$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa File: 853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa (raw, json) Hash identifier: KplVXBUE05SdatgxSLA5ArLyymORc2uPZ+CZcCnZwXg= Subject key identifier: 73:E2:64:19:8D:61:EA:51:8C:FC:F5:49:C6:FD:7A:19:38:D3:D6:24 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB7610F316641E7B2712440 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 72.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:61:0f:31:66:41:e7:b2:71:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=2933d9cd-85ce-4c2f-8268-49095b9680eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:cd:9e:95:08:b6:cf:7b:2f:13:48:3c:f6: 82:79:dd:eb:2d:fd:c7:47:e6:28:b5:5f:72:e7:83: 6a:cf:e8:e2:64:7a:a1:e7:8c:bc:95:22:8c:7a:29: 1b:c5:8a:d8:58:ba:fa:45:ca:7d:ae:14:6a:9c:6a: b5:fa:57:9e:98:cf:5a:58:aa:ab:c9:5b:4b:0c:10: 60:51:66:bc:95:72:c6:7a:07:2a:a9:0e:b8:4b:26: 62:53:4c:87:70:37:27:80:d7:88:88:bc:6c:40:6f: ce:67:1e:14:19:74:0a:5f:7b:61:8c:02:b8:f1:ae: da:93:76:3a:ce:56:c9:b0:3b:c6:2c:07:7f:8b:14: 7b:65:e2:5e:3f:25:d4:04:aa:5a:88:d4:fb:5f:fe: da:05:75:72:06:5e:7b:f5:e5:8e:9e:84:4a:43:10: ac:74:5a:57:a3:9c:b9:05:36:88:87:da:b7:aa:97: 54:88:de:4c:48:73:90:aa:69:8a:94:78:0c:fc:6d: 7e:a7:86:d8:20:88:28:a0:50:43:45:a4:e0:45:1d: 64:98:6b:62:fd:57:8b:b9:18:b9:02:c7:bd:e1:ef: 38:ee:b1:03:70:5b:3b:8a:15:84:91:ba:b9:4f:e1: 8c:d0:8c:11:a0:67:1a:a4:26:30:56:21:62:8e:57: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E2:64:19:8D:61:EA:51:8C:FC:F5:49:C6:FD:7A:19:38:D3:D6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d7:58:54:fc:59:9a:ae:e4:a4:7a:cd:46:91:26:f9:fb:82: e5:fd:2a:a6:9f:e0:08:60:f3:fe:29:86:60:53:0b:3c:36:c1: e4:1c:a0:24:ec:de:86:51:8e:51:ca:50:f3:0f:9a:83:4b:68: a0:e0:c6:05:96:c9:47:69:9e:30:d8:6f:a8:89:42:d5:49:e3: 86:86:35:7f:f6:64:0a:36:70:c3:d7:13:2c:6d:c7:18:4f:dd: 9f:41:5b:b4:d1:8e:5b:e8:41:8a:32:0a:24:90:45:ac:fd:14: d9:69:38:52:a8:b6:8d:27:a6:ae:f3:29:24:01:97:30:77:5c: 93:f5:0d:75:06:6f:c5:94:96:a8:2e:54:7d:ee:60:9e:bf:73: 8c:72:fc:68:b1:0d:d2:e3:9e:57:e5:c6:c7:63:9e:87:cd:c4: f4:88:41:d7:42:ba:b8:65:f0:b0:d6:c2:ca:18:f3:fb:27:03: 60:11:d0:82:59:d3:76:53:19:ae:3d:7f:e5:9a:f9:3e:c1:2c: 90:56:4b:d4:45:04:31:52:fb:19:d9:b4:75:bd:6c:76:2a:99: 73:41:e1:51:03:b7:4f:63:20:73:52:9a:b3:b5:eb:a1:7e:f0: fe:4f:75:19:2f:5f:80:28:9f:56:ef:58:26:82:2c:bd:83:04: 4e:f6:e2:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2EPMWZB57JxJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MjkzM2Q5Y2QtODVjZS00YzJmLTgyNjgtNDkwOTViOTY4MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikTNnpUIts97LxNIPPaCed3rLf3HR+YotV9y 54Nqz+jiZHqh54y8lSKMeikbxYrYWLr6Rcp9rhRqnGq1+leemM9aWKqryVtLDBBg UWa8lXLGegcqqQ64SyZiU0yHcDcngNeIiLxsQG/OZx4UGXQKX3thjAK48a7ak3Y6 zlbJsDvGLAd/ixR7ZeJePyXUBKpaiNT7X/7aBXVyBl579eWOnoRKQxCsdFpXo5y5 BTaIh9q3qpdUiN5MSHOQqmmKlHgM/G1+p4bYIIgooFBDRaTgRR1kmGti/VeLuRi5 Ase94e847rEDcFs7ihWEkbq5T+GM0IwRoGcapCYwViFijlcKDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPiZBmNYepRjPz1Scb9ehk409YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODUzYTFlMWQtMmRjNi0z ODllLWE5MzUtZWNiYWU3Nzg5YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnXWFT8WZqu5KR6zUaRJvn7guX9Kqaf4Ahg8/4phmBTCzw2weQcoCTs 3oZRjlHKUPMPmoNLaKDgxgWWyUdpnjDYb6iJQtVJ44aGNX/2ZAo2cMPXEyxtxxhP 3Z9BW7TRjlvoQYoyCiSQRaz9FNlpOFKoto0npq7zKSQBlzB3XJP1DXUGb8WUlqgu VH3uYJ6/c4xy/GixDdLjnlflxsdjnofNxPSIQddCurhl8LDWwsoY8/snA2AR0IJZ 03ZTGa49f+Wa+T7BLJBWS9RFBDFS+xnZtHW9bHYqmXNB4VEDt09jIHNSmrO166F+ 8P5PdRkvX4Aon1bvWCaCLL2DBE724go= -----END CERTIFICATE-----Generated at Sun Sep 13 18:09:44 2026 by rpki-client