$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa File: d3681e21-b789-3e42-bd09-5ab209510e5d.roa (raw, json) Hash identifier: YoSSir7g34VU+PCvHzVPOCg6LgLZiiYzCQ2IQ8jqnfs= Subject key identifier: 56:56:23:7E:59:7D:22:9B:CF:25:F3:E1:FB:AF:BD:F4:23:0A:BE:E5 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584D55BCBAFAE02A9CF426263C00 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36283 IP address blocks: 72.27.244.0/22 maxlen: 22 72.27.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:ba:fa:e0:2a:9c:f4:26:26:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=b6e2e847-7a86-4e1a-a164-52e6892d2b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:3a:9b:33:b8:07:57:5e:ed:7d:5e:1e:db: df:83:57:ca:eb:6b:f4:30:88:ab:ea:be:08:81:59: ff:6c:5f:8a:95:d2:fa:7d:b2:f5:99:a8:dd:72:1a: 74:a9:f7:cc:0e:fb:b0:e0:92:65:62:5a:ad:c6:50: 7f:db:38:07:5b:fd:e9:26:78:50:db:b1:80:ba:ae: a5:34:bf:f2:10:fc:e0:1e:fd:c6:f3:3f:15:e6:52: f0:9d:79:74:29:1a:d6:49:d6:28:01:6d:b5:77:3e: 88:f5:3d:60:2e:51:b4:2f:e9:6e:6d:d6:7c:0c:ee: 1b:09:3f:0c:7e:74:5d:cf:18:0f:25:ab:7c:8e:1e: ce:27:be:94:00:b2:55:83:1c:74:37:94:00:74:06: 7a:da:a8:62:60:9a:79:ae:94:eb:f8:6a:9a:8d:7f: 64:96:7f:6e:fe:d4:be:ac:11:68:fe:39:b7:91:6d: ba:5c:b1:02:3d:76:98:12:aa:89:e8:97:81:9a:d2: 68:46:c5:03:f8:b8:45:f4:04:5d:15:26:3d:95:4e: 21:c7:ed:47:c5:4c:b1:37:b5:19:b2:26:5d:c5:59: a9:8d:ea:98:93:89:a9:16:85:e0:36:20:9e:fd:0f: 68:ad:02:a1:02:99:9d:8a:f6:7f:69:56:49:8d:1e: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:23:7E:59:7D:22:9B:CF:25:F3:E1:FB:AF:BD:F4:23:0A:BE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.27.244.0-72.27.249.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bf:e9:8e:2d:0f:b9:f6:3f:0f:cf:38:a4:14:eb:99:eb:ff: 07:2f:c7:3e:71:36:a9:1d:5a:ac:33:d6:c7:ba:c9:4b:bb:99: f2:c8:33:e9:08:43:1a:49:ad:b2:d0:e3:c9:5e:eb:78:27:5b: 64:ac:92:d2:e1:c8:c6:01:b5:41:15:55:da:a4:39:44:df:18: 61:b0:59:79:95:1c:e3:15:f6:6d:72:d1:05:d5:33:bc:45:9e: ab:12:ba:1d:51:ca:55:95:89:86:72:f8:b9:f4:95:87:ac:32: 69:6c:f9:25:d5:1c:b0:99:2b:23:0e:b1:ac:fa:87:20:0e:81: 96:4c:2c:93:41:e8:ce:d7:a1:64:36:04:db:f2:3e:9f:fb:83: 3a:bc:59:e7:ad:d1:2b:f7:3f:d1:84:51:81:20:34:83:b4:fe: 5c:d8:3c:e8:c2:2b:36:46:de:5f:e1:0e:1f:5a:16:d6:9c:08: de:9a:3a:69:01:c7:0c:08:20:77:47:6c:98:b7:00:e2:c5:61: d8:71:25:c6:d1:15:5b:57:0b:e0:b8:04:85:0c:6c:8f:66:a7: 90:e4:df:05:96:6f:d7:61:79:80:e0:59:76:cd:94:42:a5:fa: fe:03:5d:37:d1:11:9b:e1:a1:fe:80:24:07:e7:8b:9a:b8:94: fa:c6:3d:19 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1VvLr64Cqc9CYmPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YjZlMmU4NDctN2E4Ni00ZTFhLWExNjQtNTJlNjg5MmQyYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovc6mzO4B1de7X1eHtvfg1fK62v0MIir6r4I gVn/bF+KldL6fbL1majdchp0qffMDvuw4JJlYlqtxlB/2zgHW/3pJnhQ27GAuq6l NL/yEPzgHv3G8z8V5lLwnXl0KRrWSdYoAW21dz6I9T1gLlG0L+lubdZ8DO4bCT8M fnRdzxgPJat8jh7OJ76UALJVgxx0N5QAdAZ62qhiYJp5rpTr+GqajX9kln9u/tS+ rBFo/jm3kW26XLECPXaYEqqJ6JeBmtJoRsUD+LhF9ARdFSY9lU4hx+1HxUyxN7UZ siZdxVmpjeqYk4mpFoXgNiCe/Q9orQKhApmdivZ/aVZJjR5zaQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFZWI35ZfSKbzyXz4fuvvfQjCr7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZDM2ODFlMjEtYjc4OS0z ZTQyLWJkMDktNWFiMjA5NTEwZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJIG/QD BAFIG/gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAIL/pji0PufY/D884pBTrmev/By/HPnE2qR1arDPWx7rJ S7uZ8sgz6QhDGkmtstDjyV7reCdbZKyS0uHIxgG1QRVV2qQ5RN8YYbBZeZUc4xX2 bXLRBdUzvEWeqxK6HVHKVZWJhnL4ufSVh6wyaWz5JdUcsJkrIw6xrPqHIA6Blkws k0HoztehZDYE2/I+n/uDOrxZ563RK/c/0YRRgSA0g7T+XNg86MIrNkbeX+EOH1oW 1pwI3po6aQHHDAggd0dsmLcA4sVh2HElxtEVW1cL4LgEhQxsj2ankOTfBZZv12F5 gOBZds2UQqX6/gNdN9ERm+Gh/oAkB+eLmriU+sY9GQ== -----END CERTIFICATE-----Generated at Fri Apr 10 00:51:24 2026 by rpki-client