$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa File: d8b1e428-dd9f-3495-b471-740b0fab423f.roa (raw, json) Hash identifier: yjS96ugB/XfI8eo7+QZsxRD0Q5glVh2Edgdg5MDcbqA= Subject key identifier: 33:53:2C:1B:E5:34:FC:28:20:65:7E:1E:9F:E1:38:6F:28:07:80:DE Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584D0D427C9BB0C25667B0893600 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 834 IP address blocks: 72.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:7c:9b:b0:c2:56:67:b0:89:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=5baaf465-799e-45fc-86c4-d3c1ef3e64a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b5:d4:8d:a1:37:53:4b:be:81:94:98:b4:96: 5a:f6:22:9a:49:a4:e2:60:83:77:90:1a:d6:13:75: 4e:c8:b0:8c:44:e6:7d:7b:1e:7b:48:33:34:11:cb: 4f:94:72:9d:8e:a4:02:0e:81:b4:51:d3:4f:ee:25: 0a:7e:28:8f:a1:d4:06:dd:a2:7e:23:92:63:3e:14: 64:b8:a7:83:19:04:85:2d:af:7a:62:ed:3f:19:2c: e7:a9:82:1e:61:3b:68:bf:3a:fa:06:ba:af:3a:2d: 01:c1:07:01:ad:2d:d0:8f:58:8a:3b:a7:c6:db:8b: c0:79:ac:e1:15:bd:76:96:da:46:17:10:e5:ee:b0: 6b:b2:ec:da:83:88:61:7c:c7:39:05:14:89:7c:eb: ab:54:5b:7a:47:e4:bd:bf:78:0d:a2:06:ca:d0:be: f5:4d:a8:66:e8:0a:0f:d8:10:9c:53:b6:5c:04:8e: 1c:74:32:38:66:5c:f4:73:87:a7:43:5a:2e:9c:d7: 73:6e:64:c7:74:24:01:00:27:e3:a5:8a:23:e5:32: 14:f2:e8:39:69:39:8e:62:55:a6:84:22:f8:cc:5f: 99:9a:27:ad:8d:3c:f9:7f:00:96:b8:4c:b6:cc:0b: e1:c0:14:7f:3b:4b:33:37:df:e3:81:00:e2:fa:91: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:53:2C:1B:E5:34:FC:28:20:65:7E:1E:9F:E1:38:6F:28:07:80:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d8b1e428-dd9f-3495-b471-740b0fab423f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:47:bd:59:c2:3c:23:e8:0c:3f:5b:7e:26:61:13:5c:43:69: a9:d6:1a:cb:19:77:85:f1:f5:e7:99:e9:f7:e7:4e:31:d4:14: 30:7d:2e:b7:b4:3c:6c:2c:24:de:a8:bb:32:94:31:80:08:06: 8b:d0:60:bd:ab:ba:14:57:59:0e:df:2b:d8:68:6f:38:35:da: 23:9b:29:b2:7b:d8:1f:73:f0:38:18:e1:ca:54:8f:15:5c:85: 57:be:42:d1:8d:52:f7:ee:2e:a7:cb:e8:e4:38:91:3d:f3:4c: be:f5:bc:3a:f9:11:3b:07:b0:d6:15:32:ac:30:cc:e9:fc:88: 4e:bf:29:b0:c0:05:31:77:5d:9b:e3:f2:ec:40:44:54:81:48: 78:c4:8c:70:73:e1:dc:69:78:7a:42:63:ef:8c:68:02:a8:d3: d0:ae:72:a1:13:c4:3d:e2:03:50:54:ea:84:3d:ab:b6:5e:73: 2b:fa:bb:f3:a0:57:7b:ea:0f:a8:70:04:49:75:95:32:66:3d: 54:59:08:d8:bf:ae:01:dd:51:08:f9:f9:1c:e7:00:ef:fa:ec: 51:9a:f3:c5:6d:18:51:ff:f5:2d:4f:80:fa:4b:00:70:8f:20: 0f:e4:08:30:2a:88:5c:a7:0a:68:a2:13:fd:57:a5:99:7e:37: 33:7a:26:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnybsMJWZ7CJNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NWJhYWY0NjUtNzk5ZS00NWZjLTg2YzQtZDNjMWVmM2U2NGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbXUjaE3U0u+gZSYtJZa9iKaSaTiYIN3kBrW E3VOyLCMROZ9ex57SDM0EctPlHKdjqQCDoG0UdNP7iUKfiiPodQG3aJ+I5JjPhRk uKeDGQSFLa96Yu0/GSznqYIeYTtovzr6BrqvOi0BwQcBrS3Qj1iKO6fG24vAeazh Fb12ltpGFxDl7rBrsuzag4hhfMc5BRSJfOurVFt6R+S9v3gNogbK0L71Tahm6AoP 2BCcU7ZcBI4cdDI4Zlz0c4enQ1ounNdzbmTHdCQBACfjpYoj5TIU8ug5aTmOYlWm hCL4zF+ZmietjTz5fwCWuEy2zAvhwBR/O0szN9/jgQDi+pEnMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNTLBvlNPwoIGV+Hp/hOG8oB4DeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZDhiMWU0MjgtZGQ5Zi0z NDk1LWI0NzEtNzQwYjBmYWI0MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtHvVnCPCPoDD9bfiZhE1xDaanWGssZd4Xx9eeZ6ffnTjHUFDB9Lre0 PGwsJN6ouzKUMYAIBovQYL2ruhRXWQ7fK9hobzg12iObKbJ72B9z8DgY4cpUjxVc hVe+QtGNUvfuLqfL6OQ4kT3zTL71vDr5ETsHsNYVMqwwzOn8iE6/KbDABTF3XZvj 8uxARFSBSHjEjHBz4dxpeHpCY++MaAKo09CucqETxD3iA1BU6oQ9q7Zecyv6u/Og V3vqD6hwBEl1lTJmPVRZCNi/rgHdUQj5+RznAO/67FGa88VtGFH/9S1PgPpLAHCP IA/kCDAqiFynCmiiE/1XpZl+NzN6Jsc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:17 2026 by rpki-client