$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa File: 85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa (raw, json) Hash identifier: lrPVq0vxwYCFvaoGUEGpGrhpAUEK4mfdGjVvF/x9VZQ= Subject key identifier: C5:B1:3D:2B:1B:82:6E:A6:E7:70:D0:1D:A7:C9:6A:57:80:01:68:1B Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D5780D2AC6D7D12851BE6C300 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa Signing time: Mon 30 Mar 2026 16:16:28 +0000 ROA not before: Mon 30 Mar 2026 16:16:28 +0000 ROA not after: Sun 28 Jun 2026 16:16:28 +0000 asID: 212238 IP address blocks: 72.9.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:80:d2:ac:6d:7d:12:85:1b:e6:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 30 16:16:28 2026 GMT Not After : Jun 28 16:16:28 2026 GMT Subject: CN=8095d104-d893-4d81-9f91-d48c0bf7da96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6c:a5:ec:5d:2d:fb:5a:31:ee:8a:e8:7d:4e: 0b:8b:af:b3:d3:91:92:36:6e:31:14:47:0a:d6:04: a2:16:d5:72:ef:f6:c5:47:47:1c:ee:e8:a6:db:22: 7f:11:d8:04:fb:a8:82:9c:23:b2:6c:6b:b2:e9:e4: f7:d0:63:e9:b4:a4:c6:35:be:81:7d:da:90:ea:6c: 79:1c:50:c7:0d:fb:41:c2:1e:3f:df:fd:3d:59:f3: 0a:44:52:78:f5:a4:e5:0c:bf:77:fd:cb:a1:44:ca: 0b:82:dd:49:e4:8c:6a:1c:60:2e:0a:ee:60:7d:94: 48:fc:6d:c1:cf:c2:93:1f:3c:a9:d8:9a:20:7e:d4: fb:ae:81:a1:73:5f:10:6d:41:31:82:51:08:4e:45: 9a:1a:79:8a:f5:17:55:c7:a2:b2:9e:b9:83:b3:6e: 6f:d9:a6:e4:57:5d:d2:69:f3:c7:5e:6d:fe:83:65: 63:71:84:86:21:da:18:cb:51:ff:45:f8:0f:30:1b: 17:36:27:36:f9:10:f0:7b:38:7c:1f:ce:83:55:73: cc:43:4b:5d:88:23:39:89:73:7c:4e:92:65:59:86: e6:93:3f:0d:77:78:af:6e:b2:a3:16:b4:48:e9:e9: 24:76:c2:9c:87:b1:ac:7f:04:4d:73:aa:e4:e3:f2: a0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:3D:2B:1B:82:6E:A6:E7:70:D0:1D:A7:C9:6A:57:80:01:68:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:88:93:bf:b7:19:57:c9:da:2f:96:0a:0e:bb:3e:1d:27:2d: 29:2c:63:a8:ff:e4:f4:a6:bf:8b:c9:7c:9c:0c:fa:57:2e:aa: f0:91:d4:9a:92:d9:df:f1:83:7c:8a:be:74:40:dc:49:ea:9a: 15:c1:e2:50:3e:b0:0e:fb:18:51:86:67:91:4e:79:f2:84:d1: 83:45:4a:4b:0b:af:cd:4e:73:45:d7:85:4a:80:8a:23:0e:8f: 78:06:d3:1d:f8:3d:e0:75:6f:1d:a4:9f:ac:c3:6e:70:cf:59: 4c:ba:cb:8c:c6:70:93:a8:e0:13:d2:fb:c5:17:c8:9d:7a:a1: 7f:78:fc:bb:6c:8d:37:3e:23:c8:d0:48:d4:42:70:0e:84:11: 62:4b:cf:7e:ba:d8:bf:ef:8d:c3:ec:03:55:3d:d3:a8:28:c4: c0:77:6b:57:b1:d0:1b:62:1d:9d:79:d9:aa:24:fd:83:b8:d1: 13:e2:d6:06:f0:ae:8e:c2:2f:3b:17:de:e6:ef:e5:96:78:d2: de:2d:a8:4c:a8:e1:58:7f:c9:cd:f5:0f:92:96:75:11:0d:b9: ef:63:9e:24:20:b9:46:5c:60:f5:31:88:e2:28:82:1a:e4:42: f1:38:4d:f8:85:99:e7:1d:28:28:bc:d3:03:05:d0:6e:48:d2: 4f:61:50:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XgNKsbX0ShRvmwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMzMDE2MTYyOFoXDTI2MDYyODE2MTYyOFowLzEtMCsGA1UEAxMk ODA5NWQxMDQtZDg5My00ZDgxLTlmOTEtZDQ4YzBiZjdkYTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWyl7F0t+1ox7orofU4Li6+z05GSNm4xFEcK 1gSiFtVy7/bFR0cc7uim2yJ/EdgE+6iCnCOybGuy6eT30GPptKTGNb6BfdqQ6mx5 HFDHDftBwh4/3/09WfMKRFJ49aTlDL93/cuhRMoLgt1J5IxqHGAuCu5gfZRI/G3B z8KTHzyp2JogftT7roGhc18QbUExglEITkWaGnmK9RdVx6KynrmDs25v2abkV13S afPHXm3+g2VjcYSGIdoYy1H/RfgPMBsXNic2+RDwezh8H86DVXPMQ0tdiCM5iXN8 TpJlWYbmkz8Nd3ivbrKjFrRI6ekkdsKch7GsfwRNc6rk4/KgYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWxPSsbgm6m53DQHafJaleAAWgbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODViMjNmZTctMTZiZi0z NWI5LWFlMDgtMDlhNGVjZGRlMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAn/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWIk7+3GVfJ2i+WCg67Ph0nLSksY6j/5PSmv4vJfJwM+lcuqvCR1JqS 2d/xg3yKvnRA3EnqmhXB4lA+sA77GFGGZ5FOefKE0YNFSksLr81Oc0XXhUqAiiMO j3gG0x34PeB1bx2kn6zDbnDPWUy6y4zGcJOo4BPS+8UXyJ16oX94/LtsjTc+I8jQ SNRCcA6EEWJLz3662L/vjcPsA1U906goxMB3a1ex0BtiHZ152aok/YO40RPi1gbw ro7CLzsX3ubv5ZZ40t4tqEyo4Vh/yc31D5KWdRENue9jniQguUZcYPUxiOIoghrk QvE4TfiFmecdKCi80wMF0G5I0k9hUKg= -----END CERTIFICATE-----Generated at Sat Apr 11 02:44:48 2026 by rpki-client