$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa File: da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json) Hash identifier: mLrcWKcFrACSXgkskBbIpYFiKIzzffmPAsPGinrqAAI= Subject key identifier: 0C:30:4E:8C:44:FF:A8:13:97:55:37:9D:C4:36:DE:42:1B:47:04:2B Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584F5E62C2BC69149E31C9A06540 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 27446 IP address blocks: 72.250.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c2:bc:69:14:9e:31:c9:a0:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=4d462814-4b3e-489b-83be-1cb5bbe9753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:6c:04:98:69:44:c1:7a:eb:bc:a0:4e:d1: 12:60:92:26:b5:4c:ba:43:17:43:b4:f1:a2:1b:63: f1:b7:69:73:7d:13:f2:2a:32:76:af:76:76:b3:92: 12:e1:db:94:01:a0:e9:5f:6c:94:99:6e:1a:fc:a4: c3:e5:fa:80:13:71:2f:4e:b6:5a:32:2c:9f:30:56: 28:a1:b0:53:79:03:0f:1d:79:64:55:1e:1b:7a:5d: e6:ec:02:98:3c:b1:cf:e2:fe:27:fa:1c:e1:37:a4: f3:e2:51:c1:0c:d3:a9:3d:b3:69:58:d4:5f:2a:9a: 2b:ec:32:0c:ae:71:b5:4d:61:04:b0:63:f9:d6:c5: f6:2b:f1:31:06:f4:b9:f3:7e:27:df:59:15:85:c9: 70:5b:03:e2:a7:29:22:9e:55:d2:d6:e7:1e:29:26: a1:82:2d:16:f8:84:31:8a:fc:0c:8b:f7:4e:a7:5e: d9:71:1f:08:25:2d:97:a6:aa:d5:45:cc:02:7d:53: ac:e7:08:74:4c:b2:22:1b:dd:09:7f:ae:8a:f4:42: 14:fd:ff:9d:e3:cf:21:f3:75:e8:13:7f:48:6e:b4: 82:45:70:ce:4e:1c:0e:33:c4:c4:92:c9:fa:98:56: 2e:58:f1:44:10:40:4e:d7:ad:4c:33:6b:98:02:6a: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:4E:8C:44:FF:A8:13:97:55:37:9D:C4:36:DE:42:1B:47:04:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:84:86:79:a9:b7:c7:b4:ad:ed:97:14:ef:ad:c5:70:8b:92: 0e:b6:31:bc:97:f9:67:61:6c:00:a0:4f:02:6c:fd:92:02:e4: 89:52:9f:96:f6:e8:3c:94:0b:48:2f:8d:33:f2:e7:76:85:f7: db:6a:6f:55:75:02:e7:a7:78:06:e7:9e:dc:2c:34:37:12:c3: 2c:43:00:22:40:7e:ff:1f:a0:df:05:39:6d:39:1c:b9:28:f8: 7c:a5:cf:9c:1d:cf:3b:fc:6c:97:41:04:b5:cc:02:61:65:63: 41:f0:75:c6:99:87:dc:1f:57:21:f7:1e:d5:4e:62:e6:c1:b2: 76:31:bb:38:5a:8e:82:ba:56:3a:ab:d0:de:95:c4:91:d7:6e: 0b:09:52:49:5d:43:a7:92:0e:92:a5:1c:6d:f2:3f:99:cf:e6: 0e:ce:c5:fa:00:2e:44:cd:f7:e7:35:1c:e6:f9:20:72:7e:bc: 09:03:fd:cb:8e:a4:87:83:94:0a:3a:7f:d8:d4:0a:1a:1f:3c: b6:6b:e4:7a:88:6a:de:2d:51:e3:9b:8e:3b:e2:e6:04:b2:9c: cf:4b:68:be:e2:bf:40:cd:38:9d:f7:fd:31:4d:6f:14:69:9e: fd:0b:f2:9f:0a:05:6c:af:e0:0a:03:e4:81:ac:cc:95:4e:b6: 78:d8:69:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsK8aRSeMcmgZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NGQ0NjI4MTQtNGIzZS00ODliLTgzYmUtMWNiNWJiZTk3NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaxsBJhpRMF667ygTtESYJImtUy6QxdDtPGi G2Pxt2lzfRPyKjJ2r3Z2s5IS4duUAaDpX2yUmW4a/KTD5fqAE3EvTrZaMiyfMFYo obBTeQMPHXlkVR4bel3m7AKYPLHP4v4n+hzhN6Tz4lHBDNOpPbNpWNRfKpor7DIM rnG1TWEEsGP51sX2K/ExBvS5834n31kVhclwWwPipykinlXS1uceKSahgi0W+IQx ivwMi/dOp17ZcR8IJS2XpqrVRcwCfVOs5wh0TLIiG90Jf66K9EIU/f+d488h83Xo E39IbrSCRXDOThwOM8TEksn6mFYuWPFEEEBO161MM2uYAmoS9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwwToxE/6gTl1U3ncQ23kIbRwQrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Ehnmpt8e0re2XFO+txXCLkg62MbyX+WdhbACgTwJs/ZIC5IlSn5b2 6DyUC0gvjTPy53aF99tqb1V1AueneAbnntwsNDcSwyxDACJAfv8foN8FOW05HLko +Hylz5wdzzv8bJdBBLXMAmFlY0HwdcaZh9wfVyH3HtVOYubBsnYxuzhajoK6Vjqr 0N6VxJHXbgsJUkldQ6eSDpKlHG3yP5nP5g7OxfoALkTN9+c1HOb5IHJ+vAkD/cuO pIeDlAo6f9jUChofPLZr5HqIat4tUeObjjvi5gSynM9LaL7iv0DNOJ33/TFNbxRp nv0L8p8KBWyv4AoD5IGszJVOtnjYaTU= -----END CERTIFICATE-----Generated at Mon Oct 12 12:25:23 2026 by rpki-client