$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa File: 853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa (raw, json) Hash identifier: tX2JbelY/S7JbV84d8LvluoV5pEKB/Pnr1UFNQubP3Y= Subject key identifier: 75:6C:C9:25:4A:E3:7F:8F:0B:13:8A:EC:DE:28:AB:98:A1:B5:1F:5D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A3102C526F0D924E6D3B00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 72.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:10:2c:52:6f:0d:92:4e:6d:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=7f803db0-8b3d-4277-8004-13300fd8cd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:a7:15:b5:f1:95:78:4c:ca:46:9e:b5:da: 6e:80:e2:4d:4a:c7:a8:34:6e:51:be:bf:95:41:ec: 37:52:69:40:5b:1f:c9:02:da:68:87:bf:e6:52:4c: 2b:45:4c:8b:d9:20:01:bf:dc:4c:0f:2c:98:ed:1c: a8:f3:dd:06:46:23:6c:dc:5e:47:8e:2e:45:5b:fd: cf:c4:9b:6a:3d:ab:14:c3:45:15:fe:8e:d9:48:25: e8:dd:bf:17:46:51:da:32:23:33:c2:ba:ad:e9:63: ed:6b:db:9e:8b:ef:0a:13:59:96:6e:7c:c2:2e:83: 16:47:98:b6:a7:90:80:72:19:cc:46:4b:47:3d:f6: fe:e5:b9:36:db:fb:c3:76:28:bb:dc:7a:e2:86:32: f5:5d:63:a3:8c:ba:42:9a:88:76:16:4a:37:7e:93: 43:f6:44:74:d6:a5:59:3b:4c:e0:fa:16:c7:9d:0c: 99:03:f5:61:9f:8f:cd:6d:82:56:2e:6d:66:eb:31: 29:ff:df:17:06:9b:57:1a:d6:c8:b5:25:44:69:7e: 20:63:63:24:ce:b2:fb:25:52:9d:8b:51:f4:4f:be: e4:a9:88:f8:0d:74:aa:f9:bf:9a:6a:40:4f:aa:bb: 5b:f2:c1:d6:e6:87:ea:9f:53:60:8c:c2:65:10:e0: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6C:C9:25:4A:E3:7F:8F:0B:13:8A:EC:DE:28:AB:98:A1:B5:1F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:94:eb:a2:60:b5:9b:10:0d:d4:05:a4:05:1f:01:65:80:44: cb:c2:94:5f:1b:f4:17:37:5f:ab:2b:74:1b:f6:df:2c:9a:ca: 1e:90:78:47:6d:f2:3a:ba:36:ce:bb:fa:8c:14:cb:88:55:53: 2b:ec:bc:96:4c:b5:91:7a:6f:ba:c1:5f:65:e0:51:f8:f1:9b: 2f:c0:ac:b3:a9:37:88:d7:56:55:db:5a:21:84:7f:c9:e9:b6: 07:4e:e2:13:1c:34:44:3f:0f:37:fc:15:f2:fd:bd:cd:52:30: 5f:34:1b:c1:f9:28:2f:57:33:d6:38:79:1a:fb:86:c4:65:13: 14:50:2e:b4:9b:19:e3:a6:0f:84:c6:08:d8:c4:e1:01:97:41: d9:8d:75:f2:c1:01:99:ce:cd:47:62:c6:63:61:c3:ff:0c:b2: b3:04:49:75:97:74:4f:8a:c6:e7:4f:ec:65:7d:2a:ec:29:95: e0:7f:1b:d3:f1:78:5c:55:fc:5f:e5:32:17:f1:c6:98:61:d2: a2:e8:18:84:ca:0a:7b:d2:c7:f3:c9:2b:41:d0:3d:26:95:4b: 39:a8:4d:86:e2:87:1a:7f:6f:23:00:8e:9b:11:da:b1:27:a3: 25:a4:b6:e1:c9:b7:20:11:e4:ec:c7:04:fc:e1:c2:fd:1e:bf: fb:28:de:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxAsUm8Nkk5tOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk N2Y4MDNkYjAtOGIzZC00Mjc3LTgwMDQtMTMzMDBmZDhjZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhKnFbXxlXhMykaetdpugOJNSseoNG5Rvr+V Qew3UmlAWx/JAtpoh7/mUkwrRUyL2SABv9xMDyyY7Ryo890GRiNs3F5Hji5FW/3P xJtqPasUw0UV/o7ZSCXo3b8XRlHaMiMzwrqt6WPta9uei+8KE1mWbnzCLoMWR5i2 p5CAchnMRktHPfb+5bk22/vDdii73HrihjL1XWOjjLpCmoh2Fko3fpND9kR01qVZ O0zg+hbHnQyZA/Vhn4/NbYJWLm1m6zEp/98XBptXGtbItSVEaX4gY2MkzrL7JVKd i1H0T77kqYj4DXSq+b+aakBPqrtb8sHW5ofqn1NgjMJlEOAY8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVsySVK43+PCxOK7N4oq5ihtR9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODUzYTFlMWQtMmRjNi0z ODllLWE5MzUtZWNiYWU3Nzg5YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqU66JgtZsQDdQFpAUfAWWARMvClF8b9Bc3X6srdBv23yyayh6QeEdt 8jq6Ns67+owUy4hVUyvsvJZMtZF6b7rBX2XgUfjxmy/ArLOpN4jXVlXbWiGEf8np tgdO4hMcNEQ/Dzf8FfL9vc1SMF80G8H5KC9XM9Y4eRr7hsRlExRQLrSbGeOmD4TG CNjE4QGXQdmNdfLBAZnOzUdixmNhw/8MsrMESXWXdE+KxudP7GV9KuwpleB/G9Px eFxV/F/lMhfxxphh0qLoGITKCnvSx/PJK0HQPSaVSzmoTYbihxp/byMAjpsR2rEn oyWktuHJtyAR5OzHBPzhwv0ev/so3q0= -----END CERTIFICATE-----Generated at Sun Nov 1 13:04:04 2026 by rpki-client