$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa File: df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa (raw, json) Hash identifier: qgaK2MnHyoNgdW8LDo0W+R1m5vfZ0Kf2TVWgGgi+7ts= Subject key identifier: 51:24:10:57:46:27:69:15:32:55:F7:64:0F:EE:BD:00:7F:C2:20:8D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F90A310206778239DA4ED5E00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 701 IP address blocks: 72.89.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:10:20:67:78:23:9d:a4:ed:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=0076b118-3f33-43e2-b4bd-b2e4c45a86cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:90:8f:78:b8:29:60:05:f6:c0:48:1b:e9: 8d:f1:53:fa:b4:72:e3:96:d5:a7:38:14:fc:7c:11: fb:4b:fe:ae:22:63:2a:10:30:6c:ca:66:12:fb:e0: 1c:f1:6f:c5:65:f4:59:35:8c:89:32:84:a7:87:29: 9b:e3:fc:5a:6b:fc:80:d4:17:85:b6:4e:ef:e8:af: 53:a8:65:49:9c:d1:f0:8e:6c:6f:44:31:50:82:f0: 69:96:be:cd:c2:c0:92:80:a0:44:50:de:df:98:27: 8a:b8:97:b5:d6:0c:9a:8f:f8:d4:e1:e9:90:98:ad: 65:77:3e:6c:7a:f1:6b:c8:35:c2:55:54:18:75:71: fc:37:10:17:72:3d:56:3b:31:b2:16:5b:45:b5:63: 9e:1e:4d:1b:d0:a9:c2:6e:6b:2d:08:6b:2b:9b:30: 23:65:b2:8b:45:98:f8:28:62:e4:5a:92:62:f1:6b: 0b:6a:0a:20:c8:bf:82:16:91:b2:f0:b4:22:a3:86: c8:44:06:63:20:11:6e:d3:77:8c:38:15:c3:88:68: 65:44:c5:95:e8:ef:bd:ae:b3:64:06:35:70:07:e1: 87:65:fd:5a:71:85:c5:b6:a7:08:f5:f4:b5:ce:75: cd:84:4a:0b:c3:23:27:aa:f8:ba:6d:56:55:9a:d8: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:10:57:46:27:69:15:32:55:F7:64:0F:EE:BD:00:7F:C2:20:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/df4dc9b7-7406-3ad8-a924-0f8a8606a9bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a4:6e:cf:5f:d1:ef:04:37:08:04:a0:dc:03:7f:78:8a:e8: 8c:d8:07:23:af:84:9d:28:f8:48:f4:84:12:0a:6e:ba:6d:64: 86:85:fd:d7:58:4b:72:4e:e2:7f:23:c3:8c:38:e9:39:39:c4: d3:1c:70:0d:6b:df:70:36:8e:ad:67:f0:2b:9b:7c:76:a8:ff: 76:cc:e3:97:f5:c3:1f:1f:5b:46:53:75:22:fc:78:58:22:f1: 9d:5b:ff:12:a3:23:6b:dc:6d:f3:f6:af:62:29:4b:7d:5a:63: cb:ce:2b:0c:e0:5f:85:a5:29:f3:a8:05:33:21:1c:02:21:2d: 43:6d:6f:c1:57:b7:e3:2b:81:e7:f7:3c:87:82:fc:69:13:bd: 97:6c:dd:86:e7:98:02:0e:59:60:f7:a4:5b:c9:1e:dd:06:ca: 6d:68:b2:34:e1:9a:10:f1:20:c2:52:bc:60:c5:8a:aa:e9:17: 94:d5:79:d3:75:95:9a:e4:74:2f:08:48:e3:b1:1d:2e:9f:3c: 18:22:54:42:82:ce:62:d5:97:3e:ff:90:25:38:77:64:13:f3: 39:45:37:b0:c3:68:ce:e6:2c:68:c6:40:e8:94:f5:fe:55:57: 30:74:1c:ec:78:54:b4:b4:91:73:ac:03:8c:27:d1:1a:ad:35: 04:df:fb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxAgZ3gjnaTtXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MDA3NmIxMTgtM2YzMy00M2UyLWI0YmQtYjJlNGM0NWE4NmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5KQj3i4KWAF9sBIG+mN8VP6tHLjltWnOBT8 fBH7S/6uImMqEDBsymYS++Ac8W/FZfRZNYyJMoSnhymb4/xaa/yA1BeFtk7v6K9T qGVJnNHwjmxvRDFQgvBplr7NwsCSgKBEUN7fmCeKuJe11gyaj/jU4emQmK1ldz5s evFryDXCVVQYdXH8NxAXcj1WOzGyFltFtWOeHk0b0KnCbmstCGsrmzAjZbKLRZj4 KGLkWpJi8WsLagogyL+CFpGy8LQio4bIRAZjIBFu03eMOBXDiGhlRMWV6O+9rrNk BjVwB+GHZf1acYXFtqcI9fS1znXNhEoLwyMnqvi6bVZVmtiImwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEkEFdGJ2kVMlX3ZA/uvQB/wiCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGY0ZGM5YjctNzQwNi0z YWQ4LWE5MjQtMGY4YTg2MDZhOWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmkbs9f0e8ENwgEoNwDf3iK6IzYByOvhJ0o+Ej0hBIKbrptZIaF/ddY S3JO4n8jw4w46Tk5xNMccA1r33A2jq1n8CubfHao/3bM45f1wx8fW0ZTdSL8eFgi 8Z1b/xKjI2vcbfP2r2IpS31aY8vOKwzgX4WlKfOoBTMhHAIhLUNtb8FXt+Mrgef3 PIeC/GkTvZds3YbnmAIOWWD3pFvJHt0Gym1osjThmhDxIMJSvGDFiqrpF5TVedN1 lZrkdC8ISOOxHS6fPBgiVEKCzmLVlz7/kCU4d2QT8zlFN7DDaM7mLGjGQOiU9f5V VzB0HOx4VLS0kXOsA4wn0RqtNQTf+/Y= -----END CERTIFICATE-----Generated at Sun Nov 1 14:40:17 2026 by rpki-client