$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa File: df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa (raw, json) Hash identifier: QOVrKmumSeJo+JZnCSJ42qCaCQ26xDQB4cZ/qjOjwug= Subject key identifier: 04:BF:88:83:9F:7A:7D:E7:2F:E9:6F:80:66:1C:CE:D4:46:4F:E9:72 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EEEB7610238601013A3908380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 72.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:61:02:38:60:10:13:a3:90:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=97c9053c-2498-434e-8468-a9d87347e27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:4c:12:41:5d:93:8d:1e:9b:fd:5c:c3:b4: 8d:7a:50:74:93:10:7a:25:bd:db:d0:85:16:c2:68: e0:e6:d6:90:7f:e7:e0:6a:2a:a6:e2:19:c4:71:cd: aa:6d:8a:8c:ce:4a:97:df:17:11:be:04:e7:c5:73: 38:18:d7:86:e0:dd:f7:28:d9:d2:42:28:48:67:c9: de:45:70:c9:4d:31:34:ed:65:64:1c:f0:e0:3c:ed: 48:4d:56:c2:f4:c4:13:b0:94:05:0a:4c:d6:b7:2b: c8:22:83:64:d2:77:b1:98:2d:81:b5:b7:46:ae:d1: ac:7d:7d:99:4d:fa:91:4b:3b:12:ca:f6:ef:d3:75: 00:30:45:ce:7a:ba:b0:42:f4:07:04:15:e0:c3:bd: d3:6d:2e:d7:3d:77:1c:5c:11:36:55:64:ba:5f:ad: a2:d5:89:89:ae:0a:cf:bd:88:f9:1c:e6:9a:7f:28: 19:46:1e:a2:55:16:ce:8b:2e:77:f3:4c:17:75:ce: dc:b3:24:af:52:9a:b9:f0:fb:dd:5f:00:c5:d4:39: 02:f3:f2:9b:71:d3:3b:f4:10:bc:cc:00:d1:b6:a1: d3:da:00:6f:76:04:96:89:42:5c:96:1c:d5:c8:fd: c3:2d:d8:e4:a7:da:81:d0:96:06:20:48:af:62:ec: 2b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BF:88:83:9F:7A:7D:E7:2F:E9:6F:80:66:1C:CE:D4:46:4F:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:75:b4:0e:97:d9:84:58:63:9f:3a:ef:7b:de:8f:f2:a3:eb: 66:ab:ed:9d:97:0a:11:fa:c9:89:83:2b:97:1f:95:18:df:e4: 98:72:2d:2b:c8:a8:0e:c3:dd:8e:1c:e0:26:6a:2c:f9:22:ff: 05:59:cd:ad:bc:a0:19:56:a5:9b:e4:a1:fc:aa:37:4b:6e:d3: 53:dd:38:54:f0:d4:ad:c9:31:d7:fb:9a:20:10:20:97:2f:52: 6f:e4:95:aa:ab:4e:89:72:43:86:ce:35:7a:c6:7d:ad:6d:e5: bc:27:8e:37:e8:4e:4c:a0:25:08:8e:2f:08:26:5c:20:dc:ef: 5a:73:17:d5:97:40:a9:6b:fa:25:fe:fa:ee:61:34:06:d4:1d: 94:9f:2c:60:54:76:97:42:59:3e:36:a5:bd:3b:6d:d2:18:27: 69:96:58:3f:1d:38:c4:a9:bd:fa:7a:37:f5:6d:b4:36:20:c6: 7e:2a:4e:32:6a:6f:07:c5:96:c3:e4:af:d2:52:bd:c4:61:65: 40:00:d8:ff:9a:6d:42:dc:5e:c6:1a:a0:ad:bf:4b:05:da:16: 26:77:a2:d2:cf:12:4f:b8:02:4a:b6:19:98:a0:64:50:a2:c5: f1:8a:29:17:41:bf:c9:22:93:eb:b0:d3:2e:d4:76:3a:9a:25: 2e:45:15:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut2ECOGAQE6OQg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk OTdjOTA1M2MtMjQ5OC00MzRlLTg0NjgtYTlkODczNDdlMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplFMEkFdk40em/1cw7SNelB0kxB6Jb3b0IUW wmjg5taQf+fgaiqm4hnEcc2qbYqMzkqX3xcRvgTnxXM4GNeG4N33KNnSQihIZ8ne RXDJTTE07WVkHPDgPO1ITVbC9MQTsJQFCkzWtyvIIoNk0nexmC2BtbdGrtGsfX2Z TfqRSzsSyvbv03UAMEXOerqwQvQHBBXgw73TbS7XPXccXBE2VWS6X62i1YmJrgrP vYj5HOaafygZRh6iVRbOiy5380wXdc7csySvUpq58PvdXwDF1DkC8/KbcdM79BC8 zADRtqHT2gBvdgSWiUJclhzVyP3DLdjkp9qB0JYGIEivYuwrHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS/iIOfen3nL+lvgGYcztRGT+lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGY0ZGM5YjctNzQwNi0z YWQ4LWE5MjQtMGY4YTg2MDZhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ1tA6X2YRYY58673vej/Kj62ar7Z2XChH6yYmDK5cflRjf5JhyLSvI qA7D3Y4c4CZqLPki/wVZza28oBlWpZvkofyqN0tu01PdOFTw1K3JMdf7miAQIJcv Um/klaqrTolyQ4bONXrGfa1t5bwnjjfoTkygJQiOLwgmXCDc71pzF9WXQKlr+iX+ +u5hNAbUHZSfLGBUdpdCWT42pb07bdIYJ2mWWD8dOMSpvfp6N/VttDYgxn4qTjJq bwfFlsPkr9JSvcRhZUAA2P+abULcXsYaoK2/SwXaFiZ3otLPEk+4Akq2GZigZFCi xfGKKRdBv8kik+uw0y7UdjqaJS5FFUQ= -----END CERTIFICATE-----Generated at Sun Sep 13 16:39:23 2026 by rpki-client