$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: O9xG5XxcKUX5V0by/MB4v1FKgB8Ealng+3c81c1l1hk= Subject key identifier: 87:D2:05:12:20:9B:A9:1A:9A:B7:0B:28:C2:0E:D8:51:B8:B3:3F:91 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584EF87CC05A961EFA26B631B980 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c0:5a:96:1e:fa:26:b6:31:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=f9099ea2-6356-436b-9279-0972d368629b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4a:f6:2f:88:18:a0:75:fc:0b:2f:73:e1:7d: 27:62:4d:55:18:df:02:2d:87:a8:59:47:90:26:9d: 3c:15:d2:6e:79:8e:7c:97:12:06:b5:27:d3:44:8d: e0:45:b8:6e:db:81:4f:d4:81:a7:09:83:53:1f:b9: 9b:2f:3f:34:84:9e:03:15:53:8f:6c:f4:69:09:9d: f4:47:b9:88:08:dd:7e:ce:75:74:56:29:a7:37:d7: fe:98:22:4a:56:ea:1c:b5:d7:e9:c0:55:ab:59:74: 70:2e:34:1a:ce:84:68:67:64:94:cb:28:f4:3e:30: ab:56:2b:4f:9c:87:77:a5:bd:0a:0d:b8:bc:ce:a6: 93:ea:93:e9:75:d6:0c:10:70:e2:47:47:81:7b:4a: f1:98:cb:91:a7:d2:a1:f2:c3:fc:f8:39:2f:1a:88: 8b:68:07:21:9d:e5:c5:f0:36:5b:0b:f1:b4:18:ca: 17:e2:8e:2b:0f:5a:f4:cd:ad:c4:0b:ac:49:d1:7d: 9a:79:59:3e:66:46:29:7b:0a:99:9a:82:0f:24:55: 02:1a:0e:29:ba:8f:30:56:da:09:25:31:43:6f:5a: 0b:62:16:49:1f:5c:9c:b5:18:fc:b0:86:16:11:37: 6c:a1:a2:cd:d2:28:b0:16:0e:7c:f6:5d:62:3c:dd: 50:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D2:05:12:20:9B:A9:1A:9A:B7:0B:28:C2:0E:D8:51:B8:B3:3F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:6d:5f:0b:43:81:dc:ae:14:bf:39:e2:9d:9c:e3:64:67:bc: 51:cf:3d:c7:42:06:4e:47:58:f3:45:c5:3a:f4:be:18:2d:db: 27:ce:4f:7d:c9:5c:3f:88:13:05:d0:6f:da:8c:7e:d8:98:4a: 4b:c4:1e:33:b9:22:90:5d:e1:a9:1a:c7:fd:a2:f5:9e:19:c1: 8d:99:96:20:e9:de:75:79:83:58:3a:b4:18:5c:e3:11:a2:2b: 9d:d1:07:8a:cb:da:7d:61:7a:49:7a:1a:72:f8:b5:79:bd:bb: 7f:02:40:76:f6:e4:0e:af:ab:7d:e7:80:fb:53:0e:31:01:49: ff:6b:ca:b2:75:1d:27:35:b2:56:61:8b:52:aa:f2:e0:20:69: 28:be:0b:83:41:64:22:f4:58:1b:72:a6:26:1d:5d:06:a5:90: 05:9f:3b:e5:20:44:85:fd:8f:2b:4a:7e:99:68:9a:69:0e:40: 5c:c2:a9:a2:fc:b6:9e:1f:23:15:04:47:32:57:b3:2d:e8:76: 86:f9:7e:d3:1f:a9:69:e9:b9:8b:a9:08:85:3d:47:88:ca:6f: 29:88:08:a1:53:a5:eb:bf:27:e6:39:ee:03:20:c9:c7:52:7f: b3:ec:7c:e2:51:c3:6f:80:74:51:9f:03:93:71:4a:be:d3:e9: 23:b5:a8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fMBalh76JrYxuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjkwOTllYTItNjM1Ni00MzZiLTkyNzktMDk3MmQzNjg2MjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUr2L4gYoHX8Cy9z4X0nYk1VGN8CLYeoWUeQ Jp08FdJueY58lxIGtSfTRI3gRbhu24FP1IGnCYNTH7mbLz80hJ4DFVOPbPRpCZ30 R7mICN1+znV0VimnN9f+mCJKVuoctdfpwFWrWXRwLjQazoRoZ2SUyyj0PjCrVitP nId3pb0KDbi8zqaT6pPpddYMEHDiR0eBe0rxmMuRp9Kh8sP8+DkvGoiLaAchneXF 8DZbC/G0GMoX4o4rD1r0za3EC6xJ0X2aeVk+ZkYpewqZmoIPJFUCGg4puo8wVtoJ JTFDb1oLYhZJH1yctRj8sIYWETdsoaLN0iiwFg589l1iPN1QGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfSBRIgm6kamrcLKMIO2FG4sz+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINtXwtDgdyuFL854p2c42RnvFHPPcdCBk5HWPNFxTr0vhgt2yfOT33J XD+IEwXQb9qMftiYSkvEHjO5IpBd4akax/2i9Z4ZwY2ZliDp3nV5g1g6tBhc4xGi K53RB4rL2n1hekl6GnL4tXm9u38CQHb25A6vq33ngPtTDjEBSf9ryrJ1HSc1slZh i1Kq8uAgaSi+C4NBZCL0WBtypiYdXQalkAWfO+UgRIX9jytKfplommkOQFzCqaL8 tp4fIxUERzJXsy3odob5ftMfqWnpuYupCIU9R4jKbymICKFTpeu/J+Y57gMgycdS f7PsfOJRw2+AdFGfA5NxSr7T6SO1qKY= -----END CERTIFICATE-----Generated at Mon Oct 5 00:49:41 2026 by rpki-client