$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2b9f233-221e-3d06-a3a5-79e67c0a2183.roa File: d2b9f233-221e-3d06-a3a5-79e67c0a2183.roa (raw, json) Hash identifier: IZh/mWbScY4hqzR59G528zJU9Oo4D1hea+xAxjVQyzU= Subject key identifier: C9:91:61:6F:0A:0A:B4:4F:AF:91:94:B3:B3:6E:74:1D:EF:C2:C3:A3 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B0A84BFADD1E8CAC7D35E5664 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2b9f233-221e-3d06-a3a5-79e67c0a2183.roa Signing time: Sun 31 Aug 2025 16:53:15 +0000 ROA not before: Sun 31 Aug 2025 16:53:15 +0000 ROA not after: Sat 29 Nov 2025 17:53:15 +0000 asID: 9304 IP address blocks: 72.9.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:84:bf:ad:d1:e8:ca:c7:d3:5e:56:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 31 16:53:15 2025 GMT Not After : Nov 29 17:53:15 2025 GMT Subject: CN=5094a9de-9c05-4e7e-901f-73850d8b17ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:1b:f3:07:c8:10:05:e5:8c:fa:34:b9:c4: 4d:c8:8d:d9:b9:1f:4f:d4:cc:96:09:5e:2d:4e:ac: 50:c0:4e:77:19:ff:23:db:c8:ad:c2:bf:82:c9:32: a7:bc:72:18:30:15:8d:38:8f:be:d5:50:5e:ad:90: cf:56:2b:77:ce:b6:a5:3e:93:84:aa:fb:80:ce:d8: fb:24:c3:29:64:82:e6:0d:cf:fa:95:f0:54:10:26: 13:0b:2c:cc:7a:5b:de:fe:b3:f4:09:a9:11:1f:3f: e5:2f:59:98:a5:9a:04:0f:ae:2e:76:f7:80:4c:ae: 09:b8:12:0e:a2:10:10:04:71:42:0b:da:36:28:b5: 68:8b:6f:a2:0d:57:67:a0:a0:c5:5f:a3:80:02:f3: 6a:2d:56:37:20:f2:9b:0f:2c:d0:7a:18:ec:a5:2b: 17:45:4c:b7:1c:0b:40:64:ca:02:af:66:a5:28:e3: b1:db:7e:6d:04:d1:dd:ec:bc:5c:d7:1c:a7:94:e0: b2:82:27:82:f1:a9:2b:e1:57:f5:96:6a:21:eb:82: a6:e7:8c:99:16:60:54:6b:92:5f:e9:58:56:5c:00: a0:ec:a7:fe:82:9f:e0:9e:05:2c:d2:e3:a8:db:c0: 76:10:dd:0e:f1:de:eb:58:1a:d3:94:c4:1a:80:dc: 9d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:61:6F:0A:0A:B4:4F:AF:91:94:B3:B3:6E:74:1D:EF:C2:C3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2b9f233-221e-3d06-a3a5-79e67c0a2183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:83:02:f5:a0:01:1c:4c:46:a5:dc:d1:f4:93:f6:c9:00:71: a7:6f:e7:5b:e2:69:09:de:45:36:04:d8:4a:9d:bc:e6:0c:a5: cd:79:eb:5e:85:fa:3a:4d:30:e3:d6:16:8d:1d:4b:34:12:e2: ff:cd:5f:9e:8f:6d:09:0b:f5:77:78:46:a8:21:1a:ce:99:28: 34:6b:6f:50:76:85:c3:a3:24:8c:2a:d4:c7:93:d4:a9:9e:04: a3:a1:c1:28:52:30:9d:06:2d:3f:1f:d6:f3:9b:b0:8e:bf:6f: b4:3e:f8:35:48:09:3b:2a:bc:d9:40:5a:d5:bb:ed:07:ad:9a: 3f:b2:1c:d7:9f:2c:d8:87:d0:af:16:f2:3f:2a:81:31:f3:88: 81:99:9d:f3:9c:c4:7d:45:ee:d4:bd:e0:21:58:04:82:75:2f: ef:8a:cd:32:ca:76:3e:2b:dd:d4:e1:7c:0d:42:2f:fc:2a:5e: f8:55:04:87:fa:30:ec:6d:1d:33:1d:18:2a:82:5d:41:44:06: e2:40:ea:01:a3:07:78:78:0f:33:7b:2f:2e:08:42:dd:c7:70: 87:d7:fb:1e:f2:18:fb:d8:2b:57:3d:85:8b:7d:76:40:d0:60: 06:1b:85:d1:be:d8:01:d9:3f:0c:d0:c0:f6:69:5c:f3:e9:5e: 1b:ca:b2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKhL+t0ejKx9NeVmQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDgzMTE2NTMxNVoXDTI1MTEyOTE3NTMxNVowLzEtMCsGA1UEAxMk NTA5NGE5ZGUtOWMwNS00ZTdlLTkwMWYtNzM4NTBkOGIxN2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv8b8wfIEAXljPo0ucRNyI3ZuR9P1MyWCV4t TqxQwE53Gf8j28itwr+CyTKnvHIYMBWNOI++1VBerZDPVit3zralPpOEqvuAztj7 JMMpZILmDc/6lfBUECYTCyzMelve/rP0CakRHz/lL1mYpZoED64udveATK4JuBIO ohAQBHFCC9o2KLVoi2+iDVdnoKDFX6OAAvNqLVY3IPKbDyzQehjspSsXRUy3HAtA ZMoCr2alKOOx235tBNHd7Lxc1xynlOCygieC8akr4Vf1lmoh64Km54yZFmBUa5Jf 6VhWXACg7Kf+gp/gngUs0uOo28B2EN0O8d7rWBrTlMQagNydXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmRYW8KCrRPr5GUs7NudB3vwsOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZDJiOWYyMzMtMjIxZS0z ZDA2LWEzYTUtNzllNjdjMGEyMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEODAvWgARxMRqXc0fST9skAcadv51viaQneRTYE2EqdvOYMpc15616F +jpNMOPWFo0dSzQS4v/NX56PbQkL9Xd4RqghGs6ZKDRrb1B2hcOjJIwq1MeT1Kme BKOhwShSMJ0GLT8f1vObsI6/b7Q++DVICTsqvNlAWtW77Qetmj+yHNefLNiH0K8W 8j8qgTHziIGZnfOcxH1F7tS94CFYBIJ1L++KzTLKdj4r3dThfA1CL/wqXvhVBIf6 MOxtHTMdGCqCXUFEBuJA6gGjB3h4DzN7Ly4IQt3HcIfX+x7yGPvYK1c9hYt9dkDQ YAYbhdG+2AHZPwzQwPZpXPPpXhvKsiY= -----END CERTIFICATE-----Generated at Fri Sep 5 09:55:55 2025 by rpki-client