$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cd49978d-5922-333d-93d0-23b77cbefe7c.roa File: cd49978d-5922-333d-93d0-23b77cbefe7c.roa (raw, json) Hash identifier: ZxprbkcqzJOlG4DMmBRX6vo1VdD31aoqNmHq9IWdaYU= Subject key identifier: 26:6E:9C:33:2C:4E:7C:36:B0:79:99:94:45:36:2B:F0:19:F8:4F:FB Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584A3BF6D4AF75445950D907D5C0 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cd49978d-5922-333d-93d0-23b77cbefe7c.roa Signing time: Wed 18 Jun 2025 17:10:47 +0000 ROA not before: Wed 18 Jun 2025 17:10:47 +0000 ROA not after: Tue 16 Sep 2025 17:10:47 +0000 asID: 21743 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:f6:d4:af:75:44:59:50:d9:07:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jun 18 17:10:47 2025 GMT Not After : Sep 16 17:10:47 2025 GMT Subject: CN=7dc1b52d-a6de-469b-a44b-5c271de194bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:ac:1a:a5:77:b7:01:24:ab:eb:33:5f:fc: 72:08:14:f1:fb:5c:b3:5d:1d:01:ae:dd:bb:67:22: 6e:b7:4d:17:2b:31:a5:ec:5f:58:b8:06:f6:65:e9: 18:c2:ef:a0:44:d9:1b:3f:f7:2a:15:d3:a9:49:d9: c2:80:c6:a4:93:f7:b6:23:7b:de:12:66:be:6a:5c: 99:74:f9:88:25:b3:aa:16:03:ce:6e:47:d5:f3:0c: 76:6c:d2:9b:9a:d8:08:e3:7f:31:5b:ca:e8:81:42: f8:33:55:96:cb:e7:52:fd:a3:a5:6e:b9:a8:4f:81: 01:8b:93:d3:93:8a:1e:42:32:cc:a9:cb:72:15:74: 8e:a0:43:ab:a3:5c:14:bb:26:c6:b2:9f:02:86:91: 34:71:23:1f:33:61:9b:a4:67:2e:60:1d:9b:2e:c3: 0e:de:f9:b0:c0:ee:1b:7e:02:fb:e7:2d:e4:43:be: 75:01:59:cb:20:3d:19:14:3e:20:f2:de:c6:b3:a6: 5e:40:5c:23:40:95:ba:22:65:01:d7:a0:3f:9e:73: dd:39:17:d8:ce:d4:4e:0d:03:d3:2f:3b:2a:aa:d2: c1:d1:ea:8f:5a:c3:df:ea:5f:cf:41:7e:56:1a:ee: 97:5f:fb:13:73:ca:12:8e:bc:44:fa:92:59:69:19: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6E:9C:33:2C:4E:7C:36:B0:79:99:94:45:36:2B:F0:19:F8:4F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/cd49978d-5922-333d-93d0-23b77cbefe7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:5a:07:de:af:51:34:5a:dc:9c:fa:e1:06:44:b4:39:f2: 8b:03:6b:76:d6:f8:11:59:0c:81:b0:d1:4c:50:63:6a:73:39: 4a:72:e0:49:02:c1:f5:23:f7:5e:dc:7b:68:cc:aa:66:2c:54: b9:53:5e:03:37:c6:91:67:92:0d:61:62:28:eb:c7:90:0b:02: 45:19:85:15:d6:57:8e:f6:69:17:47:c4:73:0f:aa:16:52:ab: 24:70:22:ef:f9:15:e7:00:c7:15:a1:fc:25:fc:f0:63:70:54: 7b:5f:50:cd:7b:3d:a8:c6:7c:82:1e:73:c0:cf:35:c4:3c:1c: 4d:95:a5:d1:6d:07:f0:31:6c:86:cd:1a:61:1a:af:b3:9c:9e: 31:5d:a8:54:d2:db:fc:a3:06:6e:34:d8:82:e3:71:1e:7c:4c: 09:3e:98:c2:da:d0:b3:f4:68:5c:88:92:0d:7c:43:b9:4f:90: 98:ba:ad:95:db:52:2d:e2:8e:67:0b:55:ff:4b:35:c1:00:e7: a0:5f:7d:a1:81:a7:41:93:0b:c9:92:63:5d:31:4c:25:f0:b1: e6:5d:6e:66:68:66:bd:3b:12:d5:93:e5:81:c0:ba:36:f7:ee: b4:07:3c:12:ac:cd:05:e2:76:58:35:05:8d:21:ea:87:45:b9: 1e:53:32:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo79tSvdURZUNkH1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDYxODE3MTA0N1oXDTI1MDkxNjE3MTA0N1owLzEtMCsGA1UEAxMk N2RjMWI1MmQtYTZkZS00NjliLWE0NGItNWMyNzFkZTE5NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhasGqV3twEkq+szX/xyCBTx+1yzXR0Brt27 ZyJut00XKzGl7F9YuAb2ZekYwu+gRNkbP/cqFdOpSdnCgMakk/e2I3veEma+alyZ dPmIJbOqFgPObkfV8wx2bNKbmtgI438xW8rogUL4M1WWy+dS/aOlbrmoT4EBi5PT k4oeQjLMqctyFXSOoEOro1wUuybGsp8ChpE0cSMfM2GbpGcuYB2bLsMO3vmwwO4b fgL75y3kQ751AVnLID0ZFD4g8t7Gs6ZeQFwjQJW6ImUB16A/nnPdORfYztRODQPT LzsqqtLB0eqPWsPf6l/PQX5WGu6XX/sTc8oSjrxE+pJZaRmtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZunDMsTnw2sHmZlEU2K/AZ+E/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvY2Q0OTk3OGQtNTkyMi0z MzNkLTkzZDAtMjNiNzdjYmVmZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZrWgfer1E0Wtyc+uEGRLQ58osDa3bW+BFZDIGw0UxQY2pzOUpy4EkC wfUj917ce2jMqmYsVLlTXgM3xpFnkg1hYijrx5ALAkUZhRXWV472aRdHxHMPqhZS qyRwIu/5FecAxxWh/CX88GNwVHtfUM17PajGfIIec8DPNcQ8HE2VpdFtB/AxbIbN GmEar7OcnjFdqFTS2/yjBm402ILjcR58TAk+mMLa0LP0aFyIkg18Q7lPkJi6rZXb Ui3ijmcLVf9LNcEA56BffaGBp0GTC8mSY10xTCXwseZdbmZoZr07EtWT5YHAujb3 7rQHPBKszQXidlg1BY0h6odFuR5TMm0= -----END CERTIFICATE-----Generated at Sun Jun 29 19:19:39 2025 by rpki-client