$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa File: da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa (raw, json) Hash identifier: FY+N/Lg6UtopFD6Zr25fMMGp5Zhgla3UheQCYN7NOkU= Subject key identifier: 6D:2D:5B:ED:84:BA:DB:40:B7:9D:7B:14:0D:77:1E:96:EC:91:B6:6A Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584A9900C30C3B2752C6681B0E00 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 27446 IP address blocks: 72.250.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c3:0c:3b:27:52:c6:68:1b:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=bd688818-ee7d-4db7-96b3-b33ae6edade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:28:a8:c5:23:ae:05:17:bd:a8:b6:c7:85: 58:f5:d9:cb:df:7a:3a:5a:34:ab:d6:1d:81:8b:51: 09:47:02:34:70:fa:9d:51:6c:ad:fb:78:0c:86:c6: 02:67:0f:60:76:57:5f:57:ce:96:a4:e8:03:5f:6c: a1:93:16:74:fc:1b:d3:6b:2b:a7:4f:c4:3b:e1:e4: f4:6d:32:4d:10:2d:4a:4d:94:d8:ba:f6:14:3b:14: f3:d7:3b:56:4e:b7:75:a1:21:4e:50:12:b9:aa:15: 0d:51:e1:b6:7a:7c:2c:db:f9:16:6a:be:3f:3b:7d: e7:7e:02:94:40:4b:bc:fd:5a:22:cb:7e:14:2b:2f: 06:fd:54:47:c3:46:87:ef:8a:85:12:46:e1:76:df: fd:02:96:2e:6f:9b:eb:6a:10:95:b8:81:3b:ae:cc: 30:da:21:08:b0:61:35:4d:03:f5:4f:7c:25:4e:05: 83:3f:86:ec:7b:41:c2:d8:4b:bd:e6:54:2d:13:10: 4f:34:bf:e4:bd:65:49:2b:25:0b:55:11:8c:ca:bb: 95:4f:1e:91:8c:64:ae:e3:74:62:18:25:8e:8f:53: 0b:0f:29:0c:1a:b5:64:cc:f8:25:01:e9:2b:74:35: 15:08:9a:02:65:d6:a2:4d:3a:5b:64:3e:c1:95:b2: 77:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2D:5B:ED:84:BA:DB:40:B7:9D:7B:14:0D:77:1E:96:EC:91:B6:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/da39cfba-b1a3-39cf-8e7f-4bd1f73156ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:78:48:84:7d:cb:05:42:00:bb:8a:3c:7a:5a:16:04:24:8a: ba:29:d4:74:bc:88:10:a2:c4:67:8d:8d:28:41:3b:55:14:36: 9a:d2:6c:21:e1:ef:41:64:86:7f:2f:06:36:2a:44:44:de:19: a5:1f:be:f1:3c:26:fd:88:ad:9f:22:3d:82:51:e7:a4:d0:6f: 78:0d:c2:05:2f:2f:6b:47:e0:d9:9e:35:0c:b4:e8:8d:74:71: 60:68:fa:e2:b5:5a:76:7b:0b:89:cb:a4:75:68:ab:27:7b:ed: 21:5d:1d:b9:d2:c3:e1:1e:24:a5:84:84:07:89:0b:14:ce:9e: 4a:54:5b:3e:20:b6:41:43:4c:52:aa:85:06:3a:02:d7:6e:5d: f7:79:63:1e:a2:56:dc:1c:7f:2e:08:82:aa:f2:38:92:f1:fe: 78:e3:13:f0:7e:9f:f6:75:1e:57:5c:fc:97:b5:75:31:59:00: ad:a8:0c:b6:51:c6:55:60:71:f4:8c:ac:9a:9c:5e:13:b2:9a: 21:c6:6b:36:e9:7c:f1:c5:65:83:fa:ca:6a:06:aa:84:c3:11: 06:b3:6b:f1:14:05:93:12:b2:b6:05:51:d2:a1:24:91:f1:e3: 9e:74:16:df:f0:fd:0c:45:08:9e:8f:6e:83:51:e4:ed:8f:1b: a1:3d:0a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMMMOydSxmgbDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk YmQ2ODg4MTgtZWU3ZC00ZGI3LTk2YjMtYjMzYWU2ZWRhZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk80oqMUjrgUXvai2x4VY9dnL33o6WjSr1h2B i1EJRwI0cPqdUWyt+3gMhsYCZw9gdldfV86WpOgDX2yhkxZ0/BvTayunT8Q74eT0 bTJNEC1KTZTYuvYUOxTz1ztWTrd1oSFOUBK5qhUNUeG2enws2/kWar4/O33nfgKU QEu8/Voiy34UKy8G/VRHw0aH74qFEkbhdt/9ApYub5vrahCVuIE7rsww2iEIsGE1 TQP1T3wlTgWDP4bse0HC2Eu95lQtExBPNL/kvWVJKyULVRGMyruVTx6RjGSu43Ri GCWOj1MLDykMGrVkzPglAekrdDUVCJoCZdaiTTpbZD7BlbJ3XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0tW+2EuttAt517FA13HpbskbZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZGEzOWNmYmEtYjFhMy0z OWNmLThlN2YtNGJkMWY3MzE1NmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPr0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV4SIR9ywVCALuKPHpaFgQkirop1HS8iBCixGeNjShBO1UUNprSbCHh 70Fkhn8vBjYqRETeGaUfvvE8Jv2IrZ8iPYJR56TQb3gNwgUvL2tH4NmeNQy06I10 cWBo+uK1WnZ7C4nLpHVoqyd77SFdHbnSw+EeJKWEhAeJCxTOnkpUWz4gtkFDTFKq hQY6AtduXfd5Yx6iVtwcfy4IgqryOJLx/njjE/B+n/Z1Hldc/Je1dTFZAK2oDLZR xlVgcfSMrJqcXhOymiHGazbpfPHFZYP6ymoGqoTDEQaza/EUBZMSsrYFUdKhJJHx 4550Ft/w/QxFCJ6PboNR5O2PG6E9CiA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:27:12 2025 by rpki-client