$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa File: ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa (raw, json) Hash identifier: q+ylXWd8CJ5/+BAWKcqAW8SQysEa6G4DB6QVK/LdoQw= Subject key identifier: 22:2B:7C:15:2E:B5:F9:94:60:FD:92:B9:9F:2A:DE:26:56:62:50:00 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D57775A053A03E9426E742120 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa Signing time: Mon 30 Mar 2026 15:57:23 +0000 ROA not before: Mon 30 Mar 2026 15:57:23 +0000 ROA not after: Sun 28 Jun 2026 15:57:23 +0000 asID: 62240 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:77:5a:05:3a:03:e9:42:6e:74:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 30 15:57:23 2026 GMT Not After : Jun 28 15:57:23 2026 GMT Subject: CN=66c96a1f-dd41-4102-8ffc-513c7ff657fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:17:ca:49:d4:98:43:af:58:d4:fc:a7:0c: 0e:79:37:8f:0f:f0:08:53:90:0d:fc:21:56:7e:7a: 4e:31:cf:11:e6:25:50:a8:b2:d2:27:c3:ae:eb:94: d2:99:b5:78:4d:f4:0d:1a:94:f3:60:8c:d4:ab:90: 69:62:04:5b:4c:41:46:34:1c:b6:c3:83:2a:bc:65: ef:9d:1d:47:a0:da:2a:2d:22:e7:31:74:9f:59:91: c4:5c:66:f9:48:a2:1a:76:ed:33:02:da:6d:90:6a: 42:64:47:4b:1a:71:9f:1e:86:f2:69:69:9e:31:63: 32:cf:45:e1:41:f2:c3:48:fd:41:ea:43:ec:60:ca: 7e:17:9b:43:2f:26:9c:ee:e8:22:db:94:eb:65:85: 34:69:b0:c0:0c:a7:97:8e:b1:ae:11:aa:ee:bf:b1: 91:12:37:49:11:b5:67:db:91:e6:d3:11:15:76:07: 8c:77:f1:61:16:55:08:76:b2:e7:8d:42:15:03:e5: cb:fc:02:f7:a3:6d:6b:89:ec:95:9a:82:e8:92:f7: 4a:cb:c2:41:ba:a3:fc:b9:6e:62:76:62:ff:ce:72: 49:34:d8:a8:74:b1:36:56:54:a3:93:1d:c9:e1:6b: 87:a5:cb:2e:53:bd:18:0a:9e:e1:63:06:99:9c:b1: 71:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2B:7C:15:2E:B5:F9:94:60:FD:92:B9:9F:2A:DE:26:56:62:50:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ae3bef23-b62f-3ba6-9df7-c916ac05dd28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:bf:3d:8e:e1:eb:30:e1:78:7e:88:ed:03:b4:b1:23:1e:c7: ba:7d:a9:68:81:45:7f:5a:48:fa:c0:5c:f7:a3:ec:77:68:55: b1:4a:26:9b:dc:05:a0:fc:98:63:b1:2b:a6:cf:e8:d7:04:ea: 9d:02:2d:a1:41:67:73:23:6c:bc:3f:a8:6b:61:8c:1e:8a:e0: ae:4b:a9:11:b8:98:94:cb:d9:8e:26:ac:da:88:70:69:2a:2e: f9:0a:10:b4:f5:cb:e4:31:05:56:49:35:a1:f3:8a:48:87:21: 2f:a6:a7:39:f1:26:f1:2b:d7:c9:7f:3e:95:ee:8f:69:3a:40: e9:68:28:21:bf:96:93:b8:60:3d:d2:c8:85:d0:c5:58:c5:4f: 97:20:90:05:52:60:e8:9d:c8:19:3c:64:49:01:a2:17:4a:91: e2:c1:95:c1:26:75:31:67:78:bf:09:93:a4:58:ee:82:fc:e2: 17:b9:1a:d4:5d:9c:7c:47:8b:84:76:1f:5e:91:b2:04:7c:5f: cf:21:f2:88:ca:44:2d:3e:2b:fe:c2:dd:cf:6e:8e:38:49:45: 9d:b5:50:a9:e3:d8:ff:d1:fd:22:ea:f5:7e:4e:b8:d1:49:cd: 23:87:82:42:3f:25:8c:52:dd:10:0c:d2:14:70:f2:1f:f1:35: 3a:41:c2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Xd1oFOgPpQm50ISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMzMDE1NTcyM1oXDTI2MDYyODE1NTcyM1owLzEtMCsGA1UEAxMk NjZjOTZhMWYtZGQ0MS00MTAyLThmZmMtNTEzYzdmZjY1N2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirEXyknUmEOvWNT8pwwOeTePD/AIU5AN/CFW fnpOMc8R5iVQqLLSJ8Ou65TSmbV4TfQNGpTzYIzUq5BpYgRbTEFGNBy2w4MqvGXv nR1HoNoqLSLnMXSfWZHEXGb5SKIadu0zAtptkGpCZEdLGnGfHobyaWmeMWMyz0Xh QfLDSP1B6kPsYMp+F5tDLyac7ugi25TrZYU0abDADKeXjrGuEaruv7GREjdJEbVn 25Hm0xEVdgeMd/FhFlUIdrLnjUIVA+XL/AL3o21rieyVmoLokvdKy8JBuqP8uW5i dmL/znJJNNiodLE2VlSjkx3J4WuHpcsuU70YCp7hYwaZnLFxZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIrfBUutfmUYP2SuZ8q3iZWYlAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYWUzYmVmMjMtYjYyZi0z YmE2LTlkZjctYzkxNmFjMDVkZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi/PY7h6zDheH6I7QO0sSMex7p9qWiBRX9aSPrAXPej7HdoVbFKJpvc BaD8mGOxK6bP6NcE6p0CLaFBZ3MjbLw/qGthjB6K4K5LqRG4mJTL2Y4mrNqIcGkq LvkKELT1y+QxBVZJNaHzikiHIS+mpznxJvEr18l/PpXuj2k6QOloKCG/lpO4YD3S yIXQxVjFT5cgkAVSYOidyBk8ZEkBohdKkeLBlcEmdTFneL8Jk6RY7oL84he5GtRd nHxHi4R2H16RsgR8X88h8ojKRC0+K/7C3c9ujjhJRZ21UKnj2P/R/SLq9X5OuNFJ zSOHgkI/JYxS3RAM0hRw8h/xNTpBwos= -----END CERTIFICATE-----Generated at Sat Apr 11 02:44:48 2026 by rpki-client