$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa File: 34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa (raw, json) Hash identifier: bnvKLvOHVBs0ISKUEoftBYwkjNYkX+yk9vCBhpguKUQ= Subject key identifier: 61:34:2F:96:E9:2D:45:01:7C:42:52:3F:C2:18:D0:66:2D:D3:B1:22 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B4DE4B847EF745215F95DED00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa Signing time: Wed 24 Sep 2025 20:05:47 +0000 ROA not before: Wed 24 Sep 2025 20:05:47 +0000 ROA not after: Tue 23 Dec 2025 21:05:47 +0000 asID: 834 IP address blocks: 72.9.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:e4:b8:47:ef:74:52:15:f9:5d:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 24 20:05:47 2025 GMT Not After : Dec 23 21:05:47 2025 GMT Subject: CN=2a7c0d85-9a17-4ac2-831a-3a83139ce721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:7a:5f:88:68:53:b9:ed:0a:2e:f3:ad:f3: 2f:6e:ac:a3:7f:e2:b7:9e:f9:0a:c8:d8:a5:fb:54: b0:84:a8:1c:56:d1:83:bb:9f:5b:b9:ef:1f:41:59: 2b:75:ce:0a:1e:16:c1:5c:19:cb:87:a1:9c:d7:69: 19:04:a4:84:59:a3:88:e8:80:b0:df:c9:37:b9:93: 32:ab:e7:2f:b4:58:92:6e:4d:e3:37:9d:13:d9:d6: 2f:02:19:da:3a:a9:4f:bb:53:86:ee:e1:1c:ad:71: a7:89:5e:9a:bf:f3:c4:df:86:fd:cb:f5:cc:34:fa: 68:d4:6a:e6:96:12:cc:f3:a9:51:fd:de:96:b7:01: b2:39:ae:97:30:27:b9:12:d8:84:b2:f2:5f:bd:26: fe:f0:7c:09:8a:d5:98:d8:d1:95:0e:31:51:ef:bd: c1:76:ba:8b:23:47:39:3d:f1:ea:8a:d2:f2:f6:18: ea:26:1a:ec:6b:3e:bf:7f:d5:6e:2a:da:37:4a:80: 69:ce:e7:12:b7:5b:b0:9f:eb:a5:42:4f:64:c2:b9: 15:f1:5d:a4:30:4a:5b:ca:19:c7:af:b6:f0:a0:dc: 45:4c:80:f7:e0:20:b4:14:ea:5d:75:c4:55:67:c4: a1:28:46:78:b3:36:3a:ce:8a:29:01:95:a8:37:f6: ca:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:2F:96:E9:2D:45:01:7C:42:52:3F:C2:18:D0:66:2D:D3:B1:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:22:db:66:a6:00:81:51:c2:47:3b:3b:74:1f:f4:3c:5e:56: ef:22:de:b4:d1:40:5c:30:64:66:3f:e1:35:12:e4:5b:91:f6: 93:cc:c6:7a:32:e0:3e:8c:5a:55:14:84:7f:32:05:44:b5:40: 6a:7f:2f:24:c1:0c:9b:19:fa:b2:2b:74:af:40:78:a7:31:94: c1:6a:d1:5d:af:e7:88:a5:9b:f6:00:b4:3d:85:09:4e:5b:ec: d7:75:ab:21:e4:4e:36:88:44:8d:eb:4f:2b:bb:e0:e3:c9:48: bb:e9:35:c6:8a:70:49:03:03:58:50:c4:84:72:94:15:ad:72: 8b:94:91:0c:aa:42:b3:ea:35:15:f1:99:99:c0:97:f2:8c:51: 36:dc:78:c2:17:a5:ea:6b:9f:d8:32:b0:6a:24:97:ef:ff:8e: 45:4a:50:de:bd:56:77:5d:1e:cd:78:6d:f9:c0:15:b0:c1:ce: 95:e8:06:d1:d4:14:21:d5:0c:b8:1b:6a:03:f5:e7:ed:46:b1: c2:d6:dc:8f:a7:98:4e:a8:4b:3b:e9:df:fc:14:df:53:6b:6c: 08:5d:ac:85:88:4c:a9:bb:49:72:81:ca:38:56:f8:71:8c:cf: c3:5c:47:d1:10:0a:65:35:60:f0:8d:9e:5e:69:7c:2e:2e:17: 1a:9b:27:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtN5LhH73RSFfld7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyNDIwMDU0N1oXDTI1MTIyMzIxMDU0N1owLzEtMCsGA1UEAxMk MmE3YzBkODUtOWExNy00YWMyLTgzMWEtM2E4MzEzOWNlNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstN6X4hoU7ntCi7zrfMvbqyjf+K3nvkKyNil +1SwhKgcVtGDu59bue8fQVkrdc4KHhbBXBnLh6Gc12kZBKSEWaOI6ICw38k3uZMy q+cvtFiSbk3jN50T2dYvAhnaOqlPu1OG7uEcrXGniV6av/PE34b9y/XMNPpo1Grm lhLM86lR/d6WtwGyOa6XMCe5EtiEsvJfvSb+8HwJitWY2NGVDjFR773BdrqLI0c5 PfHqitLy9hjqJhrsaz6/f9VuKto3SoBpzucSt1uwn+ulQk9kwrkV8V2kMEpbyhnH r7bwoNxFTID34CC0FOpddcRVZ8ShKEZ4szY6zoopAZWoN/bKGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE0L5bpLUUBfEJSP8IY0GYt07EiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzRhNzE1NDItM2U2Yi0z MWMzLWFmN2YtYjBmN2M4NmYwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIi22amAIFRwkc7O3Qf9DxeVu8i3rTRQFwwZGY/4TUS5FuR9pPMxnoy 4D6MWlUUhH8yBUS1QGp/LyTBDJsZ+rIrdK9AeKcxlMFq0V2v54ilm/YAtD2FCU5b 7Nd1qyHkTjaIRI3rTyu74OPJSLvpNcaKcEkDA1hQxIRylBWtcouUkQyqQrPqNRXx mZnAl/KMUTbceMIXpeprn9gysGokl+//jkVKUN69VnddHs14bfnAFbDBzpXoBtHU FCHVDLgbagP15+1GscLW3I+nmE6oSzvp3/wU31NrbAhdrIWITKm7SXKByjhW+HGM z8NcR9EQCmU1YPCNnl5pfC4uFxqbJ2w= -----END CERTIFICATE-----Generated at Sat Oct 11 14:55:05 2025 by rpki-client