$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa File: 27c00e98-a122-30ab-aab2-3e653d16930e.roa (raw, json) Hash identifier: vwx0zjV5HJr8BkiJ5POinn7hiRk5a8plUBmr3fEeuyU= Subject key identifier: 61:7D:C9:44:F5:53:0A:18:A1:17:33:E4:22:6E:4D:4B:57:ED:3D:D8 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EF87CBFA7A7D0AF0474300F88 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 27446 IP address blocks: 64.147.208.0/20 maxlen: 21 64.147.208.0/24 maxlen: 24 72.27.224.0/19 maxlen: 20 72.27.226.0/24 maxlen: 24 72.27.249.0/24 maxlen: 24 72.250.224.0/19 maxlen: 20 72.250.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bf:a7:a7:d0:af:04:74:30:0f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=57c7bf44-6ea6-4705-8427-3c4cda8897a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:8b:09:27:14:09:ac:d5:aa:bf:b8:68:bc: 8c:21:b0:0c:6d:f0:35:8f:15:bb:82:30:36:63:e2: d8:6f:e2:4a:5d:ac:40:3d:be:90:4d:23:c3:91:f6: ab:a4:c8:17:3c:15:e9:5e:b7:ab:04:63:d1:3d:d6: e9:3b:e0:bb:b0:44:61:4b:af:59:94:55:47:17:bb: c6:51:cd:e8:95:06:c7:0b:7f:2f:55:0f:2f:c6:dc: 21:a1:0f:fc:d9:98:c3:5a:99:85:99:bf:d7:10:e1: 50:3b:31:36:07:31:dc:f3:1d:60:fd:a7:75:99:cd: a1:62:c8:17:f1:b6:32:1f:e8:a3:57:4c:10:5c:9e: 4a:98:2f:bf:43:0d:70:c4:05:07:25:a0:21:52:06: cc:80:19:9d:ef:4d:0d:59:6a:bc:6e:f4:61:97:89: 41:66:23:93:f6:83:08:fc:0d:02:aa:2a:4e:49:c3: 80:55:8b:10:eb:64:65:ed:cc:f6:d9:03:76:08:ce: ee:86:f7:63:84:b7:1b:fb:73:40:10:f0:c3:08:03: 17:87:36:96:7b:63:4d:46:0d:3a:bc:f0:2b:4b:85: 47:09:9e:53:5c:f5:32:41:b8:b2:52:16:e6:11:1e: 77:ff:f9:73:56:3d:7b:3e:5e:c0:43:04:84:e9:f0: a4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7D:C9:44:F5:53:0A:18:A1:17:33:E4:22:6E:4D:4B:57:ED:3D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/27c00e98-a122-30ab-aab2-3e653d16930e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 64.147.208.0/20 72.27.224.0/19 72.250.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:3d:d5:33:09:2d:56:74:43:d0:5f:35:f0:e6:e3:27:16:40: 5c:0b:20:30:a3:02:5d:a1:c0:46:c1:0d:b4:ca:97:a1:66:92: c5:86:f5:4d:2e:12:c9:85:62:b5:c0:d4:e7:e7:17:37:0c:b6: 7c:11:52:ae:43:4d:8b:78:19:23:3b:f3:46:da:32:2a:6d:ff: 39:4e:b6:f7:1e:0b:40:33:b3:0a:df:72:52:2f:1c:f3:3e:4e: c9:fd:be:bf:55:25:01:a3:d5:86:3c:26:0e:ba:3e:cb:71:06: 25:43:ef:24:af:a8:64:f5:d8:c3:77:f1:3c:27:65:d8:f1:39: fb:6b:95:b8:55:f4:be:d2:f7:32:0b:17:09:00:e3:01:f6:ae: f4:09:75:59:d2:8e:23:97:ae:e8:46:e4:b6:8b:0e:a8:a0:56: 0a:16:d2:75:b0:7a:b7:72:f3:c4:fb:37:ce:1c:c7:39:e3:51: 0f:2d:5c:ab:bb:38:3d:07:7e:ca:d0:c8:6e:e7:95:aa:a0:f3: 40:7e:be:9e:f0:af:5a:cb:dd:f5:f6:34:45:50:ac:5c:94:f3: 9b:8f:df:f7:1a:04:de:3b:06:50:f1:16:20:b2:fd:ac:50:c5: d0:2f:dd:8a:93:50:86:46:f9:3a:30:44:14:be:f1:2c:ed:de: c4:0a:d0:39 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE74fL+np9CvBHQwD4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk NTdjN2JmNDQtNmVhNi00NzA1LTg0MjctM2M0Y2RhODg5N2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cKLCScUCazVqr+4aLyMIbAMbfA1jxW7gjA2 Y+LYb+JKXaxAPb6QTSPDkfarpMgXPBXpXrerBGPRPdbpO+C7sERhS69ZlFVHF7vG Uc3olQbHC38vVQ8vxtwhoQ/82ZjDWpmFmb/XEOFQOzE2BzHc8x1g/ad1mc2hYsgX 8bYyH+ijV0wQXJ5KmC+/Qw1wxAUHJaAhUgbMgBmd700NWWq8bvRhl4lBZiOT9oMI /A0CqipOScOAVYsQ62Rl7cz22QN2CM7uhvdjhLcb+3NAEPDDCAMXhzaWe2NNRg06 vPArS4VHCZ5TXPUyQbiyUhbmER53//lzVj17Pl7AQwSE6fCk3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGF9yUT1UwoYoRcz5CJuTUtX7T3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvMjdjMDBlOTgtYTEyMi0z MGFiLWFhYjItM2U2NTNkMTY5MzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQJPQAwQF SBvgAwQFSPrgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFA91TMJLVZ0Q9BfNfDm4ycWQFwLIDCjAl2hwEbB DbTKl6FmksWG9U0uEsmFYrXA1OfnFzcMtnwRUq5DTYt4GSM780baMipt/zlOtvce C0AzswrfclIvHPM+Tsn9vr9VJQGj1YY8Jg66PstxBiVD7ySvqGT12MN38TwnZdjx OftrlbhV9L7S9zILFwkA4wH2rvQJdVnSjiOXruhG5LaLDqigVgoW0nWwerdy88T7 N84cxznjUQ8tXKu7OD0HfsrQyG7nlaqg80B+vp7wr1rL3fX2NEVQrFyU85uP3/ca BN47BlDxFiCy/axQxdAv3YqTUIZG+TowRBS+8Szt3sQK0Dk= -----END CERTIFICATE-----Generated at Tue Sep 22 20:42:38 2026 by rpki-client