$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa File: db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa (raw, json) Hash identifier: 2PX/6Sb9j1jNlcnML/zEUhRLKV6leygsBuaRdCCKyLw= Subject key identifier: E2:49:1D:EE:82:4C:5B:BA:BD:8D:B8:92:58:E3:99:C5:E4:82:D0:DC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A31E0CB1825BFFB1AD2D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 72.85.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:1e:0c:b1:82:5b:ff:b1:ad:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=8edbb9f6-347a-4bed-bd5e-3780cc3f0bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:b5:a3:ad:27:da:96:76:66:8f:37:a5:94: bc:33:00:39:10:c1:d9:e3:04:2c:38:14:cf:f1:53: 2a:6d:ed:68:48:c4:f0:64:d9:c1:6b:b6:58:12:88: f3:e2:a1:9f:2d:5e:c4:8a:f9:0a:b5:1b:55:36:11: ee:36:0f:b9:19:65:26:f8:95:82:35:ad:56:3c:8a: 0e:70:bd:28:42:b3:57:05:fb:09:e2:58:eb:eb:1a: 34:62:e3:74:d0:ad:c8:6c:4d:a4:e6:d8:55:fe:7f: 8d:d8:52:b2:bd:e8:33:2d:ad:68:58:b8:12:e2:b1: fd:b9:2e:a5:49:01:1c:26:1a:f6:98:a1:03:d5:67: 52:4a:ea:17:5f:49:d4:0c:4e:3d:d7:c9:bf:65:f3: d8:63:61:d2:2f:99:59:0e:8c:ec:68:ed:55:56:d6: 9a:16:fb:52:90:72:46:34:0b:37:7f:24:c6:08:73: bc:98:37:88:a7:43:17:f4:94:ab:1e:bd:4c:c7:c1: 0a:64:8d:bd:ea:a5:ce:a2:23:bc:b6:30:43:f5:a4: a4:ea:11:9d:ea:96:bd:b5:2f:a7:12:c9:02:a4:39: 42:e4:3d:cc:0e:c0:20:2d:67:e0:d6:30:8c:24:b5: 9a:06:7c:aa:e2:01:f5:8c:e0:37:2a:8e:f7:c6:81: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:49:1D:EE:82:4C:5B:BA:BD:8D:B8:92:58:E3:99:C5:E4:82:D0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/db5d4128-fa27-3a18-bfb2-64cf96c831d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.85.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:be:67:25:7a:a6:fa:b1:66:aa:be:15:d6:91:7a:6b:c8:8f: f6:51:04:af:99:ef:12:f1:fc:13:11:57:80:00:ab:da:02:6d: 03:c2:4a:8c:a3:6e:9e:a3:4b:73:0a:4e:43:36:06:82:df:f7: 6a:ad:69:f9:7b:54:fa:5e:94:d9:8f:c3:92:ba:8e:08:18:d2: 01:a9:c2:f2:63:ba:69:0a:b7:23:6e:30:7e:33:a0:82:e7:86: bc:e2:08:ac:f3:f5:c2:6a:7a:bc:52:72:9d:41:de:41:da:21: 45:6d:95:7a:b4:a4:d0:e9:3f:4e:88:be:e1:9e:7a:09:29:09: da:cf:86:43:8b:96:d6:08:f9:83:8b:85:8d:67:d2:6a:af:47: f3:77:e7:c4:7c:0c:d5:1f:0d:29:88:b5:e5:f8:4d:e1:df:89: e2:dd:02:00:26:14:26:56:eb:73:a4:44:42:00:63:57:7f:df: a5:81:e0:71:d4:c8:be:fb:c5:39:dd:e5:22:c4:63:86:f4:1f: 21:0c:b1:37:83:67:ae:e1:26:91:3c:f0:db:d8:d2:ba:69:a9: 06:14:94:94:52:94:95:9a:a1:34:56:b2:7d:f1:ad:86:2f:b0: 6f:b1:a8:18:e4:65:c3:ea:c1:a1:4a:da:2b:a5:6b:a5:9c:0d: 65:b3:06:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qox4MsYJb/7GtLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk OGVkYmI5ZjYtMzQ3YS00YmVkLWJkNWUtMzc4MGNjM2YwYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKS1o60n2pZ2Zo83pZS8MwA5EMHZ4wQsOBTP 8VMqbe1oSMTwZNnBa7ZYEojz4qGfLV7EivkKtRtVNhHuNg+5GWUm+JWCNa1WPIoO cL0oQrNXBfsJ4ljr6xo0YuN00K3IbE2k5thV/n+N2FKyvegzLa1oWLgS4rH9uS6l SQEcJhr2mKED1WdSSuoXX0nUDE4918m/ZfPYY2HSL5lZDozsaO1VVtaaFvtSkHJG NAs3fyTGCHO8mDeIp0MX9JSrHr1Mx8EKZI296qXOoiO8tjBD9aSk6hGd6pa9tS+n EskCpDlC5D3MDsAgLWfg1jCMJLWaBnyq4gH1jOA3Ko73xoGxpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJJHe6CTFu6vY24kljjmcXkgtDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGI1ZDQxMjgtZmEyNy0z YTE4LWJmYjItNjRjZjk2YzgzMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHO+ZyV6pvqxZqq+FdaRemvIj/ZRBK+Z7xLx/BMRV4AAq9oCbQPCSoyj bp6jS3MKTkM2BoLf92qtafl7VPpelNmPw5K6jggY0gGpwvJjumkKtyNuMH4zoILn hrziCKzz9cJqerxScp1B3kHaIUVtlXq0pNDpP06IvuGeegkpCdrPhkOLltYI+YOL hY1n0mqvR/N358R8DNUfDSmIteX4TeHfieLdAgAmFCZW63OkREIAY1d/36WB4HHU yL77xTnd5SLEY4b0HyEMsTeDZ67hJpE88NvY0rppqQYUlJRSlJWaoTRWsn3xrYYv sG+xqBjkZcPqwaFK2iula6WcDWWzBgs= -----END CERTIFICATE-----Generated at Sun Nov 1 19:42:00 2026 by rpki-client