$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ebd95241-9063-365c-82a4-66a616a07b1e.roa File: ebd95241-9063-365c-82a4-66a616a07b1e.roa (raw, json) Hash identifier: x487hqy+rPatEcMTXbWg5/gI9A3AYvJPfMWGgr8OUUo= Subject key identifier: 6B:2D:27:F7:BE:A6:C0:71:03:DE:CB:43:2C:DF:CA:47:90:E7:CE:BF Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584EFF7784050EFC1CA0A1B6F200 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ebd95241-9063-365c-82a4-66a616a07b1e.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 834 IP address blocks: 72.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:84:05:0e:fc:1c:a0:a1:b6:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=0f30f5eb-386e-4d76-8c60-46bc0c39d471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:02:f2:e1:01:76:19:1a:3f:fc:7e:51:da: 40:50:67:8b:bf:52:97:7b:ec:d0:a4:eb:96:9e:ff: 96:12:a4:7a:d8:ad:9c:b7:47:e5:b3:bc:c7:a8:97: a3:a5:23:0d:55:1d:83:1c:34:db:4a:23:1e:fa:fe: 9b:4d:32:47:fa:ac:00:ee:cb:7e:41:be:b6:29:b5: bd:0f:98:7b:91:58:10:7f:b2:a5:c4:a9:5e:c1:9c: 59:95:37:e8:91:2e:05:eb:eb:dc:8d:57:d0:6b:8b: 94:7a:43:d4:68:82:db:c4:8d:8f:f4:4c:82:cf:76: f4:6d:72:07:b6:65:24:3e:ba:a7:87:ad:36:d4:47: c5:c4:10:62:df:8f:b7:88:be:e9:92:e9:d3:db:d0: f5:2d:09:dd:a7:e1:37:c0:60:8c:08:9c:4b:d5:74: 62:87:dc:4c:c1:86:d7:1b:30:6b:db:66:0e:3c:53: 32:13:5a:90:4f:99:d7:c5:42:7f:b5:bc:99:51:d0: 54:ae:ad:18:8d:d2:ee:42:b2:0d:e0:3b:10:86:cd: 21:59:68:a8:bb:d4:92:29:3c:3c:3a:1f:13:d5:56: a8:ea:d2:af:48:f0:4c:f4:6b:8b:8c:18:ca:17:4b: 9b:e9:55:2d:1e:54:fc:2a:73:7b:0e:ef:a0:51:63: 99:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2D:27:F7:BE:A6:C0:71:03:DE:CB:43:2C:DF:CA:47:90:E7:CE:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ebd95241-9063-365c-82a4-66a616a07b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3d:b9:5e:e8:e9:f1:87:29:cd:4b:a3:43:0b:74:fd:69:0b: a1:55:5b:f8:12:12:7c:d2:75:84:43:91:7f:f8:36:82:d9:5d: ce:98:11:17:91:2e:d3:09:d8:c7:27:cf:8e:5d:e4:bd:78:e6: 0b:06:cc:10:71:8c:a7:6c:16:47:ca:77:78:eb:eb:32:98:93: 44:40:90:49:83:cb:e9:89:5d:90:c0:fa:41:b0:16:76:24:0f: ee:ab:7f:48:9b:94:51:5c:03:76:d3:e8:cb:7a:90:ea:ea:5d: bf:2a:93:38:9f:21:0c:ba:fc:18:6d:e6:64:59:a8:7a:93:39: eb:5c:2c:e4:9a:62:35:3e:2e:0d:9c:e2:96:4f:b8:ee:d8:4b: d3:26:3b:2f:73:07:c6:02:2e:b8:f0:20:65:b4:9f:29:2c:39: c3:cf:c1:a5:50:6e:5b:5d:99:3a:68:89:44:6a:89:43:5e:e3: 63:0c:39:54:41:48:02:4b:3f:88:e6:f9:43:90:a7:11:d4:a8: 0e:a2:1c:59:64:9c:e9:90:db:e0:7d:7f:a0:d2:d3:09:0e:63: 43:8f:67:b4:cc:36:dd:3d:c1:d2:d8:20:b7:5c:df:c5:15:c1: d5:7c:5e:d0:81:ce:bd:03:2c:22:db:be:c3:e7:91:06:ab:6f: f5:29:e4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d4QFDvwcoKG28gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MGYzMGY1ZWItMzg2ZS00ZDc2LThjNjAtNDZiYzBjMzlkNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKwC8uEBdhkaP/x+UdpAUGeLv1KXe+zQpOuW nv+WEqR62K2ct0fls7zHqJejpSMNVR2DHDTbSiMe+v6bTTJH+qwA7st+Qb62KbW9 D5h7kVgQf7KlxKlewZxZlTfokS4F6+vcjVfQa4uUekPUaILbxI2P9EyCz3b0bXIH tmUkPrqnh6021EfFxBBi34+3iL7pkunT29D1LQndp+E3wGCMCJxL1XRih9xMwYbX GzBr22YOPFMyE1qQT5nXxUJ/tbyZUdBUrq0YjdLuQrIN4DsQhs0hWWiou9SSKTw8 Oh8T1Vao6tKvSPBM9GuLjBjKF0ub6VUtHlT8KnN7Du+gUWOZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGstJ/e+psBxA97LQyzfykeQ586/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvZWJkOTUyNDEtOTA2My0z NjVjLTgyYTQtNjZhNjE2YTA3YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB89uV7o6fGHKc1Lo0MLdP1pC6FVW/gSEnzSdYRDkX/4NoLZXc6YEReR LtMJ2Mcnz45d5L145gsGzBBxjKdsFkfKd3jr6zKYk0RAkEmDy+mJXZDA+kGwFnYk D+6rf0iblFFcA3bT6Mt6kOrqXb8qkzifIQy6/Bht5mRZqHqTOetcLOSaYjU+Lg2c 4pZPuO7YS9MmOy9zB8YCLrjwIGW0nyksOcPPwaVQbltdmTpoiURqiUNe42MMOVRB SAJLP4jm+UOQpxHUqA6iHFlknOmQ2+B9f6DS0wkOY0OPZ7TMNt09wdLYILdc38UV wdV8XtCBzr0DLCLbvsPnkQarb/Up5Dc= -----END CERTIFICATE-----Generated at Fri Sep 25 21:21:00 2026 by rpki-client