$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa File: ec2c1448-7a83-32e2-af8d-be65e30fd762.roa (raw, json) Hash identifier: EePk9Z8CL4CFexhlnTiubeDTpUZS/Bc+k1Dnfh7K84E= Subject key identifier: F0:22:49:CE:D4:EC:F6:4D:9F:3E:65:0E:31:C2:1D:C8:35:A0:4B:D3 Certificate issuer: /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Certificate serial: 010D0C9F4328584AD3A0F6A7C0045CCE34B1EB80 Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 15123 IP address blocks: 72.250.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f6:a7:c0:04:5c:ce:34:b1:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=941fcaaa-38cb-4650-9d03-62512e64839a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:cf:e7:d7:b9:be:2b:58:99:24:ba:98:5a: 6f:71:84:5f:ba:67:f1:e5:24:3f:ee:e7:22:2c:0b: f5:bc:6f:dc:ff:b9:49:2c:75:30:0b:ff:e3:da:5a: 55:b1:bc:f9:c9:bf:d6:11:02:67:a3:a3:8f:c2:23: cd:c3:c3:f9:f9:28:d1:12:f0:40:a4:28:dc:44:ab: c8:af:69:88:94:f5:af:e9:6e:bd:2c:42:79:17:3f: 91:97:d4:5b:4c:86:b5:01:05:10:8a:03:0f:38:c3: ed:79:05:ea:9a:00:c9:45:11:66:ed:72:31:70:c5: d1:5f:d5:93:fe:60:50:9b:f8:c3:64:91:09:a7:24: 03:4b:4b:63:43:01:65:18:5d:24:ac:ee:2f:d4:48: 1d:58:56:65:0a:61:2f:45:15:13:08:11:0b:7d:f1: 2c:46:3f:e8:64:20:b3:88:d0:23:2c:98:ea:61:a9: be:4a:ec:49:4d:da:ec:2e:82:ed:e6:e9:8d:87:8b: db:60:4e:4b:8a:9d:b3:4d:80:1c:b0:32:e9:47:20: e8:ae:33:46:fc:5f:b4:7a:39:d6:11:26:2e:99:d7: 03:ed:b5:1d:5d:9c:a6:cc:1b:95:4e:0b:11:bd:be: e1:81:49:18:07:90:7e:83:28:35:49:3c:80:8e:6f: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:22:49:CE:D4:EC:F6:4D:9F:3E:65:0E:31:C2:1D:C8:35:A0:4B:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/ec2c1448-7a83-32e2-af8d-be65e30fd762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl X509v3 Authority Key Identifier: keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer sbgp-ipAddrBlock: critical IPv4: 72.250.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6e:c5:d6:bf:ce:f4:19:ae:d6:91:4d:7e:55:98:80:14:76: 40:7a:88:c1:5f:b2:b3:73:d2:41:fc:52:18:06:5d:f1:24:d4: 89:13:9b:c7:98:24:8d:5c:1a:cf:c7:ed:f0:19:c2:a1:97:45: bc:01:b8:d9:e0:45:a6:1a:d3:80:d3:e1:8a:30:20:03:2a:72: d1:7e:64:62:be:6c:e0:2c:e1:7e:a6:e5:7a:e6:6f:55:57:2a: ad:fd:8f:1d:2d:6a:b3:27:79:94:5e:5c:d0:57:0f:2e:5d:81: 2f:d1:92:97:be:e7:5b:c0:cc:5f:1f:19:62:35:bd:b1:00:85: 70:29:c8:ba:fb:91:1f:f1:82:fb:86:ba:96:60:be:3d:e7:d2: 74:35:50:f7:00:82:f1:80:3f:60:6f:fa:9f:11:10:f0:08:6e: 03:ef:6e:87:10:42:e1:72:9c:1f:28:af:bb:38:e5:90:90:ad: f5:7a:f4:5b:0d:0c:2a:10:18:7b:05:2b:f5:6e:0a:03:09:0f: 45:6d:96:cf:2b:de:7e:43:96:8b:21:8a:c6:20:7a:aa:d4:a0: 25:4f:95:fa:f1:a1:3b:de:25:52:54:c3:4f:51:ca:22:95:25: 79:89:29:17:ea:da:03:bb:50:f7:9a:af:46:5f:f2:d8:9e:86: b5:20:bb:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPanwARczjSx64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzMDdlNWQtY2ZhNC00MzA0LThiMjktZWYyODlkNGEz ODdkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTQxZmNhYWEtMzhjYi00NjUwLTlkMDMtNjI1MTJlNjQ4MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXvP59e5vitYmSS6mFpvcYRfumfx5SQ/7uci LAv1vG/c/7lJLHUwC//j2lpVsbz5yb/WEQJno6OPwiPNw8P5+SjREvBApCjcRKvI r2mIlPWv6W69LEJ5Fz+Rl9RbTIa1AQUQigMPOMPteQXqmgDJRRFm7XIxcMXRX9WT /mBQm/jDZJEJpyQDS0tjQwFlGF0krO4v1EgdWFZlCmEvRRUTCBELffEsRj/oZCCz iNAjLJjqYam+SuxJTdrsLoLt5umNh4vbYE5Lip2zTYAcsDLpRyDorjNG/F+0ejnW ESYumdcD7bUdXZymzBuVTgsRvb7hgUkYB5B+gyg1STyAjm8u1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAiSc7U7PZNnz5lDjHCHcg1oEvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMw N2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4OWQ0YTM4N2QvZWMyYzE0NDgtN2E4My0z MmUyLWFmOGQtYmU2NWUzMGZkNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmMzMDdlNWQtY2ZhNC00MzA0LThi MjktZWYyODlkNGEzODdkL2JjMzA3ZTVkLWNmYTQtNDMwNC04YjI5LWVmMjg5ZDRh Mzg3ZC5jcmwwHwYDVR0jBBgwFoAU62IHpERFM2GPZDoMLR26uW9u0TwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iYzMwN2U1ZC1jZmE0LTQzMDQtOGIyOS1lZjI4 OWQ0YTM4N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASProMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZuxda/zvQZrtaRTX5VmIAUdkB6iMFfsrNz0kH8UhgGXfEk1IkTm8eY JI1cGs/H7fAZwqGXRbwBuNngRaYa04DT4YowIAMqctF+ZGK+bOAs4X6m5Xrmb1VX Kq39jx0tarMneZReXNBXDy5dgS/Rkpe+51vAzF8fGWI1vbEAhXApyLr7kR/xgvuG upZgvj3n0nQ1UPcAgvGAP2Bv+p8REPAIbgPvbocQQuFynB8or7s45ZCQrfV69FsN DCoQGHsFK/VuCgMJD0Vtls8r3n5DloshisYgeqrUoCVPlfrxoTveJVJUw09RyiKV JXmJKRfq2gO7UPear0Zf8tiehrUguyE= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:59 2025 by rpki-client