$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa File: 34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa (raw, json) Hash identifier: SooW/KSo7R6EBhJMWAVpDlKjMbY04CaMjNmfRUYmpeY= Subject key identifier: 46:0E:76:95:E0:93:BA:C6:3B:5A:68:B3:98:C4:27:78:06:05:6E:F4 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D0D425F256A0C9DB738592A40 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 72.9.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5f:25:6a:0c:9d:b7:38:59:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=bbd67347-72f3-44cd-8990-ee59c550dbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:de:18:1d:77:38:d1:d9:17:a3:78:73:90:ed: 37:a8:2e:8c:40:cb:bd:46:11:80:2f:5b:60:8c:02: 85:fe:e4:65:b6:88:90:10:f5:ac:80:b3:75:e6:30: bc:3c:88:52:da:82:1a:9f:93:87:64:fc:18:ff:f4: ef:c5:78:3c:d8:54:5b:38:d2:5f:10:cf:02:20:8e: cc:f6:ba:a0:77:50:46:1a:19:10:da:b5:3d:15:a2: 3c:9f:10:34:18:e4:52:b6:9e:13:19:69:09:c0:22: 38:d6:0c:9e:be:70:a2:24:e9:4c:a8:75:a0:67:d2: f4:81:5c:37:49:f6:9e:ea:f5:7e:8b:0a:89:ab:75: b5:41:9a:3b:5c:90:df:75:96:29:dc:87:7f:b1:6b: 7e:35:ff:1b:43:2f:41:f6:77:35:7b:3d:be:ff:d9: 34:bd:dc:7e:fa:56:15:5a:75:19:d7:3f:82:f2:3f: d3:df:48:e6:33:e9:79:9a:9f:ca:be:5f:70:48:96: 8e:8b:0c:6a:c7:df:c6:7b:37:76:f3:d4:75:4a:5a: 17:85:f3:d5:7c:fd:a3:b4:61:10:eb:34:73:62:a3: 96:8f:c9:12:d6:c2:fa:91:1c:ef:87:b8:61:ec:3a: 61:3f:c9:26:43:a8:f0:ae:85:5b:c5:56:01:87:2b: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:76:95:E0:93:BA:C6:3B:5A:68:B3:98:C4:27:78:06:05:6E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/34a71542-3e6b-31c3-af7f-b0f7c86f0b26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7d:f8:8f:d0:e2:72:c3:d3:a9:72:68:cf:c4:7b:6c:f1:46: de:2f:0c:d6:ba:a6:3e:15:2f:5e:c8:4e:e2:fd:64:e9:09:e7: 8a:66:62:d8:33:ec:fd:96:71:f9:f0:e4:a2:bc:c1:9f:6f:3b: c0:66:da:6d:d3:64:d5:fb:fa:32:31:da:9b:48:c0:89:bf:57: c6:29:b5:34:3b:ba:b4:1c:7a:c7:14:cc:c3:3b:c5:ac:c4:db: 6d:31:ce:36:35:14:41:4c:30:77:e2:bc:c5:d7:7b:49:cd:3c: f4:45:37:4d:b8:0f:ad:cd:17:76:ea:7a:18:53:39:ba:f2:29: 33:3f:8c:0d:c2:d1:8c:c6:ca:74:6a:0c:ed:b7:27:51:df:74: 00:01:bb:eb:d6:e2:41:26:63:43:33:40:c9:13:76:b6:16:d5: 8b:68:ab:3a:09:3d:35:69:a0:d0:2c:4b:06:08:48:8c:4c:45: 23:23:05:35:05:99:50:58:48:e7:dd:5d:bf:fc:43:4d:54:e7: 07:cf:04:06:11:6f:ff:3d:a6:b1:ac:48:e7:9a:73:2b:4e:2b: 77:85:48:ff:3f:57:b2:94:ae:12:aa:2a:76:6c:71:f5:0f:62: f6:1e:0f:09:e0:f4:34:a2:00:5f:b2:9a:c2:99:08:04:c5:e4: 21:bf:c5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQl8lagydtzhZKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YmJkNjczNDctNzJmMy00NGNkLTg5OTAtZWU1OWM1NTBkYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA894YHXc40dkXo3hzkO03qC6MQMu9RhGAL1tg jAKF/uRltoiQEPWsgLN15jC8PIhS2oIan5OHZPwY//TvxXg82FRbONJfEM8CII7M 9rqgd1BGGhkQ2rU9FaI8nxA0GORStp4TGWkJwCI41gyevnCiJOlMqHWgZ9L0gVw3 Sfae6vV+iwqJq3W1QZo7XJDfdZYp3Id/sWt+Nf8bQy9B9nc1ez2+/9k0vdx++lYV WnUZ1z+C8j/T30jmM+l5mp/Kvl9wSJaOiwxqx9/Gezd289R1SloXhfPVfP2jtGEQ 6zRzYqOWj8kS1sL6kRzvh7hh7DphP8kmQ6jwroVbxVYBhytTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYOdpXgk7rGO1pos5jEJ3gGBW70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMzRhNzE1NDItM2U2Yi0z MWMzLWFmN2YtYjBmN2M4NmYwYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ9+I/Q4nLD06lyaM/Ee2zxRt4vDNa6pj4VL17ITuL9ZOkJ54pmYtgz 7P2Wcfnw5KK8wZ9vO8Bm2m3TZNX7+jIx2ptIwIm/V8YptTQ7urQcescUzMM7xazE 220xzjY1FEFMMHfivMXXe0nNPPRFN024D63NF3bqehhTObryKTM/jA3C0YzGynRq DO23J1HfdAABu+vW4kEmY0MzQMkTdrYW1YtoqzoJPTVpoNAsSwYISIxMRSMjBTUF mVBYSOfdXb/8Q01U5wfPBAYRb/89prGsSOeacytOK3eFSP8/V7KUrhKqKnZscfUP YvYeDwng9DSiAF+ymsKZCATF5CG/xVo= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:08 2026 by rpki-client