$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa File: 34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa (raw, json) Hash identifier: hChEZF3SM3JS0paSE+0OgNjbDgl6EzObUn7cikcMXPE= Subject key identifier: 1B:31:A3:0E:BE:88:B2:97:26:96:95:34:9F:30:2F:E4:3A:17:4C:62 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584EA7941EF734CE25A921B38700 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 834 IP address blocks: 72.9.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:1e:f7:34:ce:25:a9:21:b3:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=98d4bd29-8110-43f7-a91e-f1021d007a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0c:d9:4b:50:ac:c7:33:cd:78:1f:14:90:78: 18:ff:11:ab:68:6a:2d:62:4c:74:88:a9:2e:e6:f4: 41:25:b8:9b:5c:0e:74:23:90:c3:1e:90:a6:89:92: 42:59:d5:b7:8d:3b:95:bf:3c:68:ff:12:d5:98:b9: 96:56:8b:64:49:40:ed:52:7c:49:74:c1:b5:7f:ba: db:8e:e4:af:08:f4:ae:af:71:0e:27:a3:ae:4d:cb: db:40:2b:c5:14:c2:7c:70:5c:7f:1c:50:93:94:d3: 29:33:d3:82:c7:6b:18:2e:b7:50:a0:bf:be:6a:8f: a8:96:7d:e9:d7:33:a3:0c:e0:ff:2b:de:bb:52:09: ab:49:8b:e9:5c:06:6c:8f:89:1e:89:16:03:dd:07: 05:7f:86:70:6d:3a:76:03:af:59:69:a4:67:9e:c5: 73:ad:3b:ed:f2:8e:41:79:31:78:70:f2:5d:2d:2d: de:32:4f:68:39:9d:aa:79:52:be:38:27:8a:c2:0c: ce:24:0d:e3:3a:36:86:d2:e6:93:39:7c:d7:d7:c9: 02:23:6a:f5:c7:d3:c7:99:95:50:05:7a:0b:e5:fc: 36:56:d7:1d:a6:38:a1:48:a5:34:18:82:6b:13:83: 75:4e:b2:dd:3f:5b:29:7e:66:92:9a:34:2a:91:51: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:A3:0E:BE:88:B2:97:26:96:95:34:9F:30:2F:E4:3A:17:4C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c5:93:6f:53:2e:f9:11:fc:5c:c5:28:11:5e:3e:97:4f:b1: 4f:10:4d:63:25:0b:34:0c:b1:a7:62:3d:39:35:90:8b:21:d6: 83:43:c8:e7:50:cf:71:d9:d8:c1:b6:a8:db:13:51:e6:3f:af: b8:3e:68:da:97:fc:bc:2b:ca:1d:ad:de:ee:9a:11:46:de:68: 94:6e:78:ff:4a:3b:33:20:14:7d:8e:28:52:db:96:79:08:9e: 16:d6:b8:9d:12:a3:7c:cf:e1:bb:40:ad:ff:43:f8:bb:74:89: d3:7b:07:98:87:fb:7e:fb:d6:4b:09:3d:e4:83:7a:12:11:db: 30:00:4f:3d:ff:a9:e7:3a:84:f6:3e:fd:88:8f:95:e6:9b:7c: 55:09:25:c8:b2:4a:2f:a3:26:aa:62:92:da:6f:d1:27:ce:cb: 27:05:69:a6:eb:5a:19:0b:25:12:b5:15:65:c9:2e:1c:8f:f9: 23:a6:43:cb:76:38:21:f6:88:0b:d5:1d:e8:bd:be:c7:f8:38: 06:51:d2:6a:66:26:36:1f:0e:04:d3:e5:59:bf:92:f7:c0:5d: 1d:13:63:70:be:68:51:e8:32:3d:ab:a7:ad:a3:7e:c0:d6:f2: 1a:2b:1f:84:33:c1:75:25:f4:a7:c3:6a:a4:c1:0c:97:f1:ec: 02:33:3d:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlB73NM4lqSGzhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OThkNGJkMjktODExMC00M2Y3LWE5MWUtZjEwMjFkMDA3YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAzZS1CsxzPNeB8UkHgY/xGraGotYkx0iKku 5vRBJbibXA50I5DDHpCmiZJCWdW3jTuVvzxo/xLVmLmWVotkSUDtUnxJdMG1f7rb juSvCPSur3EOJ6OuTcvbQCvFFMJ8cFx/HFCTlNMpM9OCx2sYLrdQoL++ao+oln3p 1zOjDOD/K967UgmrSYvpXAZsj4keiRYD3QcFf4ZwbTp2A69ZaaRnnsVzrTvt8o5B eTF4cPJdLS3eMk9oOZ2qeVK+OCeKwgzOJA3jOjaG0uaTOXzX18kCI2r1x9PHmZVQ BXoL5fw2VtcdpjihSKU0GIJrE4N1TrLdP1spfmaSmjQqkVGaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsxow6+iLKXJpaVNJ8wL+Q6F0xiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzRhNzE1NDItM2U2Yi0z MWMzLWFmN2YtYjBmN2M4NmYwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Fk29TLvkR/FzFKBFePpdPsU8QTWMlCzQMsadiPTk1kIsh1oNDyOdQ z3HZ2MG2qNsTUeY/r7g+aNqX/Lwryh2t3u6aEUbeaJRueP9KOzMgFH2OKFLblnkI nhbWuJ0So3zP4btArf9D+Lt0idN7B5iH+3771ksJPeSDehIR2zAATz3/qec6hPY+ /YiPleabfFUJJciySi+jJqpiktpv0SfOyycFaabrWhkLJRK1FWXJLhyP+SOmQ8t2 OCH2iAvVHei9vsf4OAZR0mpmJjYfDgTT5Vm/kvfAXR0TY3C+aFHoMj2rp62jfsDW 8horH4QzwXUl9KfDaqTBDJfx7AIzPVw= -----END CERTIFICATE-----Generated at Wed Aug 26 20:26:11 2026 by rpki-client