$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa File: 398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa (raw, json) Hash identifier: V7UWCydoUvAKDmFUw6EF1av2iOwPrhsqLcOgSLkNzbI= Subject key identifier: 3D:2C:B0:08:39:EB:21:49:37:FE:4A:05:16:7A:80:D7:05:D5:2F:7E Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B5DD1EAC9387B6A524FF1BBC0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 21859 IP address blocks: 72.9.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:ea:c9:38:7b:6a:52:4f:f1:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=6f70c2e2-940f-4342-af23-b2fedf2469ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:86:df:e4:19:f7:62:cf:1c:32:18:50:e9: 84:ff:4e:cb:09:ac:f7:1e:4f:4b:8c:bf:98:bf:c4: 14:28:0e:c9:6a:ef:f9:53:21:9b:ca:4d:3e:5b:9b: 10:d8:07:63:f0:61:fc:19:00:00:ad:3a:64:e6:8c: b8:27:3b:46:f7:c2:ae:f3:ea:ae:80:12:3e:e5:24: 1a:dc:bf:f3:85:98:33:a5:2f:2d:0c:9e:d0:de:d0: 7d:1a:a4:d0:13:bb:d8:01:3a:30:d6:bd:56:09:53: 24:5a:5a:c7:c2:87:12:b9:32:59:7c:a0:94:22:93: b1:76:5a:51:e2:dc:78:ab:91:64:9f:40:1a:7e:a1: c1:e7:a6:b2:0c:74:82:97:4b:4a:76:5e:81:b2:4c: 73:ff:2c:a7:d7:f7:3e:91:5a:dd:49:f4:7a:2e:fe: 43:09:ea:58:d2:92:7a:58:71:9f:34:1e:d0:25:56: 62:36:61:fd:9d:11:42:30:ed:66:9e:cc:05:7e:f2: ed:cb:5a:e5:2f:48:82:f6:08:db:4b:7c:47:79:43: 2b:9d:4f:ca:31:f5:b8:e8:80:c2:8e:b0:ff:2a:de: 1a:db:5e:a0:b9:78:35:a8:a7:c2:b3:33:4e:de:12: ee:01:4b:84:92:a3:33:fc:71:b4:43:40:cf:57:e7: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2C:B0:08:39:EB:21:49:37:FE:4A:05:16:7A:80:D7:05:D5:2F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/398ec4f1-e274-35f6-aaf0-e1291486e4b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7c:a0:c7:53:6c:4d:c1:57:0c:3d:7d:1c:6d:eb:b9:ef:70: 93:d7:60:62:2b:bc:5a:d9:6d:18:06:d3:1b:91:c8:54:fa:1d: 8a:ae:69:b4:6e:ac:eb:5e:4f:67:81:00:aa:5f:a5:77:8a:49: da:00:1f:34:bb:fb:cf:8b:0b:78:91:83:16:01:25:26:cd:78: 8c:46:5c:74:bc:5c:14:56:f7:f5:8f:73:74:aa:c7:92:f9:b1: 38:b8:ba:cd:b2:32:06:16:78:99:8c:ce:2e:7f:b1:75:30:6f: e6:32:8b:ff:67:39:0e:17:bd:60:0f:28:07:62:1e:cb:3c:59: 2e:ae:2c:ce:75:17:23:5f:99:22:bc:2d:36:83:3a:ed:6d:a3: 52:7f:ce:bb:1a:ec:04:0d:61:34:95:94:52:92:c2:0a:46:97: e8:89:20:f0:22:a3:6c:27:79:66:61:20:73:92:91:cf:6a:40: 47:f1:85:1a:f5:2b:a7:ff:52:f3:ea:87:1f:a5:1e:48:7c:72: ef:ec:b4:83:b5:c7:7d:66:96:5a:9c:80:02:9f:68:a7:18:05: 7c:35:c3:17:71:da:a5:f8:90:95:6b:e5:a2:0b:c6:e8:c0:4c: c8:b6:b6:2e:d5:2a:c0:7e:dd:bd:b9:86:70:c4:e5:04:36:85: 50:72:84:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0erJOHtqUk/xu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk NmY3MGMyZTItOTQwZi00MzQyLWFmMjMtYjJmZWRmMjQ2OWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRCG3+QZ92LPHDIYUOmE/07LCaz3Hk9LjL+Y v8QUKA7Jau/5UyGbyk0+W5sQ2Adj8GH8GQAArTpk5oy4JztG98Ku8+qugBI+5SQa 3L/zhZgzpS8tDJ7Q3tB9GqTQE7vYATow1r1WCVMkWlrHwocSuTJZfKCUIpOxdlpR 4tx4q5Fkn0AafqHB56ayDHSCl0tKdl6Bskxz/yyn1/c+kVrdSfR6Lv5DCepY0pJ6 WHGfNB7QJVZiNmH9nRFCMO1mnswFfvLty1rlL0iC9gjbS3xHeUMrnU/KMfW46IDC jrD/Kt4a216guXg1qKfCszNO3hLuAUuEkqMz/HG0Q0DPV+frgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0ssAg56yFJN/5KBRZ6gNcF1S9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzk4ZWM0ZjEtZTI3NC0z NWY2LWFhZjAtZTEyOTE0ODZlNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt8oMdTbE3BVww9fRxt67nvcJPXYGIrvFrZbRgG0xuRyFT6HYquabRu rOteT2eBAKpfpXeKSdoAHzS7+8+LC3iRgxYBJSbNeIxGXHS8XBRW9/WPc3Sqx5L5 sTi4us2yMgYWeJmMzi5/sXUwb+Yyi/9nOQ4XvWAPKAdiHss8WS6uLM51FyNfmSK8 LTaDOu1to1J/zrsa7AQNYTSVlFKSwgpGl+iJIPAio2wneWZhIHOSkc9qQEfxhRr1 K6f/UvPqhx+lHkh8cu/stIO1x31mllqcgAKfaKcYBXw1wxdx2qX4kJVr5aILxujA TMi2ti7VKsB+3b25hnDE5QQ2hVByhJU= -----END CERTIFICATE-----Generated at Sat Oct 11 14:56:33 2025 by rpki-client