$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa File: d8b1e428-dd9f-3495-b471-740b0fab423f.roa (raw, json) Hash identifier: 3Zcw6cKwwvKBIDt7TPOzTyLSerRAX1ty2mapDeiCUxE= Subject key identifier: 0E:F3:90:EB:1B:9C:73:39:7E:2A:A1:60:28:9C:70:5F:24:4C:F4:E0 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584DEDE0AFF974034DD67B95A500 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa Signing time: Sat 23 May 2026 13:00:31 +0000 ROA not before: Sat 23 May 2026 13:00:31 +0000 ROA not after: Fri 21 Aug 2026 13:00:31 +0000 asID: 834 IP address blocks: 72.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ed:e0:af:f9:74:03:4d:d6:7b:95:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: May 23 13:00:31 2026 GMT Not After : Aug 21 13:00:31 2026 GMT Subject: CN=af510dd7-70f9-4fe5-8d5f-2ab2c9009a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:bd:a6:a4:36:22:36:4d:2d:8f:f2:a1:5f: 7d:be:ca:03:77:06:c5:e3:f8:41:9a:57:49:75:4c: e3:02:18:8e:63:6d:a4:d2:e4:9a:5f:f0:01:e2:a2: be:73:d8:ef:09:59:42:6c:6e:d2:c5:67:d9:48:3f: 23:28:3a:cf:5a:29:fe:6c:8d:b1:a0:34:65:cb:8b: 72:be:b3:fd:5c:a4:32:e9:93:a4:57:ef:a0:d9:23: 59:91:1e:62:58:e0:f4:26:9c:01:89:f1:07:40:37: 47:6b:03:08:f7:f6:01:d3:bd:9e:f9:8d:00:80:8b: b7:80:2f:1d:9e:bb:4e:6e:cb:57:78:c3:80:53:9a: 32:39:a2:a0:6c:bf:26:c9:f1:70:9b:39:91:2f:44: 6f:93:ed:61:fa:e9:1d:68:d0:e9:a5:72:9d:ec:3a: bb:e7:a8:42:87:6d:8a:e1:17:b1:c5:95:9f:45:f0: ef:38:db:63:d5:9e:f0:03:1b:61:f5:99:8f:c8:19: 8a:55:6a:d1:4b:ab:47:e6:42:df:5c:85:92:7d:a6: 8b:52:ae:8d:13:60:76:27:cf:e4:24:ec:a8:8f:a2: 6a:30:4e:bf:21:1d:8e:a3:dd:32:30:f3:28:0c:94: 17:47:e2:36:30:08:8a:1c:e8:5e:b7:2c:75:f8:ec: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F3:90:EB:1B:9C:73:39:7E:2A:A1:60:28:9C:70:5F:24:4C:F4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0c:73:d1:9d:05:43:24:35:74:ad:87:fb:ea:39:70:23:c9: be:27:bd:e5:ea:8e:f3:4a:8b:fd:1e:16:95:eb:5b:c5:84:ba: 83:69:31:de:db:c2:03:36:61:b8:27:63:42:20:ea:73:91:a3: bf:f9:33:8f:56:04:0e:8e:e7:50:f9:ea:fe:86:2e:bb:01:ae: 04:7e:50:4b:07:fb:ea:14:7e:3a:6a:17:e8:41:81:97:da:13: d2:4d:60:c2:f0:0c:31:f8:43:53:b1:cf:33:0c:d6:72:e4:99: 43:f7:cc:96:8f:1a:19:04:05:17:1e:d6:38:c0:a8:5d:08:78: 70:8f:35:c5:02:66:2c:83:08:cb:bd:2a:28:d8:44:e1:f0:2c: 39:d4:39:23:c6:c8:5a:77:a8:65:f3:06:1d:b5:c8:bf:da:c5: 13:79:18:1c:9b:f9:2f:43:66:0c:e4:78:59:2d:c9:06:4c:c7: c3:8f:27:19:c1:e2:48:67:57:8b:b6:f9:ac:bf:80:88:d7:ec: 14:72:b9:c3:30:1a:53:53:c9:cc:7f:9c:78:cc:f7:9e:6f:30: d0:d8:d0:5f:8e:1a:29:f6:d6:72:7d:15:cd:d5:80:80:a2:8f: 87:16:60:c3:87:a6:a6:72:55:34:0a:9c:d0:5e:5d:52:39:e9: c2:c4:eb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4K/5dANN1nuVpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk YWY1MTBkZDctNzBmOS00ZmU1LThkNWYtMmFiMmM5MDA5YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVm9pqQ2IjZNLY/yoV99vsoDdwbF4/hBmldJ dUzjAhiOY22k0uSaX/AB4qK+c9jvCVlCbG7SxWfZSD8jKDrPWin+bI2xoDRly4ty vrP9XKQy6ZOkV++g2SNZkR5iWOD0JpwBifEHQDdHawMI9/YB072e+Y0AgIu3gC8d nrtObstXeMOAU5oyOaKgbL8myfFwmzmRL0Rvk+1h+ukdaNDppXKd7Dq756hCh22K 4RexxZWfRfDvONtj1Z7wAxth9ZmPyBmKVWrRS6tH5kLfXIWSfaaLUq6NE2B2J8/k JOyoj6JqME6/IR2Oo90yMPMoDJQXR+I2MAiKHOhetyx1+Ow5XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7zkOsbnHM5fiqhYCiccF8kTPTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZDhiMWU0MjgtZGQ5Zi0z NDk1LWI0NzEtNzQwYjBmYWI0MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYMc9GdBUMkNXSth/vqOXAjyb4nveXqjvNKi/0eFpXrW8WEuoNpMd7b wgM2YbgnY0Ig6nORo7/5M49WBA6O51D56v6GLrsBrgR+UEsH++oUfjpqF+hBgZfa E9JNYMLwDDH4Q1OxzzMM1nLkmUP3zJaPGhkEBRce1jjAqF0IeHCPNcUCZiyDCMu9 KijYROHwLDnUOSPGyFp3qGXzBh21yL/axRN5GByb+S9DZgzkeFktyQZMx8OPJxnB 4khnV4u2+ay/gIjX7BRyucMwGlNTycx/nHjM955vMNDY0F+OGin21nJ9Fc3VgICi j4cWYMOHpqZyVTQKnNBeXVI56cLE68Q= -----END CERTIFICATE-----Generated at Tue May 26 08:37:03 2026 by rpki-client