$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa File: 85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa (raw, json) Hash identifier: mT73C7sgcYTYmvf6pRL02PjU6TnVYxO+r5vF0wOax5E= Subject key identifier: 9F:41:98:4F:FE:D3:49:F5:B7:07:8A:41:95:8B:47:4C:8B:E3:C1:27 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584F3597A525E1F13A85A1932300 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa Signing time: Thu 17 Sep 2026 22:18:50 +0000 ROA not before: Thu 17 Sep 2026 22:18:50 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 212238 IP address blocks: 72.9.255.0/24 maxlen: 24 207.210.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:97:a5:25:e1:f1:3a:85:a1:93:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 17 22:18:50 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=1134d976-f601-4610-ae40-a105ba1a3165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:24:8b:86:fb:fd:c2:66:fe:8e:41:40:29:9c: 37:f4:c5:b2:5e:e7:9c:68:4f:93:a7:9b:4a:9c:b6: 93:ae:fc:8f:ab:30:39:27:9b:d9:0a:1b:19:78:c4: 8a:89:c8:81:65:4a:c4:ee:23:0e:8c:aa:fc:55:c3: 27:9d:6f:c4:75:87:a0:e1:d6:11:14:d3:c2:f0:68: fd:87:24:6e:bb:a1:b6:d9:48:0e:29:50:ca:1a:16: 21:28:57:70:1f:c6:fb:d9:9e:f7:3e:41:ef:8c:83: 3c:37:24:28:59:a2:33:5c:06:83:5a:5e:ee:78:75: 29:a6:70:f5:96:94:fd:d9:7f:8c:b4:6a:0d:81:eb: 05:d4:ee:c4:d4:ec:19:b3:bd:e7:4d:45:83:95:51: 27:71:b6:4f:ca:b0:35:c0:8e:e1:e1:61:11:58:19: d4:5b:b9:24:ca:ff:f9:a3:d1:8c:0f:53:ed:e4:ea: 6a:ee:03:43:67:e5:37:f8:65:72:f0:7a:4d:63:ff: a1:bb:b4:9f:8c:cb:c4:dd:80:52:e8:7c:99:37:19: c2:f0:ad:83:43:14:63:ab:6c:bf:6e:0c:bd:7f:78: 06:c4:5d:1e:d1:ab:7e:75:67:a8:26:02:4b:dc:a3: e6:56:52:a0:5f:03:55:61:22:1e:9a:05:1f:46:b8: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:41:98:4F:FE:D3:49:F5:B7:07:8A:41:95:8B:47:4C:8B:E3:C1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/85b23fe7-16bf-35b9-ae08-09a4ecdde153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.255.0/24 207.210.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e5:d3:ce:48:3b:8d:82:e1:5d:1e:12:c1:5c:6c:7b:c6:c3: 93:02:ca:aa:d5:04:d2:d3:8b:1b:1a:72:b5:f2:05:0d:5a:05: e1:96:4d:89:15:44:87:04:e9:f5:a7:64:e4:42:70:58:57:ed: 1e:d9:52:30:2a:5a:df:07:5b:d4:2f:56:2d:91:de:ff:84:27: 49:cb:24:0e:4e:55:09:4d:0a:09:61:2f:00:09:30:ea:4f:81: e0:d2:03:09:1a:47:94:ce:6d:8d:29:3a:5b:0a:a3:e7:65:a2: 70:e5:86:55:79:47:0f:ce:24:0f:87:5a:b9:d4:92:26:7e:59: 1d:71:ef:ee:a2:9b:a6:a1:d8:7a:ab:7f:7e:d3:0d:ea:38:c2: c6:ca:83:d3:db:d6:64:a4:8e:62:62:90:f7:4f:4a:cf:93:82: 80:67:99:7d:17:b3:d5:ff:86:40:74:26:87:fb:17:e4:d4:06: 05:ee:b1:9b:9c:91:bc:46:70:f8:28:e8:44:ba:64:73:11:be: 2f:09:8e:da:62:c4:40:45:cd:d2:7e:fb:2d:f2:d6:18:1d:25: 0c:d1:89:ae:3e:af:b7:0a:dd:eb:86:7f:69:45:8c:70:7f:8f: 1e:a6:3d:2a:a4:1e:c8:60:cc:d1:3c:7f:db:8b:2f:81:b1:e3: 94:4f:2a:d3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE81l6Ul4fE6haGTIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI2MDkxNzIyMTg1MFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MTEzNGQ5NzYtZjYwMS00NjEwLWFlNDAtYTEwNWJhMWEzMTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CSLhvv9wmb+jkFAKZw39MWyXuecaE+Tp5tK nLaTrvyPqzA5J5vZChsZeMSKiciBZUrE7iMOjKr8VcMnnW/EdYeg4dYRFNPC8Gj9 hyRuu6G22UgOKVDKGhYhKFdwH8b72Z73PkHvjIM8NyQoWaIzXAaDWl7ueHUppnD1 lpT92X+MtGoNgesF1O7E1OwZs73nTUWDlVEncbZPyrA1wI7h4WERWBnUW7kkyv/5 o9GMD1Pt5Opq7gNDZ+U3+GVy8HpNY/+hu7SfjMvE3YBS6HyZNxnC8K2DQxRjq2y/ bgy9f3gGxF0e0at+dWeoJgJL3KPmVlKgXwNVYSIemgUfRrjEtQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJ9BmE/+00n1tweKQZWLR0yL48EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvODViMjNmZTctMTZiZi0z NWI5LWFlMDgtMDlhNGVjZGRlMTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQASAn/AwQA z9JnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGfl085IO42C4V0eEsFcbHvGw5MCyqrVBNLTixsacrXyBQ1a BeGWTYkVRIcE6fWnZORCcFhX7R7ZUjAqWt8HW9QvVi2R3v+EJ0nLJA5OVQlNCglh LwAJMOpPgeDSAwkaR5TObY0pOlsKo+dlonDlhlV5Rw/OJA+HWrnUkiZ+WR1x7+6i m6ah2Hqrf37TDeo4wsbKg9Pb1mSkjmJikPdPSs+TgoBnmX0Xs9X/hkB0Jof7F+TU BgXusZuckbxGcPgo6ES6ZHMRvi8JjtpixEBFzdJ++y3y1hgdJQzRia4+r7cK3euG f2lFjHB/jx6mPSqkHshgzNE8f9uLL4Gx45RPKtM= -----END CERTIFICATE-----Generated at Tue Sep 22 06:27:24 2026 by rpki-client