$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: RVELpILqYOJ0YEKgV7/0eBErPbYSb0ay3SQeT/WzQNQ= Subject key identifier: 3A:08:BF:B0:0E:49:EA:FE:E8:60:EA:CB:F5:8C:CA:4D:2A:4A:BD:43 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EF87CBE9CF979A12963FBA880 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:be:9c:f9:79:a1:29:63:fb:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=cfba73a8-1c8c-44bb-9cd7-e01261462f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d4:d5:82:f2:3f:aa:85:ef:11:d7:63:91:cc: cf:99:7a:8c:80:90:2a:e2:6b:c2:0e:24:6c:05:8b: c1:b1:6a:45:8f:3e:bb:ac:e2:43:2b:63:fe:79:f2: cf:ba:2b:a8:7a:50:52:7a:3f:39:9f:54:ba:bd:cf: 5c:ee:65:d0:ca:8e:72:0b:24:ea:84:7d:bf:c3:91: 54:59:04:bf:59:3e:29:83:70:26:05:72:c8:4e:84: d2:50:3a:e8:27:92:dc:a3:e6:a0:ee:ac:d6:33:d1: 01:4f:37:0e:c4:66:e7:d5:44:a0:69:67:ad:0b:b8: dd:46:62:0f:00:68:6a:ab:4e:b4:72:bd:aa:f5:4b: 87:2d:24:31:a6:14:4f:08:37:cf:1c:69:06:5f:c1: 26:b0:ae:2e:71:dd:c7:ab:8e:87:83:7d:70:41:69: 36:da:34:33:e9:35:58:ab:a0:17:22:6e:bd:1e:5f: d1:8d:4b:8b:33:4c:c2:b0:dc:46:c4:41:48:24:a0: 61:df:65:8f:40:98:52:23:fb:00:be:3f:b0:b4:b8: b2:86:6d:0d:5e:7f:4c:db:7e:42:c1:fb:96:1c:d4: 3c:e9:cd:60:82:8e:52:59:9e:05:52:c9:77:af:96: 4e:35:6c:2b:7a:3f:47:61:c9:a7:52:32:e6:00:0e: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:08:BF:B0:0E:49:EA:FE:E8:60:EA:CB:F5:8C:CA:4D:2A:4A:BD:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f6:e4:53:ac:d2:51:67:e3:6d:64:7e:7c:44:15:82:db:1a: a5:19:be:5e:f4:f4:3e:8e:77:cb:41:84:7b:c7:5b:ec:dd:10: e5:4e:5c:42:28:50:24:5d:50:1f:f5:ff:d1:67:60:04:91:b7: 39:e9:eb:36:ce:f8:8b:71:af:01:80:48:fa:91:ce:62:51:3d: 22:32:59:68:77:94:1e:76:6f:f0:04:56:e7:bb:71:7c:12:67: 78:7b:3c:71:b5:70:7a:b9:cf:5b:c4:60:de:4e:6b:ca:64:aa: 23:96:50:27:68:9b:5b:59:f5:00:79:e8:96:75:2e:4f:ad:ca: 23:41:50:ad:78:09:96:89:eb:88:52:27:16:e3:a0:ea:4e:6e: 53:be:a3:54:f7:b0:30:9b:8f:2f:81:fe:9f:1d:fc:3e:54:1a: 1d:69:d6:4c:ae:3e:bd:bc:15:8e:2e:96:11:de:fe:81:3d:40: 49:17:d6:73:0e:26:e1:7e:be:6b:68:15:d3:27:7b:bb:30:22: 4f:0c:8a:b8:1f:bb:2a:a5:c7:bf:49:42:52:ca:15:ff:5c:37: eb:0a:0b:9d:0a:d3:50:fd:96:a5:3d:11:48:10:00:26:a1:7a: b1:bf:38:b6:56:8e:08:29:6c:87:86:c5:17:fb:a7:2f:21:7a: 40:b5:1a:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL6c+XmhKWP7qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZiYTczYTgtMWM4Yy00NGJiLTljZDctZTAxMjYxNDYyZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tTVgvI/qoXvEddjkczPmXqMgJAq4mvCDiRs BYvBsWpFjz67rOJDK2P+efLPuiuoelBSej85n1S6vc9c7mXQyo5yCyTqhH2/w5FU WQS/WT4pg3AmBXLIToTSUDroJ5Lco+ag7qzWM9EBTzcOxGbn1USgaWetC7jdRmIP AGhqq060cr2q9UuHLSQxphRPCDfPHGkGX8EmsK4ucd3Hq46Hg31wQWk22jQz6TVY q6AXIm69Hl/RjUuLM0zCsNxGxEFIJKBh32WPQJhSI/sAvj+wtLiyhm0NXn9M235C wfuWHNQ86c1ggo5SWZ4FUsl3r5ZONWwrej9HYcmnUjLmAA4y5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoIv7AOSer+6GDqy/WMyk0qSr1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH25FOs0lFn421kfnxEFYLbGqUZvl709D6Od8tBhHvHW+zdEOVOXEIo UCRdUB/1/9FnYASRtznp6zbO+ItxrwGASPqRzmJRPSIyWWh3lB52b/AEVue7cXwS Z3h7PHG1cHq5z1vEYN5Oa8pkqiOWUCdom1tZ9QB56JZ1Lk+tyiNBUK14CZaJ64hS JxbjoOpOblO+o1T3sDCbjy+B/p8d/D5UGh1p1kyuPr28FY4ulhHe/oE9QEkX1nMO JuF+vmtoFdMne7swIk8Mirgfuyqlx79JQlLKFf9cN+sKC50K01D9lqU9EUgQACah erG/OLZWjggpbIeGxRf7py8hekC1GiI= -----END CERTIFICATE-----Generated at Tue Sep 22 20:23:30 2026 by rpki-client