$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa File: 682a3f5a-f894-3ed6-9812-0733ea3f0551.roa (raw, json) Hash identifier: 2xL574QWtsu0SC6xVgWKPwGyZOkam0hdG2ETahd3kDw= Subject key identifier: 50:9E:00:5C:58:53:5D:1F:6D:18:7D:17:60:6C:E3:59:DF:67:4C:9F Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584AD3A0F9AFFC30D259366A3C6D Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 27446 IP address blocks: 72.250.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f9:af:fc:30:d2:59:36:6a:3c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=40d7e936-108f-497e-8e47-a3a58780b97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:4d:84:f8:b0:40:ca:05:12:08:c2:68:e8: 93:cc:46:4e:9e:66:ce:f4:13:5c:d2:6d:ce:fb:9d: d4:b1:6c:65:c4:9f:44:8c:41:5e:48:ec:4a:34:4b: cf:75:8a:d9:de:70:50:6a:9d:dd:2b:eb:21:b6:8b: 1f:f7:82:93:20:c1:3c:ac:a8:0a:73:47:cf:16:89: 7c:db:fe:7a:21:4c:df:64:68:4d:d7:a8:3f:88:1d: bc:ca:f7:ff:9c:ca:6d:d7:e4:cc:61:0e:23:ba:28: a5:91:c7:38:e4:4b:4e:05:3a:46:95:6b:d6:95:bd: be:fc:77:fe:ce:2a:7c:88:ed:82:84:b1:37:a1:e2: 72:74:38:ee:12:7c:90:e2:5c:5b:c0:10:0c:4c:f1: 96:0f:01:8e:3c:67:0d:52:7d:72:f6:6a:6f:bc:56: be:9b:d3:9b:63:a1:49:66:41:87:ee:c3:68:61:4a: d0:eb:26:a8:ed:1d:d1:e5:51:2b:b4:42:76:85:16: 59:d6:ce:ca:2b:6a:fa:bd:cb:67:00:58:d4:02:10: ea:60:a5:84:97:c9:47:82:2c:9f:ab:98:e4:c1:23: 38:58:32:85:38:6d:84:0a:87:a1:37:b5:f8:19:05: 9e:f1:0b:9c:54:b8:73:58:e2:a0:f0:0e:54:f9:5c: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:00:5C:58:53:5D:1F:6D:18:7D:17:60:6C:E3:59:DF:67:4C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/682a3f5a-f894-3ed6-9812-0733ea3f0551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c3:6f:e5:e0:d7:fb:09:b0:b2:67:e7:9c:93:0d:66:f0:21: 2d:99:87:0f:2f:91:69:56:5d:41:dd:41:0c:fc:14:d7:f6:78: 71:64:7e:ad:d9:b8:c7:f5:3c:23:d4:98:6f:77:e5:cb:0a:03: 5b:7a:d4:4a:42:d7:e7:3a:73:d7:f0:5a:d7:9d:69:c7:06:54: 41:28:4b:99:f2:da:b9:6a:f5:95:f8:58:c2:af:0e:23:8f:ee: ab:53:24:f7:9e:a6:8d:12:a3:9d:05:af:83:de:d9:01:1c:dd: 2e:c9:47:bc:26:13:cd:58:7c:ac:e7:41:2c:17:7b:14:dd:1f: 8d:89:06:65:9f:9c:ca:ec:af:d2:eb:91:8a:d4:cd:e3:b0:4f: 67:19:f8:9c:f8:97:7f:a1:80:55:d5:84:c9:15:fd:63:b7:8a: 7e:57:3a:d8:bc:92:be:ab:4c:91:26:1a:e2:35:ec:f6:56:90: aa:95:fc:49:97:d6:2a:39:8e:3e:b2:a5:ca:1b:f0:cc:a3:76: 04:a3:d4:dc:e2:e0:19:3e:96:73:34:ec:b9:f4:73:02:b3:2e: 80:0f:aa:ea:67:48:4a:f1:e1:04:87:56:a0:9b:86:5c:4d:6a: 40:8b:03:ea:af:ec:a8:84:3c:e0:5e:0c:c7:a8:1c:61:fd:42: d4:7a:c2:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPmv/DDSWTZqPG0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NDBkN2U5MzYtMTA4Zi00OTdlLThlNDctYTNhNTg3ODBiOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxpNhPiwQMoFEgjCaOiTzEZOnmbO9BNc0m3O +53UsWxlxJ9EjEFeSOxKNEvPdYrZ3nBQap3dK+shtosf94KTIME8rKgKc0fPFol8 2/56IUzfZGhN16g/iB28yvf/nMpt1+TMYQ4juiilkcc45EtOBTpGlWvWlb2+/Hf+ zip8iO2ChLE3oeJydDjuEnyQ4lxbwBAMTPGWDwGOPGcNUn1y9mpvvFa+m9ObY6FJ ZkGH7sNoYUrQ6yao7R3R5VErtEJ2hRZZ1s7KK2r6vctnAFjUAhDqYKWEl8lHgiyf q5jkwSM4WDKFOG2ECoehN7X4GQWe8QucVLhzWOKg8A5U+VzehQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCeAFxYU10fbRh9F2Bs41nfZ0yfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvNjgyYTNmNWEtZjg5NC0z ZWQ2LTk4MTItMDczM2VhM2YwNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbDb+Xg1/sJsLJn55yTDWbwIS2Zhw8vkWlWXUHdQQz8FNf2eHFkfq3Z uMf1PCPUmG935csKA1t61EpC1+c6c9fwWtedaccGVEEoS5ny2rlq9ZX4WMKvDiOP 7qtTJPeepo0So50Fr4Pe2QEc3S7JR7wmE81YfKznQSwXexTdH42JBmWfnMrsr9Lr kYrUzeOwT2cZ+Jz4l3+hgFXVhMkV/WO3in5XOti8kr6rTJEmGuI17PZWkKqV/EmX 1io5jj6ypcob8MyjdgSj1Nzi4Bk+lnM07Ln0cwKzLoAPqupnSErx4QSHVqCbhlxN akCLA+qv7KiEPOBeDMeoHGH9QtR6wqo= -----END CERTIFICATE-----Generated at Sun Aug 24 04:29:49 2025 by rpki-client