$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa File: ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa (raw, json) Hash identifier: lF6lkY/yk/XV8QF2VqSUic53nJEbNGqIiNRH5wOgjP8= Subject key identifier: 2C:D6:B8:A0:38:87:5F:87:6A:9E:96:6C:80:6F:A0:16:45:0F:D7:82 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584ED9C765EA66EA5EFD65351F80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 62240 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:65:ea:66:ea:5e:fd:65:35:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=d6c06acf-e2bb-4fae-8d91-3e0be594ec16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:eb:4b:9f:0d:53:83:75:fa:bf:bd:ba:3a:ef: f9:0d:57:ce:1a:a1:0d:24:ee:45:0e:48:12:d4:a4: a0:b8:6b:dd:1c:c8:1e:38:b7:af:94:cb:e9:4c:c7: f4:df:92:59:12:6e:12:26:09:6e:99:13:98:ee:57: 73:13:9e:ef:58:02:5f:35:4a:16:a7:74:78:86:c2: 02:30:f4:51:b0:22:ad:78:a8:94:92:0e:63:7e:60: 5e:7e:21:98:68:16:97:64:d2:46:81:6b:b1:64:e5: fd:cf:41:fe:15:e0:86:66:c6:15:ac:c0:36:c9:ae: 4c:88:1b:e4:73:40:6c:38:ca:99:0f:cb:82:aa:cb: b5:e7:13:29:77:31:08:2e:80:79:a1:4b:f9:6e:c9: 86:02:7d:7e:50:b4:f4:67:a3:fe:5e:64:9a:55:c4: 09:f7:3a:86:fb:16:a0:be:07:7b:21:ea:04:e1:b5: f8:08:0b:ec:1e:d4:dc:e7:78:3a:70:20:b8:e8:6d: 92:14:9c:6a:2c:38:63:c0:e3:88:ff:d4:bc:00:9c: e2:22:04:be:f9:e0:65:8a:7d:cb:87:79:c2:56:31: 15:b4:63:9f:3c:d7:dd:cc:1d:b3:a7:f2:c1:30:c1: f7:1f:01:34:41:b0:6b:56:12:21:65:36:64:d1:09: 7c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:B8:A0:38:87:5F:87:6A:9E:96:6C:80:6F:A0:16:45:0F:D7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5d:cd:6c:05:21:14:27:c8:30:4f:34:77:15:fd:60:da:ca: fb:cb:ea:21:ee:8c:71:f1:ed:fe:e6:19:eb:fd:af:13:9d:95: 42:0a:9f:e3:8a:d4:5b:81:84:89:77:15:5b:92:77:ae:81:26: 56:b0:33:c6:68:82:0e:ef:8f:b7:67:cc:59:19:c1:6c:58:eb: 9c:0f:53:17:03:e1:ec:db:8d:cd:0a:83:d3:f9:d0:d5:4d:00: 2b:ac:e9:a1:f9:e7:0c:ec:06:7f:4e:d5:7d:9e:ef:81:b7:6f: 2c:43:98:ad:c7:3a:47:60:4e:48:4c:01:0b:31:df:b6:d0:44: fb:5d:90:6d:77:f8:50:7e:6b:18:15:f8:4f:8d:cf:03:8a:33: 92:47:9d:23:07:97:fd:25:1f:9e:19:34:54:6a:dc:5b:63:be: 90:84:be:ce:0f:46:25:fe:a0:ba:49:88:43:a5:27:2f:18:6c: f0:a2:59:94:4a:f4:f3:e4:88:50:18:9b:e8:1c:6c:0a:21:c7: b2:43:13:8a:30:63:3c:d5:df:58:e1:11:0f:0b:dc:3d:2e:6b: ff:e3:52:c0:b8:b2:9f:0e:bc:32:ff:2e:63:ab:42:d9:2e:c2: 62:4c:46:88:f1:95:17:d7:08:3c:a4:67:6d:c2:9a:77:92:c0: ae:9a:66:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2XqZupe/WU1H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZDZjMDZhY2YtZTJiYi00ZmFlLThkOTEtM2UwYmU1OTRlYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAketLnw1Tg3X6v726Ou/5DVfOGqENJO5FDkgS 1KSguGvdHMgeOLevlMvpTMf035JZEm4SJglumROY7ldzE57vWAJfNUoWp3R4hsIC MPRRsCKteKiUkg5jfmBefiGYaBaXZNJGgWuxZOX9z0H+FeCGZsYVrMA2ya5MiBvk c0BsOMqZD8uCqsu15xMpdzEILoB5oUv5bsmGAn1+ULT0Z6P+XmSaVcQJ9zqG+xag vgd7IeoE4bX4CAvsHtTc53g6cCC46G2SFJxqLDhjwOOI/9S8AJziIgS++eBlin3L h3nCVjEVtGOfPNfdzB2zp/LBMMH3HwE0QbBrVhIhZTZk0Ql8YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzWuKA4h1+Hap6WbIBvoBZFD9eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYWUzYmVmMjMtYjYyZi0z YmE2LTlkZjctYzkxNmFjMDVkZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABdzWwFIRQnyDBPNHcV/WDayvvL6iHujHHx7f7mGev9rxOdlUIKn+OK 1FuBhIl3FVuSd66BJlawM8Zogg7vj7dnzFkZwWxY65wPUxcD4ezbjc0Kg9P50NVN ACus6aH55wzsBn9O1X2e74G3byxDmK3HOkdgTkhMAQsx37bQRPtdkG13+FB+axgV +E+NzwOKM5JHnSMHl/0lH54ZNFRq3FtjvpCEvs4PRiX+oLpJiEOlJy8YbPCiWZRK 9PPkiFAYm+gcbAohx7JDE4owYzzV31jhEQ8L3D0ua//jUsC4sp8OvDL/LmOrQtku wmJMRojxlRfXCDykZ23CmneSwK6aZjc= -----END CERTIFICATE-----Generated at Wed Aug 26 20:28:24 2026 by rpki-client