$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa File: b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa (raw, json) Hash identifier: riHoyvlra565CjG60zV34JnNmWAJ+o7oxbAxrLsyPr4= Subject key identifier: 2B:36:20:A2:FB:26:92:30:E2:7E:2E:1C:15:B8:44:9A:41:30:31:E4 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EFE12185B64CE21F3F6DCAD70 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 22568 IP address blocks: 72.250.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:18:5b:64:ce:21:f3:f6:dc:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=067c97d6-c5ab-4583-8c6b-18825daf1ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:40:03:d4:05:ca:9a:16:0d:e5:4c:b6:68: 61:43:20:8a:2d:79:3f:1c:4b:a6:da:1e:9e:5b:ae: a1:e7:5d:c1:12:2b:6c:d2:6a:c2:f6:ea:5b:b9:5f: 76:aa:61:32:c5:3f:83:05:1b:52:73:dd:ad:ec:c2: ca:95:76:43:c8:dc:d9:d3:39:5f:a8:d4:19:eb:49: d0:54:43:d5:25:21:1e:b0:e8:26:18:d8:8a:ed:5f: bc:3e:5b:c9:fd:ec:00:40:7c:94:63:9e:3d:d8:41: 3f:42:81:2b:19:7d:81:b4:5a:39:d6:bc:9d:22:78: a3:a1:84:39:f6:4f:7b:e3:13:7e:cf:73:3b:88:35: 78:97:22:d7:10:ba:e5:69:c7:3e:c4:b5:10:95:32: 1d:50:10:99:a9:f0:6f:a1:43:07:40:d1:f9:40:7b: 1a:01:ad:9e:a6:c9:e1:8a:d3:2c:71:f3:73:92:b7: 01:85:97:de:60:af:00:ca:f0:fb:82:69:af:14:64: 7c:14:3c:25:20:6e:27:0d:92:1d:2d:2f:a7:d2:6f: 26:f0:6c:6c:e8:f6:30:fd:6e:3d:f6:7f:9c:7b:00: 6a:c0:4a:d9:ab:6c:2e:f1:97:e3:b4:55:a4:ba:d3: 1d:e7:0f:ed:ed:be:c3:9c:7c:6d:51:d1:2f:7c:e0: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:36:20:A2:FB:26:92:30:E2:7E:2E:1C:15:B8:44:9A:41:30:31:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/b057bed7-40c9-3c8d-8a82-7ad6d3cd2f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1b:e0:e4:cb:ec:98:57:b9:58:4c:26:00:8b:45:cd:93:5e: 31:63:be:a5:86:61:07:0d:86:cf:db:98:0f:98:2f:9a:64:fa: 8e:d3:27:34:78:22:17:ad:a8:a5:f9:aa:60:4d:d6:6f:ff:b5: 97:6f:bd:10:06:df:32:56:09:72:60:45:5c:e8:ff:4e:b3:0c: 3c:cc:82:e2:75:51:97:d1:22:b6:91:69:b8:48:5f:fd:08:bb: 17:69:de:b2:f8:64:dc:01:36:03:a2:d9:98:30:81:2b:18:f0: 60:31:bf:19:89:16:c7:37:dc:19:15:c3:c2:45:4a:40:53:7c: 44:12:a9:a5:63:38:15:26:d8:91:16:c1:4b:ab:55:bd:aa:e3: 2b:f0:a8:a8:ff:a3:3e:2f:c0:49:f5:ef:c5:2d:69:c9:87:26: c7:63:8f:65:17:a4:9f:ac:24:43:e2:d9:ac:70:08:b7:e9:a2: d8:67:1c:31:26:58:8c:43:0c:29:d8:ba:ff:8d:84:46:41:27: d6:08:f4:2b:c3:51:c8:2f:30:13:32:63:8c:f5:ae:56:22:b4: 1b:ff:a4:c4:d9:35:1e:9e:c6:2b:50:7a:c6:d9:25:48:20:75: d4:79:f9:85:ab:9a:3f:07:a7:2e:7d:bd:7f:64:cc:66:e8:3d: fc:d6:a1:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EhhbZM4h8/bcrXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk MDY3Yzk3ZDYtYzVhYi00NTgzLThjNmItMTg4MjVkYWYxZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9NAA9QFypoWDeVMtmhhQyCKLXk/HEum2h6e W66h513BEits0mrC9upbuV92qmEyxT+DBRtSc92t7MLKlXZDyNzZ0zlfqNQZ60nQ VEPVJSEesOgmGNiK7V+8PlvJ/ewAQHyUY5492EE/QoErGX2BtFo51rydInijoYQ5 9k974xN+z3M7iDV4lyLXELrlacc+xLUQlTIdUBCZqfBvoUMHQNH5QHsaAa2epsnh itMscfNzkrcBhZfeYK8AyvD7gmmvFGR8FDwlIG4nDZIdLS+n0m8m8Gxs6PYw/W49 9n+cewBqwErZq2wu8ZfjtFWkutMd5w/t7b7DnHxtUdEvfOCRLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs2IKL7JpIw4n4uHBW4RJpBMDHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvYjA1N2JlZDctNDBjOS0z YzhkLThhODItN2FkNmQzY2QyZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8b4OTL7JhXuVhMJgCLRc2TXjFjvqWGYQcNhs/bmA+YL5pk+o7TJzR4 IhetqKX5qmBN1m//tZdvvRAG3zJWCXJgRVzo/06zDDzMguJ1UZfRIraRabhIX/0I uxdp3rL4ZNwBNgOi2ZgwgSsY8GAxvxmJFsc33BkVw8JFSkBTfEQSqaVjOBUm2JEW wUurVb2q4yvwqKj/oz4vwEn178UtacmHJsdjj2UXpJ+sJEPi2axwCLfpothnHDEm WIxDDCnYuv+NhEZBJ9YI9CvDUcgvMBMyY4z1rlYitBv/pMTZNR6exitQesbZJUgg ddR5+YWrmj8Hpy59vX9kzGboPfzWoZY= -----END CERTIFICATE-----Generated at Thu Sep 24 22:56:25 2026 by rpki-client