$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/aac830dc-6f0f-3ecc-8c3c-397689daf4d2.roa File: aac830dc-6f0f-3ecc-8c3c-397689daf4d2.roa (raw, json) Hash identifier: AqjfSpvRI7AGjA3nltxs0JWjNpe1j+tdZKmqM3FSo1A= Subject key identifier: 50:4C:1F:AA:A3:96:2E:C8:A2:D2:92:A8:E7:F6:C3:5C:F2:D3:7D:10 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B341CDAA2F2D33340F2240400 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/aac830dc-6f0f-3ecc-8c3c-397689daf4d2.roa Signing time: Mon 15 Sep 2025 14:27:52 +0000 ROA not before: Mon 15 Sep 2025 14:27:52 +0000 ROA not after: Sun 14 Dec 2025 15:27:52 +0000 asID: 834 IP address blocks: 72.9.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:1c:da:a2:f2:d3:33:40:f2:24:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 15 14:27:52 2025 GMT Not After : Dec 14 15:27:52 2025 GMT Subject: CN=cda38bea-e294-477a-815d-26e24acefdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:a9:9e:39:ea:5c:e1:dd:28:13:66:74:55: d3:8e:ad:ac:5c:d2:d2:48:36:b4:0a:db:76:11:9c: 03:b8:17:4a:f5:71:cc:1d:59:be:1c:4f:b1:23:2b: d6:c3:52:65:8e:0d:6c:b7:16:0f:5c:77:0f:6b:6d: 7a:6a:a3:d2:5e:6e:65:8d:5d:1e:79:09:f8:1e:cb: 9f:4f:d3:29:bd:aa:dc:aa:12:63:b1:21:d1:39:ef: ee:22:7a:65:21:da:05:7d:49:20:50:38:32:1b:a8: 02:f0:a3:d7:07:06:28:52:8b:bf:d3:5f:c6:59:43: 89:88:73:0a:a6:c2:df:47:be:8a:01:fa:85:c9:4f: 98:5e:d9:3b:c3:d6:12:e0:1f:26:50:a9:f7:fb:0a: ad:3a:11:bc:f5:87:a2:ca:c9:47:be:7d:b3:fd:42: d9:f9:0f:db:e0:2f:b8:b4:80:b3:a8:27:7c:4c:67: cb:c2:18:8e:ce:41:49:73:9e:df:20:68:f1:1d:e3: b3:ee:e4:b4:56:71:6b:98:cc:88:64:03:89:b8:20: 25:86:36:df:47:32:f4:ab:6e:2e:c1:1c:26:1a:c6: 72:e3:c8:98:8a:e4:11:e5:81:a8:7b:d0:7a:29:5b: e2:a6:47:73:33:87:6c:d0:c2:6a:0d:fa:45:25:9c: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:1F:AA:A3:96:2E:C8:A2:D2:92:A8:E7:F6:C3:5C:F2:D3:7D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/aac830dc-6f0f-3ecc-8c3c-397689daf4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 72.9.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f8:6f:3d:f7:72:b9:b7:d5:b8:73:bf:d9:e7:e9:1f:1a:62: f9:79:99:bd:12:3e:eb:b9:4c:48:d7:2c:fd:7a:ca:22:ca:7c: 25:48:5e:1e:af:d1:f7:9e:15:d3:2c:5d:a4:20:8b:0a:20:18: 05:15:73:ff:89:93:9e:35:0f:51:dc:42:8c:52:9c:89:42:8d: bc:bd:33:f0:b4:cb:19:a4:db:45:06:2b:af:33:64:8c:20:c2: 62:7d:61:e4:bb:c8:95:d9:5a:46:27:32:61:01:e3:ce:1c:71: a8:8c:e3:d6:1a:d7:88:70:a2:26:bf:c1:75:f9:36:a1:28:40: 7e:97:05:21:16:5e:31:44:ff:28:6b:93:46:e2:0a:62:a4:c6: 35:0e:f3:00:23:a1:f5:b5:ec:b5:3d:75:14:1a:55:18:b5:3b: 31:89:02:96:db:58:68:a0:7e:57:3c:75:e8:14:ef:d6:e4:4d: e1:59:ce:88:c7:15:0e:9d:6a:d3:b5:7f:13:93:e9:4f:18:78: 54:38:c1:61:11:6d:9b:f2:18:89:2e:c1:6f:62:07:38:35:4c: 70:4f:a4:ea:f6:57:86:1f:de:3e:8d:f7:80:78:96:a2:1f:81: c4:b6:55:a9:45:b9:85:82:a3:e2:34:92:ee:fa:f5:1e:d9:25: d3:59:23:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0HNqi8tMzQPIkBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkxNTE0Mjc1MloXDTI1MTIxNDE1Mjc1MlowLzEtMCsGA1UEAxMk Y2RhMzhiZWEtZTI5NC00NzdhLTgxNWQtMjZlMjRhY2VmZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPypnjnqXOHdKBNmdFXTjq2sXNLSSDa0Ctt2 EZwDuBdK9XHMHVm+HE+xIyvWw1Jljg1stxYPXHcPa216aqPSXm5ljV0eeQn4Hsuf T9MpvarcqhJjsSHROe/uInplIdoFfUkgUDgyG6gC8KPXBwYoUou/01/GWUOJiHMK psLfR76KAfqFyU+YXtk7w9YS4B8mUKn3+wqtOhG89YeiyslHvn2z/ULZ+Q/b4C+4 tICzqCd8TGfLwhiOzkFJc57fIGjxHeOz7uS0VnFrmMyIZAOJuCAlhjbfRzL0q24u wRwmGsZy48iYiuQR5YGoe9B6KVvipkdzM4ds0MJqDfpFJZzwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBMH6qjli7IotKSqOf2w1zy030QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYWFjODMwZGMtNmYwZi0z ZWNjLThjM2MtMzk3Njg5ZGFmNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASAnpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD4bz33crm31bhzv9nn6R8aYvl5mb0SPuu5TEjXLP16yiLKfCVIXh6v 0feeFdMsXaQgiwogGAUVc/+Jk541D1HcQoxSnIlCjby9M/C0yxmk20UGK68zZIwg wmJ9YeS7yJXZWkYnMmEB484ccaiM49Ya14hwoia/wXX5NqEoQH6XBSEWXjFE/yhr k0biCmKkxjUO8wAjofW17LU9dRQaVRi1OzGJApbbWGigflc8degU79bkTeFZzojH FQ6datO1fxOT6U8YeFQ4wWERbZvyGIkuwW9iBzg1THBPpOr2V4Yf3j6N94B4lqIf gcS2ValFuYWCo+I0ku769R7ZJdNZIwc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:50 2025 by rpki-client