$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: VSK98/Pn7hBjcBNtjGj7GpC6bNt1SaOpa65iQD3xlic= Subject key identifier: 38:10:9A:10:A5:AA:E4:75:B9:D7:06:38:FE:2A:67:E1:A4:04:9E:89 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584D75D52CD313E485996DEBE680 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2c:d3:13:e4:85:99:6d:eb:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=65e62ac1-c85b-4c7d-8521-50f1bc859a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2f:52:a5:55:fc:da:53:68:7c:0c:d4:d3:bd: 9a:38:70:64:4e:41:82:3a:dc:4e:33:9e:f1:6b:a5: e9:fe:6d:c2:b9:25:0f:13:a5:6a:28:d2:c6:96:11: 1a:56:00:8d:a1:20:d6:1b:cd:81:07:6c:44:0f:dd: fa:a1:bc:d8:f5:42:df:3e:88:66:03:21:cb:bb:fc: 45:d9:3d:49:3c:ac:8c:39:44:0d:eb:c1:89:f7:f6: ef:79:dd:ba:43:fa:b0:e9:5a:af:46:0c:d8:ba:d1: 81:32:8b:6b:65:c7:0b:70:a1:6f:b6:0c:48:fa:b7: 5d:1c:a7:26:18:ff:15:dc:53:5e:6b:a7:23:ed:98: e6:3b:97:47:2a:23:72:f8:91:21:17:0f:c5:99:e0: 23:55:30:92:05:dc:7a:dc:e0:6d:62:48:67:c6:64: 9f:d0:c8:61:6a:43:eb:c5:b5:f8:94:f6:57:ee:13: 6d:67:b9:d7:44:5f:ec:82:57:93:04:0c:78:65:11: 51:1e:ad:97:6a:c3:72:d9:26:e2:83:f0:95:f4:09: d5:24:c5:03:81:1e:fc:04:f0:a0:75:b2:63:80:e5: 85:66:1d:04:09:4c:32:ac:31:e7:63:f2:fb:76:9e: ae:2d:f7:e1:f6:fc:78:55:17:12:4b:53:01:8b:77: f8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:10:9A:10:A5:AA:E4:75:B9:D7:06:38:FE:2A:67:E1:A4:04:9E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:79:d8:c7:d2:3e:f8:ae:13:da:09:27:06:00:5a:cd:f4:aa: 86:38:c4:a4:cf:26:49:15:8f:eb:65:9c:f4:c2:64:d3:26:b2: 22:82:fa:a8:de:9e:e6:d9:46:e7:c6:7a:c9:48:51:3d:bc:00: 45:bf:02:5e:f5:a7:06:4b:43:d5:ad:f8:7b:23:9d:c3:33:45: fd:35:ae:4d:d6:1f:ae:05:e9:84:de:c2:64:81:46:49:de:74: f0:b1:54:3b:9f:be:b4:48:c4:5e:1d:85:d7:f6:e3:e2:a6:54: 9c:e0:43:58:56:a5:9c:39:78:9d:62:51:06:e3:e2:e6:8e:02: c9:54:e4:dd:63:b6:1f:91:6d:95:fb:20:e6:76:16:4a:fa:d0: 79:f8:f9:67:cc:ab:16:3f:af:9e:e5:4f:89:b1:92:f6:c4:8d: 48:f7:08:56:53:89:c3:a6:1d:bc:91:fb:0d:58:27:9c:3c:e9: 1f:76:a3:c7:db:77:67:b5:e9:58:50:82:e0:1a:0e:6e:83:d3: d9:43:c9:56:25:e6:21:d0:4d:4c:76:39:55:6a:1e:23:c5:8f: d6:05:61:18:67:e2:eb:3e:2e:29:7c:b4:a3:bb:55:b5:9a:e1: f2:fe:c0:9d:a3:17:2b:8f:71:21:61:47:cf:6d:61:af:44:41: ba:bf:98:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SzTE+SFmW3r5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NjVlNjJhYzEtYzg1Yi00YzdkLTg1MjEtNTBmMWJjODU5YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C9SpVX82lNofAzU072aOHBkTkGCOtxOM57x a6Xp/m3CuSUPE6VqKNLGlhEaVgCNoSDWG82BB2xED936obzY9ULfPohmAyHLu/xF 2T1JPKyMOUQN68GJ9/bved26Q/qw6VqvRgzYutGBMotrZccLcKFvtgxI+rddHKcm GP8V3FNea6cj7ZjmO5dHKiNy+JEhFw/FmeAjVTCSBdx63OBtYkhnxmSf0MhhakPr xbX4lPZX7hNtZ7nXRF/sgleTBAx4ZRFRHq2XasNy2Sbig/CV9AnVJMUDgR78BPCg dbJjgOWFZh0ECUwyrDHnY/L7dp6uLffh9vx4VRcSS1MBi3f4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgQmhClquR1udcGOP4qZ+GkBJ6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp52MfSPviuE9oJJwYAWs30qoY4xKTPJkkVj+tlnPTCZNMmsiKC+qje nubZRufGeslIUT28AEW/Al71pwZLQ9Wt+HsjncMzRf01rk3WH64F6YTewmSBRkne dPCxVDufvrRIxF4dhdf24+KmVJzgQ1hWpZw5eJ1iUQbj4uaOAslU5N1jth+RbZX7 IOZ2Fkr60Hn4+WfMqxY/r57lT4mxkvbEjUj3CFZTicOmHbyR+w1YJ5w86R92o8fb d2e16VhQguAaDm6D09lDyVYl5iHQTUx2OVVqHiPFj9YFYRhn4us+Lil8tKO7VbWa 4fL+wJ2jFyuPcSFhR89tYa9EQbq/mJw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:23 2026 by rpki-client