$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: hxHhtwlf6PGTjmwNEzGfHdHZG3ZZvuM6on19lB0ibr0= Subject key identifier: 8C:70:0C:AC:0C:D8:56:33:5B:79:02:F0:1F:FB:AA:73:4F:B7:D9:B1 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584BB45D165101B24E639BB98080 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:16:51:01:b2:4e:63:9b:b9:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=dc936a4c-7479-4665-b77f-4bb8cf970a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a9:6a:24:5e:b8:01:e1:19:46:05:aa:48:d7: 40:5d:20:d1:94:32:a0:7d:74:c8:6b:cc:6a:a6:6f: 99:52:dd:63:62:77:a5:54:a0:45:21:07:3b:38:3a: f3:5e:c2:bf:ee:79:98:ae:4c:c3:dc:78:bd:9c:07: c4:ca:38:34:10:6c:c9:26:2e:9e:e1:dc:fd:5b:e6: 3a:0a:34:cb:0e:af:c3:fa:b9:25:3e:d3:42:8f:56: 2c:c7:71:90:52:a1:47:b3:e0:d5:89:86:e2:ea:be: 1d:4b:ef:34:8d:37:71:f6:60:f2:65:d7:24:4a:ef: 8b:be:10:35:cb:6b:fe:b0:bc:6a:7a:c7:60:9a:b9: 9b:6c:32:60:b8:e1:82:a6:fa:f6:5e:1f:37:8d:75: 30:e4:a0:be:43:a5:ae:51:d1:d6:eb:a7:90:c5:94: bb:2d:bd:0e:42:89:24:74:60:0a:b4:61:4e:8e:a5: 85:ec:7d:1a:52:f1:90:76:8a:a8:b1:20:b5:22:17: 3c:9b:7f:61:23:5c:2e:84:4b:aa:db:1b:17:8c:e3: 42:fa:ff:56:f1:06:41:09:e8:6d:a2:b2:c1:8a:ae: a6:ae:4c:d9:a1:d6:fe:ed:61:86:5a:54:2e:7d:4a: bc:3e:48:1d:f8:cc:e9:87:db:7a:c4:ec:a8:cd:39: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:0C:AC:0C:D8:56:33:5B:79:02:F0:1F:FB:AA:73:4F:B7:D9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:59:4d:eb:dc:98:84:98:ad:bd:5c:9e:0e:99:dc:a6:74:88: 29:8c:67:f9:ef:5a:47:ab:bc:cb:56:25:30:5f:09:66:0a:e7: 58:bc:d9:01:b3:54:77:9c:25:99:99:49:06:32:b4:64:92:b0: 7f:03:d1:2c:7b:9e:af:ba:dc:c4:3c:a1:50:ca:84:e2:5e:58: 24:1c:76:3d:7d:7c:79:8b:68:5f:a8:9c:b4:fa:42:61:87:4c: d2:88:be:1a:99:6b:77:95:af:18:da:52:25:b1:75:2a:8c:38: 98:68:85:79:aa:2a:9f:ce:3c:8d:94:cf:01:90:d7:df:41:e4: 72:01:15:66:f0:83:59:a1:ed:0e:9c:ca:da:9a:d4:f6:da:bc: 4d:6f:10:b4:39:c5:d1:98:41:03:a6:7d:fe:88:70:b6:37:58: 9d:6f:ee:9b:d5:9f:85:ab:c4:2b:1b:b5:4d:0d:70:3d:0c:17: a1:ec:17:55:49:db:d3:c5:b9:43:f3:0a:a5:ec:e0:a0:61:da: ed:f8:46:1c:8f:17:e0:f8:52:0f:9c:8e:c1:78:b0:19:d7:0b: a8:20:a5:d2:70:f9:da:0e:1f:b8:df:88:d9:dc:2a:56:c7:9f: d2:bb:44:95:16:29:46:89:83:5d:76:3d:04:f9:e9:39:11:70: 41:35:7e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRZRAbJOY5u5gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZGM5MzZhNGMtNzQ3OS00NjY1LWI3N2YtNGJiOGNmOTcwYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKlqJF64AeEZRgWqSNdAXSDRlDKgfXTIa8xq pm+ZUt1jYnelVKBFIQc7ODrzXsK/7nmYrkzD3Hi9nAfEyjg0EGzJJi6e4dz9W+Y6 CjTLDq/D+rklPtNCj1Ysx3GQUqFHs+DViYbi6r4dS+80jTdx9mDyZdckSu+LvhA1 y2v+sLxqesdgmrmbbDJguOGCpvr2Xh83jXUw5KC+Q6WuUdHW66eQxZS7Lb0OQokk dGAKtGFOjqWF7H0aUvGQdoqosSC1Ihc8m39hI1wuhEuq2xsXjONC+v9W8QZBCeht orLBiq6mrkzZodb+7WGGWlQufUq8Pkgd+Mzph9t6xOyozTkpFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxwDKwM2FYzW3kC8B/7qnNPt9mxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5ZTevcmISYrb1cng6Z3KZ0iCmMZ/nvWkervMtWJTBfCWYK51i82QGz VHecJZmZSQYytGSSsH8D0Sx7nq+63MQ8oVDKhOJeWCQcdj19fHmLaF+onLT6QmGH TNKIvhqZa3eVrxjaUiWxdSqMOJhohXmqKp/OPI2UzwGQ199B5HIBFWbwg1mh7Q6c ytqa1PbavE1vELQ5xdGYQQOmff6IcLY3WJ1v7pvVn4WrxCsbtU0NcD0MF6HsF1VJ 29PFuUPzCqXs4KBh2u34RhyPF+D4Ug+cjsF4sBnXC6ggpdJw+doOH7jfiNncKlbH n9K7RJUWKUaJg112PQT56TkRcEE1fhQ= -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:09 2025 by rpki-client