$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/e3fc533f-1f1d-38a0-ac14-8b46cb61dae2.roa File: e3fc533f-1f1d-38a0-ac14-8b46cb61dae2.roa (raw, json) Hash identifier: QfH4qSJSOxRX2MpQGjaxtbchOqxwdbP23TYd01xWzs4= Subject key identifier: DA:E1:99:58:CB:EB:62:20:47:4A:83:76:15:7E:1A:D3:6A:24:AE:E2 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B5034A838E4EE845CE9F4CD00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/e3fc533f-1f1d-38a0-ac14-8b46cb61dae2.roa Signing time: Thu 25 Sep 2025 15:58:28 +0000 ROA not before: Thu 25 Sep 2025 15:58:28 +0000 ROA not after: Wed 24 Dec 2025 16:58:28 +0000 asID: 401776 IP address blocks: 72.9.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:50:34:a8:38:e4:ee:84:5c:e9:f4:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 25 15:58:28 2025 GMT Not After : Dec 24 16:58:28 2025 GMT Subject: CN=599bd8ce-2ad3-4380-bae5-cb6304e929b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:7d:90:9b:84:ab:80:d3:5b:aa:72:10:a9: 6d:72:85:9a:63:ae:d4:8b:b7:42:5b:ae:0d:af:29: a3:6d:3c:cb:72:5e:19:bf:60:1b:0c:e8:b8:ba:12: d7:83:e5:d8:2b:2f:7c:a9:97:8d:ae:61:8b:25:8b: 60:ff:2d:1f:03:0f:91:99:d1:bf:89:fe:02:cf:1c: 20:a1:ee:1a:68:29:04:e8:dd:fd:af:ef:9a:1f:4c: 90:1e:c8:27:4d:50:ce:7a:ec:99:5a:ae:33:a1:7e: a0:6d:a4:e2:26:1b:a7:76:30:01:ea:84:9d:25:e4: ae:cc:67:5a:80:5d:d2:33:fe:86:0a:6e:40:e2:93: 76:85:af:22:a2:62:c4:5c:da:23:39:a8:7d:b3:bd: 1e:43:a1:63:59:ef:0e:8b:ea:65:70:18:20:fb:5c: a0:a9:f6:cf:d6:0b:06:c6:51:38:9f:ea:22:12:51: d3:76:09:24:94:51:c9:73:7e:51:58:95:e4:f9:1d: 6f:28:5f:47:86:53:6f:dd:b8:3b:f5:67:f0:4d:d4: 7a:52:3e:1a:bd:b4:26:a5:98:ca:56:73:93:93:87: 51:49:14:01:a4:2c:ec:21:19:45:4f:6f:d9:22:21: d6:6e:2f:22:bf:e1:48:32:92:fc:a7:73:9b:ea:fd: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E1:99:58:CB:EB:62:20:47:4A:83:76:15:7E:1A:D3:6A:24:AE:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/e3fc533f-1f1d-38a0-ac14-8b46cb61dae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:80:99:7c:52:f7:04:3a:a6:af:f5:58:45:7e:a2:fe:a0:0f: 88:ac:fd:57:6a:7a:ae:f7:29:30:db:fd:1a:5a:de:17:1d:e2: 27:96:61:d2:01:5b:0a:29:b4:cc:ef:1c:89:00:a7:23:24:69: 44:b0:e2:2b:f4:fa:17:f7:32:54:3d:4c:3c:ae:b8:98:64:4a: 7f:10:a7:04:e5:5b:b5:dd:17:25:04:05:28:ca:bf:df:ed:7a: 3e:4b:80:2d:29:bd:ae:9b:1d:7a:b4:2e:69:48:d9:87:4c:95: 8f:59:14:2e:75:99:ad:b0:d0:55:27:e6:f7:c1:08:0e:99:bb: 16:51:c0:98:01:62:bd:8e:e8:97:5b:51:1c:35:73:90:7c:b7: 9a:9c:4b:e3:65:0e:14:c5:ba:cc:d6:f9:78:39:ee:00:af:c0: 45:b1:ac:b6:2f:a5:ac:3d:83:2c:91:5f:dd:35:41:bf:01:c3: 79:30:46:73:72:cc:ac:72:f6:2f:e5:79:16:22:f1:e0:6e:a6: 7d:55:45:4d:5a:ea:e0:11:2d:d5:bc:e1:50:ee:28:ae:de:c5: 1d:34:bc:34:d7:fb:3e:b8:c3:97:35:74:ea:79:99:6f:7f:49: 55:16:2f:cd:4a:fa:7f:53:9c:a8:39:46:61:bc:9c:58:4c:40: 96:8a:d9:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtQNKg45O6EXOn0zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyNTE1NTgyOFoXDTI1MTIyNDE2NTgyOFowLzEtMCsGA1UEAxMk NTk5YmQ4Y2UtMmFkMy00MzgwLWJhZTUtY2I2MzA0ZTkyOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisx9kJuEq4DTW6pyEKltcoWaY67Ui7dCW64N rymjbTzLcl4Zv2AbDOi4uhLXg+XYKy98qZeNrmGLJYtg/y0fAw+RmdG/if4Czxwg oe4aaCkE6N39r++aH0yQHsgnTVDOeuyZWq4zoX6gbaTiJhundjAB6oSdJeSuzGda gF3SM/6GCm5A4pN2ha8iomLEXNojOah9s70eQ6FjWe8Oi+plcBgg+1ygqfbP1gsG xlE4n+oiElHTdgkklFHJc35RWJXk+R1vKF9HhlNv3bg79WfwTdR6Uj4avbQmpZjK VnOTk4dRSRQBpCzsIRlFT2/ZIiHWbi8iv+FIMpL8p3Ob6v07FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrhmVjL62IgR0qDdhV+GtNqJK7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZTNmYzUzM2YtMWYxZC0z OGEwLWFjMTQtOGI0NmNiNjFkYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiAmXxS9wQ6pq/1WEV+ov6gD4is/Vdqeq73KTDb/Rpa3hcd4ieWYdIB WwoptMzvHIkApyMkaUSw4iv0+hf3MlQ9TDyuuJhkSn8QpwTlW7XdFyUEBSjKv9/t ej5LgC0pva6bHXq0LmlI2YdMlY9ZFC51ma2w0FUn5vfBCA6ZuxZRwJgBYr2O6Jdb URw1c5B8t5qcS+NlDhTFuszW+Xg57gCvwEWxrLYvpaw9gyyRX901Qb8Bw3kwRnNy zKxy9i/leRYi8eBupn1VRU1a6uARLdW84VDuKK7exR00vDTX+z64w5c1dOp5mW9/ SVUWL81K+n9TnKg5RmG8nFhMQJaK2W8= -----END CERTIFICATE-----Generated at Sat Oct 11 14:55:05 2025 by rpki-client