$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa File: 4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa (raw, json) Hash identifier: A3lkUQ3GrvbIrWXIhy77qwqrjbOClvPORHhifLB1+yc= Subject key identifier: 6C:AE:55:4D:86:CB:41:48:06:12:89:78:7A:FD:CE:12:69:98:C9:7A Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584DADAAD0FE93C1DF163102B780 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 5050 IP address blocks: 147.72.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:d0:fe:93:c1:df:16:31:02:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=11c9a1b4-dbac-49de-b0af-80573f5c0f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ee:54:38:c1:06:1b:47:92:aa:d0:5a:d6:aa: d6:65:22:45:e5:fa:b6:c7:04:13:97:dd:62:54:1a: 62:06:a5:e9:6f:e8:ac:7f:38:0b:70:e1:5b:12:e1: 2e:a4:a8:7e:71:7f:fd:7e:7c:bc:57:ca:97:f2:db: 80:14:2b:73:60:dc:3d:d4:ed:4d:9f:c2:cc:94:e5: de:2f:a2:24:a3:4f:b0:d7:84:15:5c:ee:59:0f:3a: 19:a0:5f:39:83:c8:de:aa:18:08:e8:78:35:38:53: b5:cb:f7:7d:f5:df:b6:ee:24:dc:d6:9b:84:9f:87: e0:db:bc:bc:32:2f:08:7c:9d:b5:6a:11:86:be:f9: 94:03:9d:f2:f7:36:8c:b4:4e:40:78:81:17:dd:48: 02:d4:7b:9f:7c:79:6c:f4:22:6d:32:76:31:8b:b0: 6a:2d:6d:c9:92:57:db:1e:ef:ab:b6:e9:73:cd:f1: 65:f9:2b:b3:2d:93:c9:86:88:4c:36:3d:29:8b:80: da:38:e6:3c:4e:ea:07:8f:1d:a8:4d:48:9a:c4:c0: 26:0e:f7:bd:fe:41:6a:a2:5a:9d:e1:e8:86:0d:e2: b7:3f:86:5e:f9:63:cb:a7:d1:da:fd:69:25:2f:9e: d2:d6:d8:0a:fc:f4:f1:a4:29:20:a9:fd:94:14:ca: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:55:4D:86:CB:41:48:06:12:89:78:7A:FD:CE:12:69:98:C9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:38:b2:49:f5:b5:86:35:86:4d:16:6b:23:a7:d2:a1:23:82: f7:b2:33:4e:a2:55:cb:9b:b3:50:e8:63:ad:af:22:88:e7:44: 14:b0:af:39:a3:11:f9:83:ee:07:70:89:37:90:85:7d:8c:a4: 9c:68:ad:54:32:0d:18:8b:a3:a7:49:48:cc:eb:b6:44:76:31: 5d:b3:22:e2:88:32:1c:de:61:b9:9b:e6:e4:69:f2:c6:5f:f5: 29:2f:33:bc:7a:42:e0:20:23:6d:fa:d4:fd:20:cb:ba:b4:ca: bf:75:7a:1b:b2:63:41:90:17:2a:d8:2e:30:e4:c6:a4:58:01: ce:2d:be:da:72:8f:c6:cc:22:b6:f2:fc:47:07:31:45:cf:84: 24:d7:66:c6:a0:2f:e0:1b:67:41:2b:47:be:fc:2c:19:4f:33: 95:71:18:75:5b:ce:1b:22:1a:57:e0:5e:7c:04:ae:11:15:bf: e1:7e:e4:d4:40:f8:ab:9d:3c:64:a5:4c:d6:1f:10:fd:c7:2f: d9:d4:1a:38:73:cf:f3:e4:9c:99:f3:2b:f1:79:f2:9e:7b:ac: 05:d1:9f:c6:d8:46:81:7a:ec:17:4e:c1:b3:3e:35:e6:e2:59: ab:fe:27:06:bb:90:38:0b:b3:0c:fd:06:6f:a8:d9:59:2c:e4: 17:c4:5d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqtD+k8HfFjECt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTFjOWExYjQtZGJhYy00OWRlLWIwYWYtODA1NzNmNWMwZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO5UOMEGG0eSqtBa1qrWZSJF5fq2xwQTl91i VBpiBqXpb+isfzgLcOFbEuEupKh+cX/9fny8V8qX8tuAFCtzYNw91O1Nn8LMlOXe L6Iko0+w14QVXO5ZDzoZoF85g8jeqhgI6Hg1OFO1y/d99d+27iTc1puEn4fg27y8 Mi8IfJ21ahGGvvmUA53y9zaMtE5AeIEX3UgC1HuffHls9CJtMnYxi7BqLW3Jklfb Hu+rtulzzfFl+SuzLZPJhohMNj0pi4DaOOY8TuoHjx2oTUiaxMAmDve9/kFqolqd 4eiGDeK3P4Ze+WPLp9Ha/WklL57S1tgK/PTxpCkgqf2UFMrbCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyuVU2Gy0FIBhKJeHr9zhJpmMl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNGYzZGI3ZGUtMzI5NS0z M2I2LWFiMDctM2NiMTJkYWZjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0j5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU4skn1tYY1hk0WayOn0qEjgveyM06iVcubs1DoY62vIojnRBSwrzmj EfmD7gdwiTeQhX2MpJxorVQyDRiLo6dJSMzrtkR2MV2zIuKIMhzeYbmb5uRp8sZf 9SkvM7x6QuAgI2361P0gy7q0yr91ehuyY0GQFyrYLjDkxqRYAc4tvtpyj8bMIrby /EcHMUXPhCTXZsagL+AbZ0ErR778LBlPM5VxGHVbzhsiGlfgXnwErhEVv+F+5NRA +KudPGSlTNYfEP3HL9nUGjhzz/PknJnzK/F58p57rAXRn8bYRoF67BdOwbM+Nebi Wav+Jwa7kDgLswz9Bm+o2Vks5BfEXRQ= -----END CERTIFICATE-----Generated at Sun May 3 00:52:48 2026 by rpki-client