$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/624eb73e-e15a-3fd9-849a-4ad171f3f7a8.roa File: 624eb73e-e15a-3fd9-849a-4ad171f3f7a8.roa (raw, json) Hash identifier: 0UX3Lx74KLWPAzCfFTJm1ab2R6la09x9vmhqaLH/IdM= Subject key identifier: 9A:ED:0C:F1:58:3F:9F:8E:F0:AB:2F:FF:DF:24:CE:E7:FE:AD:22:DA Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A3BF66BBE08DC178B99207100 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/624eb73e-e15a-3fd9-849a-4ad171f3f7a8.roa Signing time: Wed 18 Jun 2025 17:09:58 +0000 ROA not before: Wed 18 Jun 2025 17:09:58 +0000 ROA not after: Tue 16 Sep 2025 17:09:58 +0000 asID: 21743 IP address blocks: 72.9.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:f6:6b:be:08:dc:17:8b:99:20:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jun 18 17:09:58 2025 GMT Not After : Sep 16 17:09:58 2025 GMT Subject: CN=ea81e179-a30e-403d-9fa1-a6619c113403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:50:2f:ac:af:f2:1a:47:5f:26:42:9c:58: b5:e5:81:bd:0f:5b:aa:96:e0:49:c5:b2:84:b2:ba: a7:8b:03:ae:c8:90:0a:77:ec:c5:49:9f:ad:90:d8: cd:c3:f0:b1:bb:d5:68:5c:8b:78:78:85:b8:a1:7a: 01:3d:53:c7:26:11:80:bc:32:5c:07:39:fc:d7:f9: 56:42:09:35:d6:59:41:ee:8a:65:9d:12:ea:8f:fb: 5a:b9:77:50:18:25:33:5f:b8:6b:23:cf:54:6b:0c: 46:07:69:db:00:c5:90:61:a1:4a:a8:29:81:f5:35: 5f:45:d4:54:f3:97:45:56:7f:bd:c9:ec:d8:51:97: dd:04:e8:47:15:9c:39:2e:a5:36:22:9f:5e:42:59: 21:96:47:35:92:e2:91:70:b2:5a:ab:11:fe:b6:1c: 6d:66:50:4e:15:59:22:72:4c:14:bd:4f:5e:06:a3: ca:8e:65:25:be:43:3b:a8:bb:f8:6b:d2:15:af:58: 45:b9:f3:52:af:d0:6a:43:34:95:75:2a:b7:8f:e0: a8:57:96:51:e5:cf:3e:ff:cc:c3:13:3f:54:d3:77: f1:b1:63:53:d7:a7:82:e6:0a:48:cc:3d:46:23:9d: 9c:20:e8:07:da:9a:d3:f1:7f:bc:28:3a:80:f7:36: a9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:0C:F1:58:3F:9F:8E:F0:AB:2F:FF:DF:24:CE:E7:FE:AD:22:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/624eb73e-e15a-3fd9-849a-4ad171f3f7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:13:d4:6e:d5:be:99:9b:b3:ab:04:d0:64:44:2f:d6:16:4f: af:39:92:41:85:1e:ba:52:ad:82:ce:9d:e2:bc:63:c0:a3:06: 72:8c:62:80:3e:c6:a9:2e:a2:80:d3:47:16:fe:e6:49:b0:97: f8:0e:89:d0:d4:d1:94:80:79:40:16:32:17:22:9c:1a:35:0e: 3d:27:0e:f3:f2:33:db:ca:36:aa:fa:22:70:9e:b1:f5:47:35: a1:f3:48:13:ab:0c:d5:62:35:95:b0:c0:83:9a:9c:2d:7a:a3: c8:07:b4:58:3e:de:60:3b:99:99:80:83:e0:44:e5:ab:52:05: 5f:7b:cf:4f:ca:e6:ca:02:b1:b1:23:af:3b:91:28:7e:a5:30: d1:b2:49:15:fe:d7:52:1d:1c:81:0f:e6:34:fe:5c:80:24:9f: 9c:cc:31:c4:d1:43:97:84:2a:c8:03:20:86:50:6c:e7:57:c3: 2b:4c:f0:85:84:30:ce:cc:8e:0c:ef:93:6f:f0:0f:d1:85:77: 71:17:93:72:f9:5e:63:52:0a:b4:53:8d:46:11:3b:fc:50:da: 31:87:fa:07:e1:a5:67:f0:55:be:00:51:9e:6d:56:e6:71:88: d9:11:55:82:19:0a:6d:41:31:27:53:72:59:e7:81:04:99:3b: dc:de:08:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo79mu+CNwXi5kgcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDYxODE3MDk1OFoXDTI1MDkxNjE3MDk1OFowLzEtMCsGA1UEAxMk ZWE4MWUxNzktYTMwZS00MDNkLTlmYTEtYTY2MTljMTEzNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlQL6yv8hpHXyZCnFi15YG9D1uqluBJxbKE srqniwOuyJAKd+zFSZ+tkNjNw/Cxu9VoXIt4eIW4oXoBPVPHJhGAvDJcBzn81/lW Qgk11llB7oplnRLqj/tauXdQGCUzX7hrI89UawxGB2nbAMWQYaFKqCmB9TVfRdRU 85dFVn+9yezYUZfdBOhHFZw5LqU2Ip9eQlkhlkc1kuKRcLJaqxH+thxtZlBOFVki ckwUvU9eBqPKjmUlvkM7qLv4a9IVr1hFufNSr9BqQzSVdSq3j+CoV5ZR5c8+/8zD Ez9U03fxsWNT16eC5gpIzD1GI52cIOgH2prT8X+8KDqA9zapxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrtDPFYP5+O8Ksv/98kzuf+rSLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNjI0ZWI3M2UtZTE1YS0z ZmQ5LTg0OWEtNGFkMTcxZjNmN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYT1G7Vvpmbs6sE0GREL9YWT685kkGFHrpSrYLOneK8Y8CjBnKMYoA+ xqkuooDTRxb+5kmwl/gOidDU0ZSAeUAWMhcinBo1Dj0nDvPyM9vKNqr6InCesfVH NaHzSBOrDNViNZWwwIOanC16o8gHtFg+3mA7mZmAg+BE5atSBV97z0/K5soCsbEj rzuRKH6lMNGySRX+11IdHIEP5jT+XIAkn5zMMcTRQ5eEKsgDIIZQbOdXwytM8IWE MM7Mjgzvk2/wD9GFd3EXk3L5XmNSCrRTjUYRO/xQ2jGH+gfhpWfwVb4AUZ5tVuZx iNkRVYIZCm1BMSdTclnngQSZO9zeCDE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:28:52 2025 by rpki-client