$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/fd9c1375-3461-34b0-a6f9-2a439bc43066.roa File: fd9c1375-3461-34b0-a6f9-2a439bc43066.roa (raw, json) Hash identifier: Xyq+GCfhKrLKRM6m3FKJ9E5ewpRm9uTDDSRlrv7WVVE= Subject key identifier: 27:E3:29:58:99:78:52:25:B5:CB:24:3E:06:AB:69:85:50:7A:99:9A Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584B4844ED271CD743275AB4FD00 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/fd9c1375-3461-34b0-a6f9-2a439bc43066.roa Signing time: Mon 22 Sep 2025 19:44:47 +0000 ROA not before: Mon 22 Sep 2025 19:44:47 +0000 ROA not after: Sun 21 Dec 2025 20:44:47 +0000 asID: 27446 IP address blocks: 72.27.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:44:ed:27:1c:d7:43:27:5a:b4:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Sep 22 19:44:47 2025 GMT Not After : Dec 21 20:44:47 2025 GMT Subject: CN=dcd580b1-1577-433a-a0bc-f332f9f0dca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:7d:a9:9e:73:96:28:44:f6:de:00:00:9d: e1:ce:4f:2a:da:b5:77:8a:c2:28:a9:f3:25:1b:c8: a4:53:bf:79:bb:65:1b:8f:25:f8:88:9d:89:de:b3: a3:3d:1e:0f:27:23:de:29:ad:bd:3e:40:d9:52:94: 4b:02:cc:4d:b5:bd:19:38:b7:9d:98:01:ed:f5:ed: b2:13:be:65:b8:5e:1e:35:15:24:82:d3:45:fe:5c: 61:e2:50:24:fc:33:98:34:33:f5:3a:9f:a7:e6:89: 7c:af:dd:91:9d:12:73:59:b7:e8:e4:57:38:54:4e: 8a:e7:e0:4a:4e:cf:4e:6b:9b:0a:7a:c5:ea:15:c5: 77:53:ed:38:95:95:2b:92:ca:e3:94:84:b4:36:df: 32:3d:5f:83:92:5b:1e:2c:7a:31:1e:6d:52:27:1a: 36:21:e2:62:d4:65:be:a0:2e:71:85:f5:84:2c:be: 9b:22:31:b9:bf:87:1e:5b:9e:cf:40:31:7f:d9:e4: bf:cc:c2:17:ab:5e:c7:d8:b5:f5:a4:3b:82:73:6f: 82:4f:01:31:1f:13:82:17:d7:8c:3c:aa:43:a1:24: 17:70:9e:d3:c3:11:e6:8c:d4:19:4b:86:7a:f1:0b: 42:5a:4d:5b:d6:e1:35:43:33:c8:3f:8d:3c:92:08: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E3:29:58:99:78:52:25:B5:CB:24:3E:06:AB:69:85:50:7A:99:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/fd9c1375-3461-34b0-a6f9-2a439bc43066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.27.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c7:3b:e3:3f:eb:bc:3c:99:d4:b0:73:88:4c:ee:d2:13:21: a2:cd:9d:44:f8:93:52:59:40:0b:20:72:1b:f5:4a:84:1b:22: df:c6:4c:41:09:16:f2:bd:d8:47:b8:1c:c7:3d:2a:22:9c:af: 24:fc:8e:c7:af:91:67:54:5d:ff:40:9f:cd:12:19:14:cd:e4: fa:d3:25:c9:29:e8:5c:90:78:8b:df:62:d6:f4:e6:4a:a7:4c: b9:23:2b:55:f1:f2:0a:f1:b5:e2:67:03:73:ae:89:71:94:8e: dd:66:6e:7f:27:ce:29:9f:9d:46:56:0e:4d:2c:5a:ed:e5:b9: 85:13:df:37:1e:5f:21:4c:0f:83:cc:14:8e:a7:72:24:40:89: f7:c2:14:a7:d9:33:ce:99:6b:7b:a0:8d:13:7b:95:40:be:7c: 25:22:3f:6d:d6:23:e3:35:85:79:6e:49:86:6d:d0:1b:c9:38: c3:8f:53:ac:cd:af:7e:34:f3:74:57:c7:56:59:27:7d:04:87: 1e:19:16:62:9e:c7:fb:ca:0f:f3:88:71:b4:d5:eb:b7:70:73: ac:1d:9f:31:23:7d:b9:2c:60:11:fd:d5:70:ac:d4:74:26:b2: 99:b4:d8:65:d0:68:a8:c9:2a:b9:f2:27:1e:41:eb:25:7b:9c: c5:f7:c1:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtIRO0nHNdDJ1q0/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDkyMjE5NDQ0N1oXDTI1MTIyMTIwNDQ0N1owLzEtMCsGA1UEAxMk ZGNkNTgwYjEtMTU3Ny00MzNhLWEwYmMtZjMzMmY5ZjBkY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6d9qZ5zlihE9t4AAJ3hzk8q2rV3isIoqfMl G8ikU795u2UbjyX4iJ2J3rOjPR4PJyPeKa29PkDZUpRLAsxNtb0ZOLedmAHt9e2y E75luF4eNRUkgtNF/lxh4lAk/DOYNDP1Op+n5ol8r92RnRJzWbfo5Fc4VE6K5+BK Ts9Oa5sKesXqFcV3U+04lZUrksrjlIS0Nt8yPV+DklseLHoxHm1SJxo2IeJi1GW+ oC5xhfWELL6bIjG5v4ceW57PQDF/2eS/zMIXq17H2LX1pDuCc2+CTwExHxOCF9eM PKpDoSQXcJ7TwxHmjNQZS4Z68QtCWk1b1uE1QzPIP408kghrLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfjKViZeFIltcskPgaraYVQepmaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZmQ5YzEzNzUtMzQ2MS0z NGIwLWE2ZjktMmE0MzliYzQzMDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvHO+M/67w8mdSwc4hM7tITIaLNnUT4k1JZQAsgchv1SoQbIt/GTEEJ FvK92Ee4HMc9KiKcryT8jsevkWdUXf9An80SGRTN5PrTJckp6FyQeIvfYtb05kqn TLkjK1Xx8grxteJnA3OuiXGUjt1mbn8nzimfnUZWDk0sWu3luYUT3zceXyFMD4PM FI6nciRAiffCFKfZM86Za3ugjRN7lUC+fCUiP23WI+M1hXluSYZt0BvJOMOPU6zN r34083RXx1ZZJ30Ehx4ZFmKex/vKD/OIcbTV67dwc6wdnzEjfbksYBH91XCs1HQm spm02GXQaKjJKrnyJx5B6yV7nMX3wZM= -----END CERTIFICATE-----Generated at Wed Nov 5 20:42:27 2025 by rpki-client