$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/070a4dda-b706-3929-af27-ad2bc52cd064.roa File: 070a4dda-b706-3929-af27-ad2bc52cd064.roa (raw, json) Hash identifier: umFXi9/ENBb+PLmrjJRwjtyKGJxXJAfMGeMTWjIPEoY= Subject key identifier: 0B:24:72:A0:76:20:92:79:39:97:DE:06:C1:CB:6C:8C:7C:E9:A1:16 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584EC0A74F372885668EDF338E8C Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/070a4dda-b706-3929-af27-ad2bc52cd064.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 33363 IP address blocks: 72.17.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:4f:37:28:85:66:8e:df:33:8e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=0a31a766-00c9-499d-928d-35d8a8fd0cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:bc:7e:12:65:7d:09:9c:e0:9d:98:03:99: 12:0d:8a:81:6a:39:3a:d7:4e:25:f3:1e:49:aa:e1: 51:47:30:fa:99:83:a3:94:4f:ba:a5:33:1d:f2:b6: c8:86:96:0d:4d:94:5d:35:52:1c:d8:2d:dc:df:59: 96:9a:da:db:b8:f3:22:e2:86:3d:bd:1d:e7:0e:41: b8:0a:e9:b9:c9:bb:59:75:99:45:0a:2c:26:56:2b: 75:be:1e:62:6b:b4:42:53:de:5e:60:8c:3c:e1:24: 19:be:97:cb:f9:1f:df:a5:6c:b9:2e:be:73:f0:dd: 1d:7d:2d:60:76:db:ae:d1:b7:7e:41:51:05:d8:60: f2:b6:35:7e:1f:c6:23:8b:24:e6:8e:17:03:87:2e: 64:ee:6b:f6:12:8e:d9:01:fd:62:7c:4b:85:6e:99: 58:1b:cb:e8:92:96:bf:e0:ad:1f:95:fd:7b:96:67: 94:b6:4a:58:44:dc:0e:d2:4e:70:a4:9e:08:04:a6: b2:94:04:e5:da:59:ab:72:dd:16:7a:28:47:7f:87: 41:5d:5e:5e:a7:94:ff:77:35:87:26:77:dd:66:09: 34:de:fa:eb:39:5b:39:1b:d1:82:f4:ce:4c:c0:a0: f2:89:fe:23:f6:d5:f4:3f:5c:49:31:8f:59:0f:40: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:72:A0:76:20:92:79:39:97:DE:06:C1:CB:6C:8C:7C:E9:A1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/070a4dda-b706-3929-af27-ad2bc52cd064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 72.17.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3c:f6:a8:7e:38:c5:fe:49:bf:0a:c8:a2:82:47:49:88:7f: 21:fc:c3:76:e7:39:2d:f7:52:75:16:39:82:62:b9:49:5d:a9: 35:5b:a4:20:68:52:d2:d0:8b:56:32:8a:57:a2:48:4c:1b:cd: 5f:41:7f:04:58:40:49:a1:02:f3:fb:70:bb:a8:d9:fd:d9:77: 0a:56:16:b5:f7:5e:88:7d:ef:b9:88:12:97:83:32:27:7c:26: 4e:20:7d:24:7e:9f:89:57:69:47:9b:ac:6b:61:0d:dd:58:2c: 59:68:0c:bc:0a:f7:b7:f4:51:46:32:45:6b:08:76:57:06:3e: c4:00:16:c8:5a:5f:b3:c9:30:28:44:7b:ab:4b:8d:7f:aa:65: 9a:88:bd:da:da:72:5b:07:99:0e:28:d7:ea:a8:95:e4:fa:d4: 52:a5:53:af:6b:35:83:0c:e1:1a:8c:56:1e:c4:67:01:07:f9: 59:03:c4:6a:d6:a3:a3:84:56:ef:b7:0b:56:6c:23:7f:43:13: ba:82:f0:c5:43:1c:f0:95:41:30:ab:a1:3c:d1:83:57:8e:9a: 36:36:eb:ec:50:5b:33:7c:51:a1:92:fb:dc:75:17:b2:a3:9d: a8:43:5b:8d:7d:66:5c:52:59:7c:d5:05:ca:04:f4:67:37:33: 71:91:1a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Ap083KIVmjt8zjowwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MGEzMWE3NjYtMDBjOS00OTlkLTkyOGQtMzVkOGE4ZmQwY2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBS8fhJlfQmc4J2YA5kSDYqBajk6104l8x5J quFRRzD6mYOjlE+6pTMd8rbIhpYNTZRdNVIc2C3c31mWmtrbuPMi4oY9vR3nDkG4 Cum5ybtZdZlFCiwmVit1vh5ia7RCU95eYIw84SQZvpfL+R/fpWy5Lr5z8N0dfS1g dtuu0bd+QVEF2GDytjV+H8YjiyTmjhcDhy5k7mv2Eo7ZAf1ifEuFbplYG8vokpa/ 4K0flf17lmeUtkpYRNwO0k5wpJ4IBKaylATl2lmrct0WeihHf4dBXV5ep5T/dzWH JnfdZgk03vrrOVs5G9GC9M5MwKDyif4j9tX0P1xJMY9ZD0D8UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAskcqB2IJJ5OZfeBsHLbIx86aEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDcwYTRkZGEtYjcwNi0z OTI5LWFmMjctYWQyYmM1MmNkMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSBEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc89qh+OMX+Sb8KyKKCR0mIfyH8w3bnOS33UnUWOYJiuUldqTVbpCBo UtLQi1YyileiSEwbzV9BfwRYQEmhAvP7cLuo2f3ZdwpWFrX3Xoh977mIEpeDMid8 Jk4gfSR+n4lXaUebrGthDd1YLFloDLwK97f0UUYyRWsIdlcGPsQAFshaX7PJMChE e6tLjX+qZZqIvdraclsHmQ4o1+qoleT61FKlU69rNYMM4RqMVh7EZwEH+VkDxGrW o6OEVu+3C1ZsI39DE7qC8MVDHPCVQTCroTzRg1eOmjY26+xQWzN8UaGS+9x1F7Kj nahDW419ZlxSWXzVBcoE9Gc3M3GRGvE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:05:37 2026 by rpki-client