$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2fd844c8-5f89-31bc-a3ba-1e1c27a86c04.roa File: 2fd844c8-5f89-31bc-a3ba-1e1c27a86c04.roa (raw, json) Hash identifier: 12JyBLTbxyHywnJ1UEH9XKIfZoiTV8ErdWvDX8Sx14k= Subject key identifier: 39:CC:B6:AF:11:C3:77:87:09:FA:28:59:C5:1B:01:1C:6F:19:E0:E9 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584F1C613866D06DC806CB43DE00 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2fd844c8-5f89-31bc-a3ba-1e1c27a86c04.roa Signing time: Tue 08 Sep 2026 21:33:58 +0000 ROA not before: Tue 08 Sep 2026 21:33:58 +0000 ROA not after: Mon 07 Dec 2026 22:33:58 +0000 asID: 215224 IP address blocks: 72.9.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:61:38:66:d0:6d:c8:06:cb:43:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 8 21:33:58 2026 GMT Not After : Dec 7 22:33:58 2026 GMT Subject: CN=8d04045c-2712-4d0c-9865-4abcd3e4f9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:df:55:d1:54:58:a5:65:a9:1d:b8:d4:9e: 02:d7:ff:ca:1a:35:3b:c9:46:01:fc:d4:bf:d4:af: 07:a3:3a:8e:42:2c:38:97:a6:e4:06:d3:9d:e8:7f: 46:c1:5f:59:01:82:94:55:4b:6b:c8:68:59:55:22: a8:c9:3d:b0:00:94:12:81:61:a5:a5:ed:d0:41:be: 9b:68:65:35:85:9e:0d:74:85:a7:c7:6d:e2:d7:47: 06:3f:f2:73:3a:c6:93:ed:74:71:5b:48:f4:6b:7b: 28:03:d8:f1:2c:4b:d9:8a:40:a4:0e:d0:7f:0e:b6: 57:ec:c1:97:22:eb:0b:09:63:d3:57:e5:24:92:b1: 8e:19:c6:0b:63:3d:9a:a9:67:02:f1:4b:0a:5a:d1: a5:1b:e9:51:ac:74:b6:ab:1b:0c:af:9e:ec:42:b8: 7e:5c:3d:32:e0:55:43:5d:bc:77:b0:7a:b4:82:20: 1b:b4:10:63:b1:be:92:53:18:05:d5:a0:9a:35:3c: 58:29:91:17:f1:b0:1f:1d:a2:b9:3c:15:11:b8:55: bf:9d:98:2b:ba:e5:7d:58:6c:41:8b:48:65:12:08: 61:17:77:5b:dd:a3:98:7b:f9:b2:5a:00:ff:e8:76: 44:52:1c:81:8b:4b:cf:77:ad:85:4e:61:8e:c7:dd: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CC:B6:AF:11:C3:77:87:09:FA:28:59:C5:1B:01:1C:6F:19:E0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2fd844c8-5f89-31bc-a3ba-1e1c27a86c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0e:ef:0f:b1:a5:f2:f3:75:2a:96:b6:f6:93:e5:65:af:5f: c6:ee:1d:e5:6e:77:2b:a5:1a:55:24:79:10:2a:a6:9b:15:42: 39:f3:63:df:43:80:41:df:51:5b:5c:24:95:66:3d:a0:c7:09: 09:69:79:fb:a8:81:9c:4c:9a:17:72:5e:90:f2:97:7c:1f:bf: a1:5c:f4:48:c7:72:0a:bf:3a:e4:19:48:3a:b7:64:f5:09:c7: 50:e4:5c:85:f1:a8:15:a5:d2:3f:00:ad:9d:b5:cc:c5:ee:1c: 11:92:5f:3c:46:4e:be:1a:9b:2e:e6:8b:c8:23:aa:6d:c9:45: 07:4d:9e:04:5d:2c:29:3d:b2:99:1c:ea:72:6d:ae:69:33:b8: c1:9a:af:0d:de:71:94:c0:54:01:31:3b:59:c0:57:4d:d0:77: 17:be:3b:92:bf:d3:a7:19:1a:93:09:6c:b2:81:ba:a0:b9:42: c6:77:b7:85:b8:61:38:b6:e3:52:2b:0e:62:a9:a0:07:b8:62: 69:61:74:c7:62:62:4f:55:89:37:f6:63:a4:6b:d3:b2:05:47: 32:fb:7f:e3:0d:68:4b:0d:9d:b3:59:4c:be:95:c3:f7:4f:1f: 28:cc:ae:81:93:af:0f:f6:53:5d:85:fe:ac:ac:de:bc:e4:59: ed:87:bb:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cYThm0G3IBstD3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDkwODIxMzM1OFoXDTI2MTIwNzIyMzM1OFowLzEtMCsGA1UEAxMk OGQwNDA0NWMtMjcxMi00ZDBjLTk4NjUtNGFiY2QzZTRmOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE/fVdFUWKVlqR241J4C1//KGjU7yUYB/NS/ 1K8HozqOQiw4l6bkBtOd6H9GwV9ZAYKUVUtryGhZVSKoyT2wAJQSgWGlpe3QQb6b aGU1hZ4NdIWnx23i10cGP/JzOsaT7XRxW0j0a3soA9jxLEvZikCkDtB/DrZX7MGX IusLCWPTV+UkkrGOGcYLYz2aqWcC8UsKWtGlG+lRrHS2qxsMr57sQrh+XD0y4FVD Xbx3sHq0giAbtBBjsb6SUxgF1aCaNTxYKZEX8bAfHaK5PBURuFW/nZgruuV9WGxB i0hlEghhF3db3aOYe/myWgD/6HZEUhyBi0vPd62FTmGOx93ZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnMtq8Rw3eHCfooWcUbARxvGeDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMmZkODQ0YzgtNWY4OS0z MWJjLWEzYmEtMWUxYzI3YTg2YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAO7w+xpfLzdSqWtvaT5WWvX8buHeVudyulGlUkeRAqppsVQjnzY99D gEHfUVtcJJVmPaDHCQlpefuogZxMmhdyXpDyl3wfv6Fc9EjHcgq/OuQZSDq3ZPUJ x1DkXIXxqBWl0j8ArZ21zMXuHBGSXzxGTr4amy7mi8gjqm3JRQdNngRdLCk9spkc 6nJtrmkzuMGarw3ecZTAVAExO1nAV03Qdxe+O5K/06cZGpMJbLKBuqC5QsZ3t4W4 YTi241IrDmKpoAe4YmlhdMdiYk9ViTf2Y6Rr07IFRzL7f+MNaEsNnbNZTL6Vw/dP HyjMroGTrw/2U12F/qys3rzkWe2Hu2o= -----END CERTIFICATE-----Generated at Mon Sep 21 11:49:42 2026 by rpki-client