$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ccd5e02-34bd-3b2f-b724-94009d8a0f75.roa File: 5ccd5e02-34bd-3b2f-b724-94009d8a0f75.roa (raw, json) Hash identifier: Mc/Di1DOzn5lvfv5oyXNLkTZFY/V6DdO95K3QGX5inE= Subject key identifier: E0:07:A4:46:17:1D:B3:72:81:98:68:EF:FF:A7:3E:9C:49:89:57:A6 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584EA5AA98AF3E84231E16B95B60 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ccd5e02-34bd-3b2f-b724-94009d8a0f75.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 834 IP address blocks: 72.9.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:98:af:3e:84:23:1e:16:b9:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=85048990-91b2-45fc-9be2-f5198de81aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:23:c7:25:25:47:0c:9b:c8:cd:aa:da:78:b6: e0:0b:49:31:1c:53:9b:1e:cc:0b:84:4a:be:e7:ed: d3:07:16:33:c9:56:34:06:bd:f4:a9:e4:3e:83:ba: bb:4f:c3:17:85:4b:dc:d8:f1:df:ac:3e:2b:95:72: f5:8c:0e:d6:ba:ff:8c:8d:2d:43:35:cf:77:96:98: 1e:68:18:bb:35:ab:b8:21:58:6c:7d:7d:4e:41:35: d5:7e:b3:58:18:41:cf:ef:32:5a:9c:ef:72:3b:43: 65:b8:46:1f:0f:da:a1:66:4d:f2:dd:de:b8:27:55: 45:f9:4c:0c:18:67:68:ea:68:0f:27:51:fc:88:53: 73:b3:39:fc:10:3a:9d:a8:16:bf:bf:c5:49:49:ea: bb:41:0d:96:ff:27:bc:a4:4d:1a:39:99:39:44:b0: 6a:ce:88:d9:d9:9d:59:49:c2:ee:4d:f3:3d:a9:70: 46:7d:be:9f:77:d3:c3:2b:cc:b5:d7:bd:ce:29:66: 4b:81:78:d2:6f:cb:30:f9:0e:4b:35:f7:66:79:23: 23:db:66:b2:89:91:04:a0:b2:46:7b:9f:3e:b0:cc: 74:05:ed:a2:da:31:79:65:73:f4:81:e1:f1:40:69: dc:4e:76:69:ec:ea:23:2c:71:40:0b:42:09:4c:be: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:07:A4:46:17:1D:B3:72:81:98:68:EF:FF:A7:3E:9C:49:89:57:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/5ccd5e02-34bd-3b2f-b724-94009d8a0f75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:34:df:c9:11:d3:5a:b1:0c:c6:ff:31:ce:04:47:ad:bf:63: 6b:d0:67:eb:d1:24:ac:2d:07:dc:04:19:7a:1e:7d:36:b9:fb: cc:e2:2c:d5:19:3f:e6:c2:43:b3:a5:70:3e:e7:0d:41:44:a8: 09:db:f5:a0:63:85:e2:0e:99:27:c2:d8:9f:57:6e:53:5d:1e: 56:cd:f2:0c:67:dc:98:31:e7:ca:9b:80:b1:cb:4c:fc:7e:75: a4:a1:3b:46:d7:58:5c:54:6c:69:d8:dd:60:51:69:2d:de:c0: d8:a9:7c:04:a2:f1:33:f5:c5:55:d8:f0:64:23:c6:7c:a2:e4: 10:df:cc:2b:50:2f:ee:ae:02:2f:d5:57:97:ab:e4:ab:8f:aa: 09:8a:25:76:ae:8a:72:9b:6a:23:94:3a:7d:a3:7e:7e:e6:7c: 3d:69:e8:37:81:70:20:4f:e0:3f:7c:36:20:f7:fe:e9:41:4b: 38:f0:29:51:5e:49:f7:61:ef:70:c2:ab:eb:86:d3:9f:5f:65: ed:18:67:3d:51:3f:16:a7:94:0b:27:f7:53:2e:c6:3f:d0:46: a6:9d:03:34:50:55:16:61:8d:24:f0:e0:f5:21:ac:da:a1:b0: 75:5e:e7:2c:ba:b4:37:fd:e9:95:0f:9c:d7:82:81:9b:75:71: 23:3e:79:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqpivPoQjHha5W2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk ODUwNDg5OTAtOTFiMi00NWZjLTliZTItZjUxOThkZTgxYWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniPHJSVHDJvIzaraeLbgC0kxHFObHswLhEq+ 5+3TBxYzyVY0Br30qeQ+g7q7T8MXhUvc2PHfrD4rlXL1jA7Wuv+MjS1DNc93lpge aBi7Nau4IVhsfX1OQTXVfrNYGEHP7zJanO9yO0NluEYfD9qhZk3y3d64J1VF+UwM GGdo6mgPJ1H8iFNzszn8EDqdqBa/v8VJSeq7QQ2W/ye8pE0aOZk5RLBqzojZ2Z1Z ScLuTfM9qXBGfb6fd9PDK8y1173OKWZLgXjSb8sw+Q5LNfdmeSMj22ayiZEEoLJG e58+sMx0Be2i2jF5ZXP0geHxQGncTnZp7OojLHFAC0IJTL43iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAHpEYXHbNygZho7/+nPpxJiVemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvNWNjZDVlMDItMzRiZC0z YjJmLWI3MjQtOTQwMDlkOGEwZjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE038kR01qxDMb/Mc4ER62/Y2vQZ+vRJKwtB9wEGXoefTa5+8ziLNUZ P+bCQ7OlcD7nDUFEqAnb9aBjheIOmSfC2J9XblNdHlbN8gxn3Jgx58qbgLHLTPx+ daShO0bXWFxUbGnY3WBRaS3ewNipfASi8TP1xVXY8GQjxnyi5BDfzCtQL+6uAi/V V5er5KuPqgmKJXauinKbaiOUOn2jfn7mfD1p6DeBcCBP4D98NiD3/ulBSzjwKVFe Sfdh73DCq+uG059fZe0YZz1RPxanlAsn91Muxj/QRqadAzRQVRZhjSTw4PUhrNqh sHVe5yy6tDf96ZUPnNeCgZt1cSM+efg= -----END CERTIFICATE-----Generated at Tue Jul 28 19:47:29 2026 by rpki-client