$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa File: da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json) Hash identifier: RY1+Wrh2HoTxUMsIiOXbuyVaKx+Gnvax8avCmu4KtHA= Subject key identifier: 2D:C4:5C:60:8F:91:3E:99:13:7A:D9:ED:E9:C8:66:F6:5C:F2:91:DA Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584B79BCB8CA9E8221736FB3EA00 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 27446 IP address blocks: 72.250.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b8:ca:9e:82:21:73:6f:b3:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=6ce5d3ac-874a-440a-97a9-98531f784381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:d9:54:20:bd:25:46:02:fe:e2:b3:23:81: 5a:a4:96:4a:16:78:25:a5:70:38:43:dd:87:fd:78: 74:28:56:f6:87:91:a6:57:65:30:47:fa:0d:ab:7a: a7:f8:0e:b7:9f:12:e5:29:c2:5b:b2:0a:61:00:c8: 36:11:3b:fe:1a:86:ad:ac:1c:a8:a7:0e:6c:ba:4f: 38:57:1e:4a:04:6d:4e:46:9a:99:e5:0f:d4:7d:17: 3b:5b:6b:11:45:dd:e5:1e:ee:83:b6:ac:79:e1:f7: 3e:ff:72:c9:ce:eb:13:54:9f:5d:d7:93:e2:74:fe: ba:85:ed:5c:62:e2:d5:29:63:5d:44:33:ea:c5:53: 07:17:6a:b5:ff:9c:86:7f:4a:89:f6:55:e1:9b:57: 6e:96:6c:49:a5:59:3c:4d:06:bc:f2:20:35:52:83: 01:5a:97:b5:76:7d:34:de:42:f5:19:32:21:ba:f9: 1d:0e:b3:fd:70:c2:3f:cd:d2:bd:d2:d6:13:60:c2: bf:86:b0:dd:d8:16:db:c3:63:c8:30:2a:06:c9:7c: 8e:61:8f:43:bc:e2:f5:fd:d2:58:bb:04:4f:e9:97: c2:bc:e8:f3:8d:64:c7:b2:6e:a0:6e:0a:f1:72:ea: db:c3:c1:6c:15:8c:a3:37:03:25:28:cb:2d:04:90: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C4:5C:60:8F:91:3E:99:13:7A:D9:ED:E9:C8:66:F6:5C:F2:91:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f5:9b:65:d0:14:39:ca:57:47:09:7c:bc:c7:d5:11:0f:65: d1:51:92:75:b6:1f:4f:0a:34:53:ae:a0:cf:5c:e5:e7:dc:9c: 3b:01:5c:32:41:80:8d:5f:fc:fb:23:6a:d5:a3:b5:ee:ce:6c: c6:3f:68:20:16:cc:a2:73:55:bf:6e:df:b0:f8:0b:f9:f8:a1: e7:e2:7e:60:3c:f3:4c:0d:d3:bc:95:9e:ef:52:c1:60:f2:de: d2:1b:08:86:79:8a:61:9c:c6:00:14:85:72:6e:7a:f2:10:89: d2:c4:1c:74:15:10:e2:34:64:53:97:8e:ed:32:b5:ae:7f:ca: 6c:22:35:13:5a:1f:3c:2f:17:08:1c:13:07:a9:b6:82:02:10: 47:01:11:d9:ee:e0:ea:09:66:69:09:01:74:f4:c8:d0:08:cd: 15:33:e5:6d:9b:5d:80:65:2c:8f:48:d7:dd:3a:71:fe:b7:80: a8:dd:07:40:82:e2:76:42:d6:2c:13:f5:04:93:91:9b:57:ae: ea:cc:32:5b:0d:d8:c7:83:f1:e9:da:fd:e7:82:60:5d:3e:83: 39:12:af:cc:74:44:0c:f8:47:a3:22:bd:dd:ea:8b:87:62:7d: 36:ae:ed:f1:ce:1d:c4:bf:fc:c0:4d:27:da:59:43:a0:c6:68: f2:54:1d:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLjKnoIhc2+z6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NmNlNWQzYWMtODc0YS00NDBhLTk3YTktOTg1MzFmNzg0MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy27ZVCC9JUYC/uKzI4FapJZKFnglpXA4Q92H /Xh0KFb2h5GmV2UwR/oNq3qn+A63nxLlKcJbsgphAMg2ETv+GoatrByopw5suk84 Vx5KBG1ORpqZ5Q/UfRc7W2sRRd3lHu6Dtqx54fc+/3LJzusTVJ9d15PidP66he1c YuLVKWNdRDPqxVMHF2q1/5yGf0qJ9lXhm1dulmxJpVk8TQa88iA1UoMBWpe1dn00 3kL1GTIhuvkdDrP9cMI/zdK90tYTYMK/hrDd2Bbbw2PIMCoGyXyOYY9DvOL1/dJY uwRP6ZfCvOjzjWTHsm6gbgrxcurbw8FsFYyjNwMlKMstBJBPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3EXGCPkT6ZE3rZ7enIZvZc8pHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALj1m2XQFDnKV0cJfLzH1REPZdFRknW2H08KNFOuoM9c5efcnDsBXDJB gI1f/PsjatWjte7ObMY/aCAWzKJzVb9u37D4C/n4oefifmA880wN07yVnu9SwWDy 3tIbCIZ5imGcxgAUhXJuevIQidLEHHQVEOI0ZFOXju0yta5/ymwiNRNaHzwvFwgc EweptoICEEcBEdnu4OoJZmkJAXT0yNAIzRUz5W2bXYBlLI9I1906cf63gKjdB0CC 4nZC1iwT9QSTkZtXrurMMlsN2MeD8ena/eeCYF0+gzkSr8x0RAz4R6Mivd3qi4di fTau7fHOHcS//MBNJ9pZQ6DGaPJUHTY= -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:03 2025 by rpki-client