7:11:89:45:9a:51:20:e3:9c:d0:87:a1:52:43: 43:c2:0b:46:13:b5:d6:dc:d1:fb:74:a5:3a:6a:50: 30:8c:78:54:1c:62:7c:97:81:68:df:4b:d7:d6:13: 60:68:da:25:3f:4a:aa:9f:c5:0c:f9:e1:fb:e0:da: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:7C:58:BC:09:5E:E4:72:75:1E:BC:24:15:07:0D:04:3A:47:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.27.244.0-72.27.249.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:43:aa:d1:6f:f4:c7:56:1e:22:f2:f0:84:2b:c3:90:7b:c7: f0:1b:80:59:22:2f:09:47:e6:8f:4c:29:19:a7:74:b6:08:45: 98:6b:54:98:ab:ac:bb:ee:40:06:ae:a7:3f:c0:c6:e5:bb:15: 80:62:42:45:56:2b:bc:c7:e9:89:36:59:d4:0d:75:33:35:7e: 58:bf:88:21:4b:59:16:b4:9a:36:f2:06:91:0d:03:31:4b:bf: 2c:76:5a:15:db:ee:4b:85:c8:6d:52:7e:c1:8b:50:41:e5:10: 8c:b2:03:f1:ca:5c:fe:db:e3:5c:42:20:f6:7f:17:3a:db:ba: 6e:87:9d:74:a1:65:63:3c:c0:c5:d7:ec:b7:36:ca:84:0a:63: 8d:cb:40:3f:6e:b2:66:5f:10:ee:a3:3c:72:af:4e:8e:b8:b4: 30:02:23:f7:0c:08:a2:5c:6c:35:08:3d:d7:01:28:af:f5:7e: 43:75:73:e0:70:57:a8:69:c4:16:df:16:c4:94:5b:8c:ff:c5: cd:2f:6d:aa:69:66:a2:ef:ac:05:dc:e0:32:3f:cf:3f:29:70: d5:56:d7:36:d8:fa:3c:99:a9:e5:69:ca:07:90:e1:a3:42:ab: 29:aa:90:c3:a3:e4:07:af:d7:fb:70:47:24:af:07:e3:58:f8: 60:22:b6:99 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE41/xT+RubcSwfjyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk NjUyNzM4YmEtYmZhZi00NDc4LWI3MmYtMzIzZWM5ZDY4NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDVw0wmWpQJdBME2IYJ3cfDudoXhPrZvSovh kANCSeT9Jb2lfGdZrn+aUD4WdGYfagVAiVp1w/fE6Q/fBo5bx4bLNtIFPEVdAxMP VltoKwOtEA+Y8idYH0qkKENFZHw7Hskv36H1stZ3DFKy8KnbzoA9c7+RNRkJ7uZI HzbzEZdY869C/bm0NhHecb0boAuizJv4bDWLwVJj7PgqWrRNXzjaPyxopRxoA07C bCwQdErzBRgEAL3MaQ2YIdxf2cxhTgLDxxGJRZpRIOOc0IehUkNDwgtGE7XW3NH7 dKU6alAwjHhUHGJ8l4Fo30vX1hNgaNolP0qqn8UM+eH74NphqwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBFMfFi8CV7kcnUevCQVBw0EOkftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZDM2ODFlMjEtYjc4OS0z ZTQyLWJkMDktNWFiMjA5NTEwZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJIG/QD BAFIG/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAQUOq0W/0x1YeIvLwhCvDkHvH8BuAWSIvCUfmj0wpGad0 tghFmGtUmKusu+5ABq6nP8DG5bsVgGJCRVYrvMfpiTZZ1A11MzV+WL+IIUtZFrSa NvIGkQ0DMUu/LHZaFdvuS4XIbVJ+wYtQQeUQjLID8cpc/tvjXEIg9n8XOtu6boed dKFlYzzAxdfstzbKhApjjctAP26yZl8Q7qM8cq9Ojri0MAIj9wwIolxsNQg91wEo r/V+Q3Vz4HBXqGnEFt8WxJRbjP/FzS9tqmlmou+sBdzgMj/PPylw1VbXNtj6PJmp 5WnKB5Dho0KrKaqQw6PkB6/X+3BHJK8H41j4YCK2mQ== -----END CERTIFICATE-----Generated at Thu Jul 9 12:18:28 2026 by rpki-client