$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/25e7713c-c483-3d89-983e-f6e181c6720a.roa File: 25e7713c-c483-3d89-983e-f6e181c6720a.roa (raw, json) Hash identifier: y/HjC+K0My1+WQPYrPyzRrpBkBVDwXz+Sg1jn7lY5Lc= Subject key identifier: F9:52:5C:0E:6E:D0:D3:99:61:CB:4A:E6:1F:FA:E8:FF:38:7D:44:76 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584D20AF44025A3233661E796580 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/25e7713c-c483-3d89-983e-f6e181c6720a.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19281 IP address blocks: 147.72.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:44:02:5a:32:33:66:1e:79:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=7b6987be-7d2a-4128-a55e-85d90d824d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:9c:50:4c:87:b7:a3:a7:18:d3:c3:8f:0f: eb:5a:8a:ea:a4:27:b3:86:97:1a:65:d4:e2:cc:9e: a9:33:ca:60:7a:75:dd:f6:8d:90:b1:b8:19:f8:29: 5f:92:da:fa:d0:82:28:f1:40:d6:b9:44:3c:2d:87: a6:4e:e8:8d:32:76:2e:0a:9e:9c:62:79:1b:5b:52: 5d:61:49:f9:5b:d1:35:14:fa:74:e2:51:71:50:8e: 6f:b8:80:76:39:80:2e:28:5a:e2:fc:d3:ec:f1:dc: 47:3e:76:53:39:e0:c5:53:ef:f8:bc:91:c2:c9:59: 67:55:75:96:71:a8:cf:76:9d:66:12:ee:b4:8b:6a: 88:30:1a:d9:61:c5:9a:f6:fd:77:d8:22:6f:90:37: c9:c2:da:c4:bb:b0:57:e6:49:99:4c:eb:c0:26:ea: 2b:ca:cf:ee:80:0b:20:3f:e5:0c:6e:47:9f:8c:73: 1d:d4:23:ce:3f:df:6d:da:61:ce:8f:43:cb:14:af: 3e:c4:d9:ca:d1:b9:b7:11:e6:6b:b9:df:e4:3f:10: ea:e6:50:6c:ad:13:61:f8:dc:8f:d1:5f:ab:c9:2d: 04:3f:17:b2:dc:22:86:73:f8:9d:57:9e:75:1f:34: f2:c3:9d:17:a3:62:63:c4:37:ba:f6:b9:f4:db:77: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:5C:0E:6E:D0:D3:99:61:CB:4A:E6:1F:FA:E8:FF:38:7D:44:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/25e7713c-c483-3d89-983e-f6e181c6720a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f5:72:39:20:aa:f3:12:71:8c:9d:49:f3:24:7d:c7:69:67: a5:6a:a7:72:18:e6:26:dd:f7:cc:f4:74:3c:ac:aa:e8:2f:cc: 26:4f:81:30:4d:d2:33:d3:ee:a4:91:dc:a7:e8:d7:41:d9:d2: c1:6b:ed:53:d9:13:fa:63:14:a5:63:37:ed:84:70:66:a8:00: ec:3d:35:f7:fa:15:da:3d:ba:f5:b6:8b:aa:32:96:0c:11:0e: e9:76:e3:fd:1b:67:d3:f4:f5:19:43:69:4c:1a:38:e7:4b:c8: 27:50:53:e8:aa:25:9a:4b:9e:38:71:05:1e:41:bb:91:16:01: ad:97:25:e1:9c:5e:72:89:1f:f0:bd:25:36:a6:6e:4a:91:0b: 27:20:28:d8:bd:09:ae:2c:9a:71:a7:8e:fb:16:5c:46:78:1d: ca:2a:e6:01:8d:54:51:6c:20:d8:8d:c3:6f:bb:1c:ef:e7:4d: 96:63:8c:81:8b:d2:97:07:a5:6d:b7:48:81:ff:7e:38:4d:72: 2b:ea:6f:fb:f5:b7:95:af:18:58:66:f3:19:9f:c7:99:b8:61: cd:d6:51:de:83:a7:d6:19:16:2f:60:07:7a:6a:06:6f:8c:ba: 3c:94:d2:6d:d5:10:03:35:65:3e:10:52:8c:40:8f:a0:5e:3c: 57:bf:37:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0QCWjIzZh55ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk N2I2OTg3YmUtN2QyYS00MTI4LWE1NWUtODVkOTBkODI0ZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LmcUEyHt6OnGNPDjw/rWorqpCezhpcaZdTi zJ6pM8pgenXd9o2QsbgZ+Clfktr60IIo8UDWuUQ8LYemTuiNMnYuCp6cYnkbW1Jd YUn5W9E1FPp04lFxUI5vuIB2OYAuKFri/NPs8dxHPnZTOeDFU+/4vJHCyVlnVXWW cajPdp1mEu60i2qIMBrZYcWa9v132CJvkDfJwtrEu7BX5kmZTOvAJuorys/ugAsg P+UMbkefjHMd1CPOP99t2mHOj0PLFK8+xNnK0bm3EeZrud/kPxDq5lBsrRNh+NyP 0V+ryS0EPxey3CKGc/idV551HzTyw50Xo2JjxDe69rn023egWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlSXA5u0NOZYctK5h/66P84fUR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMjVlNzcxM2MtYzQ4My0z ZDg5LTk4M2UtZjZlMTgxYzY3MjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0jyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/1cjkgqvMScYydSfMkfcdpZ6Vqp3IY5ibd98z0dDysqugvzCZPgTBN 0jPT7qSR3Kfo10HZ0sFr7VPZE/pjFKVjN+2EcGaoAOw9Nff6Fdo9uvW2i6oylgwR Dul24/0bZ9P09RlDaUwaOOdLyCdQU+iqJZpLnjhxBR5Bu5EWAa2XJeGcXnKJH/C9 JTambkqRCycgKNi9Ca4smnGnjvsWXEZ4Hcoq5gGNVFFsINiNw2+7HO/nTZZjjIGL 0pcHpW23SIH/fjhNcivqb/v1t5WvGFhm8xmfx5m4Yc3WUd6Dp9YZFi9gB3pqBm+M ujyU0m3VEAM1ZT4QUoxAj6BePFe/Ny8= -----END CERTIFICATE-----Generated at Tue Mar 17 18:49:52 2026 by rpki-client