$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa File: 42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json) Hash identifier: P5FkOMZ+lbmwiZGN8Rwk1FEGAxo5SrnQo7uvzSTVGaU= Subject key identifier: 35:CA:7C:40:0F:60:69:F4:E2:79:AA:EF:85:98:52:28:18:A0:94:C1 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584FA42DCE78CD31481229587380 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 5050 IP address blocks: 147.73.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:ce:78:cd:31:48:12:29:58:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=48b6698d-1109-4d87-8a06-1ff22b114af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:90:e5:3e:d4:a8:f6:96:72:c9:25:3f:ff: 02:46:6e:d7:3a:7c:41:62:c0:f8:0f:f4:53:cd:8a: 21:56:25:6c:53:e2:1e:25:5b:55:95:09:c7:e4:2c: 1e:56:1a:a0:39:79:49:7a:0c:7a:a4:93:f2:d8:b6: 8b:e8:f2:fd:61:76:c4:6c:c5:a8:2d:fe:1d:56:31: 60:15:e3:53:7b:ec:aa:49:44:ee:0a:66:ee:eb:75: fc:ea:3c:79:08:6f:89:2a:c5:75:19:c8:f4:81:01: 40:c8:27:e0:3a:15:8f:c5:75:f1:9e:b7:8d:fb:90: 26:52:e8:94:04:5a:4f:99:c9:a4:68:e8:5d:4f:a9: 22:12:d7:3f:cd:dc:17:d1:b3:23:3c:58:a4:24:85: 69:32:d1:35:6b:d1:1b:5a:0f:da:12:64:9b:51:74: 87:93:8b:b9:8f:66:b6:c5:a8:4a:ce:c1:ef:34:6a: aa:9f:85:7b:be:19:eb:84:6a:19:bf:5d:ef:e3:09: 2f:9d:bc:21:53:03:d6:63:ee:5a:6a:6e:cf:0b:3f: b4:f4:64:02:b3:9c:14:82:f4:88:18:9b:1b:af:af: 54:aa:8b:cd:f4:34:28:1b:21:02:28:e9:49:db:ec: 81:90:3f:9e:14:e0:23:66:3a:61:b1:75:b8:18:7f: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:7C:40:0F:60:69:F4:E2:79:AA:EF:85:98:52:28:18:A0:94:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.73.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:bb:5a:26:14:83:01:38:b5:f8:72:be:1d:88:7d:89:9f:2e: b5:92:12:3e:74:40:08:cf:8b:a7:a2:0e:27:8b:d5:e8:60:2b: 35:ec:70:15:ef:b3:68:db:65:68:40:e0:86:9f:17:bc:9e:5f: 74:a4:60:92:b7:96:3c:3c:16:36:68:2d:6a:bb:70:73:79:37: c0:ba:65:bf:da:43:9c:d9:7e:9b:39:60:11:f5:4a:e0:d5:a7: de:b3:ae:d5:54:a7:16:b7:e3:c2:31:ee:dd:f6:b1:fd:2e:af: 90:cf:1b:fa:b6:17:5c:b2:54:fa:a3:70:2b:ee:1c:97:74:37: 18:0d:df:06:08:5c:00:8e:ad:49:8c:5d:89:36:23:da:60:e2: 8a:61:6c:a7:a6:72:47:d2:ad:b1:6b:0e:e9:00:07:50:7b:7d: 32:19:a7:b1:c4:c1:37:de:83:78:95:97:a9:7a:28:60:8c:b2: 12:c4:ae:01:37:3f:cf:b4:86:8d:0c:2b:a5:2c:ad:36:09:7e: bc:ba:91:9c:21:a8:83:0d:96:a6:88:9b:6c:4c:44:6f:48:99: 03:95:ce:d5:27:68:0b:da:28:e3:dc:3b:82:bd:d1:b8:a3:fa: 50:e7:b5:eb:50:2a:25:9a:1f:46:36:18:bc:60:e5:6a:2b:c7: 91:02:87:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLc54zTFIEilYc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk NDhiNjY5OGQtMTEwOS00ZDg3LThhMDYtMWZmMjJiMTE0YWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlCQ5T7UqPaWcsklP/8CRm7XOnxBYsD4D/RT zYohViVsU+IeJVtVlQnH5CweVhqgOXlJegx6pJPy2LaL6PL9YXbEbMWoLf4dVjFg FeNTe+yqSUTuCmbu63X86jx5CG+JKsV1Gcj0gQFAyCfgOhWPxXXxnreN+5AmUuiU BFpPmcmkaOhdT6kiEtc/zdwX0bMjPFikJIVpMtE1a9EbWg/aEmSbUXSHk4u5j2a2 xahKzsHvNGqqn4V7vhnrhGoZv13v4wkvnbwhUwPWY+5aam7PCz+09GQCs5wUgvSI GJsbr69UqovN9DQoGyECKOlJ2+yBkD+eFOAjZjphsXW4GH8JdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXKfEAPYGn04nmq74WYUigYoJTBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNDIzNzc4MDYtNGE3Ny0z MDk4LThmZDQtYzZiOGU0Mzg5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm7WiYUgwE4tfhyvh2IfYmfLrWSEj50QAjPi6eiDieL1ehgKzXscBXv s2jbZWhA4IafF7yeX3SkYJK3ljw8FjZoLWq7cHN5N8C6Zb/aQ5zZfps5YBH1SuDV p96zrtVUpxa348Ix7t32sf0ur5DPG/q2F1yyVPqjcCvuHJd0NxgN3wYIXACOrUmM XYk2I9pg4ophbKemckfSrbFrDukAB1B7fTIZp7HEwTfeg3iVl6l6KGCMshLErgE3 P8+0ho0MK6UsrTYJfry6kZwhqIMNlqaIm2xMRG9ImQOVztUnaAvaKOPcO4K90bij +lDntetQKiWaH0Y2GLxg5Worx5ECh8g= -----END CERTIFICATE-----Generated at Wed Nov 4 19:15:15 2026 by rpki-client