$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa File: d3681e21-b789-3e42-bd09-5ab209510e5d.roa (raw, json) Hash identifier: BMRWDbESb7ud6ED750dz4pTg2WWDoN2LdxxDGKZqV7A= Subject key identifier: 91:36:93:F1:A9:3B:4C:DA:D3:31:AD:EB:CC:97:17:6C:00:FC:A2:1E Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EA39304863D8B81CD56039D70 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa Signing time: Mon 27 Jul 2026 15:01:30 +0000 ROA not before: Mon 27 Jul 2026 15:01:30 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 36283 IP address blocks: 72.27.244.0/22 maxlen: 22 72.27.248.0/23 maxlen: 24 72.250.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:93:04:86:3d:8b:81:cd:56:03:9d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jul 27 15:01:30 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=2e7b3602-6104-4aa6-86a8-88e59c3f4898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:17:17:89:05:9e:60:54:73:89:f4:00:7d: 86:b0:f0:d0:d4:5d:61:4b:ba:4e:a3:4f:5b:d2:c3: 09:6c:81:f9:6b:36:aa:97:cf:1a:16:1d:b0:3f:f9: 66:9f:14:22:97:50:d7:40:a9:8c:55:d6:72:76:79: 12:51:b8:1d:83:0e:a8:33:fc:57:85:52:27:25:2a: d0:f0:21:21:06:29:45:1a:f7:34:95:24:2c:e0:1e: 4f:bb:d6:12:ed:3e:6f:d5:48:e5:a1:dc:0a:b4:86: 8e:eb:10:7b:85:41:ef:b5:bf:d6:50:0e:2e:2a:ad: ab:a2:0f:e3:a2:aa:b3:4a:00:30:6c:9d:68:dc:77: d0:67:f8:8f:51:7b:31:80:09:b5:2a:89:7d:e9:6d: 81:01:ff:3a:97:cb:b4:1f:4e:19:cf:24:80:20:f8: 31:98:0a:82:b7:32:a5:bb:73:0d:4b:2a:f4:1a:37: c6:1a:d4:71:19:2b:e4:be:16:60:56:81:f0:4d:e5: a9:6d:ec:b5:5d:56:c0:25:ab:b1:69:8d:08:23:0c: 97:16:9d:f1:fe:f3:ef:61:6d:84:03:a5:b1:b7:8e: cd:b1:c5:52:11:66:c8:c3:2f:c5:60:3e:77:d2:d5: e8:f6:98:b7:31:47:a3:43:44:cb:d7:2c:ee:3b:cb: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:36:93:F1:A9:3B:4C:DA:D3:31:AD:EB:CC:97:17:6C:00:FC:A2:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/d3681e21-b789-3e42-bd09-5ab209510e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.27.244.0-72.27.249.255 72.250.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1f:22:2f:33:0a:7e:ca:df:2f:18:86:0a:6e:48:4a:3b:a8: 65:49:4f:bd:8b:d6:46:2e:62:0b:7a:c1:a3:36:fa:b3:0f:90: 9c:c8:a7:5f:6d:a3:66:2d:2b:f2:30:22:59:6f:51:ae:7a:d6: b4:bb:c3:2d:90:2e:4f:70:a1:da:23:d2:fb:b6:ef:47:38:81: 86:10:dc:7d:21:8f:86:dc:be:76:8b:49:ac:cf:81:ee:36:3b: 3e:10:4a:b5:86:a9:71:0b:f2:78:76:1d:a5:0b:4d:58:85:57: 29:ae:4b:1c:be:dd:8f:5e:bd:b4:80:e4:a4:71:57:41:ae:95: 5b:8f:51:4d:dd:c8:6e:94:95:ac:68:11:5c:7a:2e:f8:48:bc: f9:d3:35:b1:13:07:b9:f0:24:4a:c0:68:94:dd:7f:80:91:79: 99:e0:0e:7a:47:aa:e4:39:99:b8:2a:a9:f1:f8:37:1d:4e:6c: 16:bd:c6:4d:22:b9:62:98:8f:8c:64:33:fa:a4:59:4f:d1:b4: 4d:dc:5f:fd:30:06:3d:47:99:2e:d7:3e:8a:76:83:70:0d:e5: 57:aa:3b:41:64:e9:cc:ac:41:fe:06:bf:7c:8b:c9:35:16:93: a9:85:3d:a7:67:b3:77:54:dd:2d:5f:14:4d:05:fc:b1:3e:07: a6:cf:c6:b7 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE6jkwSGPYuBzVYDnXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDcyNzE1MDEzMFoXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk MmU3YjM2MDItNjEwNC00YWE2LTg2YTgtODhlNTljM2Y0ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnMXF4kFnmBUc4n0AH2GsPDQ1F1hS7pOo09b 0sMJbIH5azaql88aFh2wP/lmnxQil1DXQKmMVdZydnkSUbgdgw6oM/xXhVInJSrQ 8CEhBilFGvc0lSQs4B5Pu9YS7T5v1UjlodwKtIaO6xB7hUHvtb/WUA4uKq2rog/j oqqzSgAwbJ1o3HfQZ/iPUXsxgAm1Kol96W2BAf86l8u0H04ZzySAIPgxmAqCtzKl u3MNSyr0GjfGGtRxGSvkvhZgVoHwTeWpbey1XVbAJauxaY0IIwyXFp3x/vPvYW2E A6Wxt47NscVSEWbIwy/FYD530tXo9pi3MUejQ0TL1yzuO8uLGQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFJE2k/GpO0za0zGt68yXF2wA/KIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZDM2ODFlMjEtYjc4OS0z ZTQyLWJkMDktNWFiMjA5NTEwZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJIG/QD BAFIG/gDBABI+v8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAeh8iLzMKfsrfLxiGCm5ISjuoZUlPvYvWRi5i C3rBozb6sw+QnMinX22jZi0r8jAiWW9RrnrWtLvDLZAuT3Ch2iPS+7bvRziBhhDc fSGPhty+dotJrM+B7jY7PhBKtYapcQvyeHYdpQtNWIVXKa5LHL7dj169tIDkpHFX Qa6VW49RTd3IbpSVrGgRXHou+Ei8+dM1sRMHufAkSsBolN1/gJF5meAOekeq5DmZ uCqp8fg3HU5sFr3GTSK5YpiPjGQz+qRZT9G0Tdxf/TAGPUeZLtc+inaDcA3lV6o7 QWTpzKxB/ga/fIvJNRaTqYU9p2ezd1TdLV8UTQX8sT4Hps/Gtw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:54:03 2026 by rpki-client