$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa File: 853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa (raw, json) Hash identifier: 2ZQ+31ApqBY5wCLn7NGMZbe6X/FWG0GtrLllOQ7U4ho= Subject key identifier: 74:A0:2B:F2:7E:3D:52:AE:30:AD:F8:9B:3F:73:80:6D:77:AD:89:C9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584ACB40F763AC23A9638004A1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa Signing time: Sat 09 Aug 2025 01:00:33 +0000 ROA not before: Sat 09 Aug 2025 01:00:33 +0000 ROA not after: Fri 07 Nov 2025 02:00:33 +0000 asID: 701 IP address blocks: 72.89.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cb:40:f7:63:ac:23:a9:63:80:04:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 9 01:00:33 2025 GMT Not After : Nov 7 02:00:33 2025 GMT Subject: CN=1f09b5c1-4a82-420a-bf76-4107534f5116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:8c:57:2e:25:be:cf:c8:34:a4:a6:c8:21: 40:f4:5c:7d:90:9a:9a:63:16:93:22:d2:8d:24:9e: 28:a1:ea:27:27:4f:fd:03:09:32:48:e2:b0:aa:7f: f3:5f:ba:9e:70:37:0b:11:be:f0:3d:74:99:b3:24: d9:9b:b0:04:fd:90:d8:e7:d4:81:2c:f4:ba:ee:77: 21:e3:2f:fd:60:b7:61:b6:58:3b:28:8f:12:e6:10: 77:c7:eb:67:b1:9d:b6:4e:32:8f:04:32:d9:a2:af: 8d:f3:09:4b:f1:39:d9:52:ac:fa:7c:10:c8:29:bb: 6f:60:99:64:0c:97:a8:6a:82:50:6c:03:02:4c:0e: fb:9b:8b:71:d2:df:5a:35:64:01:70:85:1c:a6:e6: 83:c9:0e:9a:0a:91:23:8a:19:9d:bd:1c:94:fd:4f: 38:a2:8e:cc:98:84:cc:4e:58:c6:df:2c:95:dd:56: ae:27:22:ad:c0:70:ab:36:66:82:04:78:39:66:6e: 07:55:2b:2c:c5:ed:31:70:e8:95:ea:c4:40:47:c7: 46:18:67:c6:6d:b3:96:2b:51:7d:9f:76:a0:5c:ce: 18:fb:8f:60:57:a6:da:a7:1b:9f:27:d5:67:6f:43: dd:29:90:8e:a0:6d:17:ec:9b:c5:8f:1d:dd:92:a5: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A0:2B:F2:7E:3D:52:AE:30:AD:F8:9B:3F:73:80:6D:77:AD:89:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/853a1e1d-2dc6-389e-a935-ecbae7789ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 72.89.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5c:91:47:9c:44:2f:f2:1d:1a:23:25:de:ec:40:bb:74:96: 9f:97:28:a6:dd:48:97:bd:67:ce:3a:7a:7b:aa:e5:1f:20:cd: 51:39:f2:37:32:c6:e6:1e:8e:7c:e9:23:33:08:90:c1:76:8b: 67:bc:44:17:44:49:81:f9:59:fe:36:f9:65:b3:eb:11:79:12: b2:67:b6:ce:92:93:ae:30:4b:fd:93:47:fb:0a:39:3b:39:50: f6:33:ab:cf:58:38:15:de:d9:ff:90:ed:2b:41:8b:87:c0:8c: c7:fc:ad:b5:78:41:57:8f:ba:a8:48:b2:d6:d5:5f:75:5f:06: 24:d8:c4:ad:2f:bf:20:70:ce:69:a6:df:91:73:ed:80:f1:72: 44:06:d9:0b:59:19:20:6a:bd:75:1a:80:ef:26:e4:c2:28:85: 4f:f1:32:49:75:10:b1:e7:60:c9:6c:5b:e7:94:e6:08:d0:a9: 66:6b:98:e0:10:3b:41:d2:af:a2:ca:49:ec:f0:be:bb:ac:b7: 0e:d6:25:b5:c9:8b:5c:28:20:fc:3d:ab:48:03:15:80:3c:4a: b0:7f:12:dd:0f:d6:1a:a7:b7:ee:f2:cc:75:3d:6f:e5:e4:89: 97:4a:74:06:7d:64:9d:98:cb:38:d9:f3:fc:39:27:e7:ca:a9: 2b:d9:32:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQPdjrCOpY4AEocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk MWYwOWI1YzEtNGE4Mi00MjBhLWJmNzYtNDEwNzUzNGY1MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOSMVy4lvs/INKSmyCFA9Fx9kJqaYxaTItKN JJ4ooeonJ0/9AwkySOKwqn/zX7qecDcLEb7wPXSZsyTZm7AE/ZDY59SBLPS67nch 4y/9YLdhtlg7KI8S5hB3x+tnsZ22TjKPBDLZoq+N8wlL8TnZUqz6fBDIKbtvYJlk DJeoaoJQbAMCTA77m4tx0t9aNWQBcIUcpuaDyQ6aCpEjihmdvRyU/U84oo7MmITM TljG3yyV3VauJyKtwHCrNmaCBHg5Zm4HVSssxe0xcOiV6sRAR8dGGGfGbbOWK1F9 n3agXM4Y+49gV6bapxufJ9Vnb0PdKZCOoG0X7JvFjx3dkqUH/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSgK/J+PVKuMK34mz9zgG13rYnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODUzYTFlMWQtMmRjNi0z ODllLWE5MzUtZWNiYWU3Nzg5YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSFmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ckUecRC/yHRojJd7sQLt0lp+XKKbdSJe9Z846enuq5R8gzVE58jcy xuYejnzpIzMIkMF2i2e8RBdESYH5Wf42+WWz6xF5ErJnts6Sk64wS/2TR/sKOTs5 UPYzq89YOBXe2f+Q7StBi4fAjMf8rbV4QVePuqhIstbVX3VfBiTYxK0vvyBwzmmm 35Fz7YDxckQG2QtZGSBqvXUagO8m5MIohU/xMkl1ELHnYMlsW+eU5gjQqWZrmOAQ O0HSr6LKSezwvrustw7WJbXJi1woIPw9q0gDFYA8SrB/Et0P1hqnt+7yzHU9b+Xk iZdKdAZ9ZJ2YyzjZ8/w5J+fKqSvZMqg= -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:14 2025 by rpki-client