$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: v0aiQA1VTHzv/KxkmeHRMfdWCAGYRe4lZkMCz7LjCAs= Subject key identifier: 87:F9:FE:19:FB:34:EA:BA:97:64:28:6E:56:02:2D:41:99:F2:C0:76 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584E5619F08DBD77A0A0892E4900 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f0:8d:bd:77:a0:a0:89:2e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=53f40ebf-008a-4198-84e6-a2a2e47e16f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9c:55:ae:47:35:7d:7a:b3:30:f6:5c:fe:bb: e5:a7:45:d7:e4:8a:0f:ac:fb:13:7f:04:7a:98:bd: 88:54:6a:73:f4:57:17:64:10:e4:83:fb:ee:bd:6f: 69:e8:30:74:49:1d:82:d4:ac:7f:bf:ef:ab:c8:19: c8:e2:c3:73:5e:2e:dd:53:de:b6:0f:da:aa:58:72: f1:c6:e0:d0:d3:4b:b1:83:11:d4:0b:b4:7a:e9:2c: 4a:3b:81:8a:56:6b:9d:20:f2:38:0c:89:93:59:37: 7e:3c:21:26:8d:87:60:aa:e1:8b:c9:d5:90:6b:8e: fc:ef:37:6f:37:3c:fc:d2:2e:17:36:60:4d:e7:89: 5f:23:91:50:7f:35:d2:de:23:c2:a2:ec:df:05:65: 7e:58:22:a2:7e:df:7f:bc:72:01:fa:38:c9:5a:b4: bc:dc:0c:ce:da:59:18:98:86:47:7e:81:06:8f:99: d9:05:6a:dc:96:3a:d0:da:fd:e5:69:85:44:34:d4: 25:61:88:25:f1:7b:a8:11:b0:bb:5b:c3:8a:e8:12: ec:6a:77:71:53:d3:c2:ff:27:37:5f:f4:89:ce:43: 2d:ba:e9:ce:ac:ef:59:06:d2:b5:af:3d:6a:50:03: 27:fc:12:08:61:5b:cc:0b:75:58:dd:9f:db:af:8c: 4a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F9:FE:19:FB:34:EA:BA:97:64:28:6E:56:02:2D:41:99:F2:C0:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:c5:5e:50:ad:d4:82:63:3f:b3:d8:99:d4:02:e7:8d:95:5f: 02:c9:84:5e:58:53:02:dd:df:21:b3:0a:b8:ff:e0:41:03:e8: f1:35:f5:8d:91:29:1e:d7:f3:b8:d9:d3:44:ed:15:4a:65:e2: 5a:43:7f:d9:ef:7f:af:74:77:41:68:d4:ce:12:8a:8b:5a:b6: c5:13:d9:f3:13:4d:44:a0:3f:10:3a:e2:62:38:c7:64:2c:c3: f6:5a:b3:9c:74:ef:f3:81:f0:b0:f4:34:33:a9:82:92:92:51: 67:e1:a1:a8:93:d9:18:ce:bb:59:c0:60:36:a1:92:27:6b:7f: 91:e3:f6:f3:ee:6b:0a:d8:70:e2:01:19:e9:6c:f9:6d:cb:10: 39:d1:94:a3:2a:30:5a:82:4e:ed:e2:d9:9e:43:6c:ce:6f:7d: 5d:4d:98:4d:e9:cf:05:ae:41:5d:24:10:2c:5c:81:d1:cf:d6: 08:a4:68:78:83:ef:83:fa:cf:76:97:33:63:11:61:08:35:7e: f9:40:7d:9b:49:c7:eb:b9:77:48:04:cd:cf:e8:56:8d:44:ba: ae:6a:ae:ac:32:76:fa:99:e3:38:51:b0:e1:ff:b4:9b:c2:b3: ca:98:d9:c3:c6:f1:34:57:c2:4d:db:80:ab:1e:41:e9:4c:4c: f2:2b:46:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfCNvXegoIkuSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk NTNmNDBlYmYtMDA4YS00MTk4LTg0ZTYtYTJhMmU0N2UxNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJxVrkc1fXqzMPZc/rvlp0XX5IoPrPsTfwR6 mL2IVGpz9FcXZBDkg/vuvW9p6DB0SR2C1Kx/v++ryBnI4sNzXi7dU962D9qqWHLx xuDQ00uxgxHUC7R66SxKO4GKVmudIPI4DImTWTd+PCEmjYdgquGLydWQa4787zdv Nzz80i4XNmBN54lfI5FQfzXS3iPCouzfBWV+WCKift9/vHIB+jjJWrS83AzO2lkY mIZHfoEGj5nZBWrcljrQ2v3laYVENNQlYYgl8XuoEbC7W8OK6BLsandxU9PC/yc3 X/SJzkMtuunOrO9ZBtK1rz1qUAMn/BIIYVvMC3VY3Z/br4xK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf5/hn7NOq6l2QoblYCLUGZ8sB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMTFXlCt1IJjP7PYmdQC542VXwLJhF5YUwLd3yGzCrj/4EED6PE19Y2R KR7X87jZ00TtFUpl4lpDf9nvf690d0Fo1M4SiotatsUT2fMTTUSgPxA64mI4x2Qs w/Zas5x07/OB8LD0NDOpgpKSUWfhoaiT2RjOu1nAYDahkidrf5Hj9vPuawrYcOIB Gels+W3LEDnRlKMqMFqCTu3i2Z5DbM5vfV1NmE3pzwWuQV0kECxcgdHP1gikaHiD 74P6z3aXM2MRYQg1fvlAfZtJx+u5d0gEzc/oVo1Euq5qrqwydvqZ4zhRsOH/tJvC s8qY2cPG8TRXwk3bgKseQelMTPIrRrs= -----END CERTIFICATE-----Generated at Thu Jul 9 14:13:53 2026 by rpki-client