$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa File: 4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa (raw, json) Hash identifier: qCEGJBzUi7BvSLpL+mTwHgjBue80UcO48PphMmg42EI= Subject key identifier: 10:34:28:A9:3E:21:39:8F:C9:16:B3:24:D5:BC:70:57:DD:4D:23:91 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584F3052705AC77491D635AE1A80 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 5050 IP address blocks: 147.72.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:70:5a:c7:74:91:d6:35:ae:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=0d220fc7-2260-46c0-be3d-dbe827cd0eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:63:35:aa:32:9b:a0:8b:70:57:33:70:86: 53:ff:b3:88:b1:af:ad:e9:86:9e:2f:f3:06:b1:da: 36:92:11:a8:5a:d0:79:13:26:40:e4:b8:1e:3e:64: 69:3d:ed:ae:e9:bb:f8:bc:9f:f7:75:0f:9d:06:44: 91:75:c2:b1:52:5c:72:ad:90:31:5f:e5:11:72:c4: c4:71:30:f6:3a:a5:a9:c3:0d:5d:29:07:d5:f2:c3: b0:f1:06:4a:62:eb:82:59:0e:e5:cb:f7:ea:5a:88: b4:b3:90:86:9f:01:cc:05:a7:9e:e9:e5:08:16:12: c2:40:30:5a:ce:89:62:55:ff:00:ce:ca:fd:bb:7d: 56:ee:42:68:75:1c:41:3b:65:2b:cd:50:a6:e0:ac: 8d:05:3c:a0:f7:d0:25:23:04:c8:8f:9c:f2:71:24: 40:2d:3a:ee:8d:47:43:b3:a7:7c:c5:fd:58:82:2d: 55:81:ea:70:ee:1e:96:41:74:e5:a8:87:8e:af:81: 98:a0:06:72:f3:06:ce:b9:83:a1:80:dd:5b:55:33: 5d:cc:65:f4:ef:3d:5e:b0:38:3d:84:61:1d:df:22: cd:48:e3:c3:de:b7:ad:56:dc:ab:73:9d:53:92:7c: 6d:4d:78:da:51:19:40:09:e8:55:6a:59:cb:3f:d9: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:28:A9:3E:21:39:8F:C9:16:B3:24:D5:BC:70:57:DD:4D:23:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/4f3db7de-3295-33b6-ab07-3cb12dafc38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:18:69:4c:da:c4:30:6d:14:03:c6:3a:69:b7:41:18:eb:85: ae:2a:fb:f0:f0:1d:ea:06:04:1a:52:a7:c8:25:36:9d:0a:75: b3:df:2d:01:0b:b4:23:e6:40:41:4b:1b:c8:14:03:bf:aa:56: b3:12:e7:51:61:c0:81:98:9b:de:35:66:83:28:e2:91:41:7e: a7:0c:55:4f:6b:2b:75:d5:d3:e3:15:6a:88:6a:87:34:05:28: b3:53:6d:dd:f2:b5:cd:4b:4e:dc:e3:39:54:a7:72:8d:57:81: f3:95:d5:6d:5c:3e:e8:01:4e:07:df:9a:37:6e:cf:8a:ef:f8: 2d:c1:c3:92:eb:aa:47:a5:12:a6:81:1b:45:79:61:8c:10:1f: 3a:4b:a6:78:5a:be:94:85:62:e4:1f:41:e0:28:fb:86:31:9c: e1:68:c9:99:cb:7d:9d:e0:ef:24:86:6a:b9:f0:7b:e4:0f:a0: 3c:e0:25:39:5b:78:b8:c6:d4:0d:5f:a7:f3:35:c7:8a:df:34: 45:09:67:3d:cb:ca:39:58:70:22:9a:87:c9:c9:9a:34:68:d3: fa:c7:58:a4:9a:a8:d6:d7:82:16:3d:fa:15:31:38:81:41:20: 4e:c0:c0:a3:1d:85:96:c0:89:bf:c8:12:1b:59:f0:a1:09:35: 36:f8:b8:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnBax3SR1jWuGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MGQyMjBmYzctMjI2MC00NmMwLWJlM2QtZGJlODI3Y2QwZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo1jNaoym6CLcFczcIZT/7OIsa+t6YaeL/MG sdo2khGoWtB5EyZA5LgePmRpPe2u6bv4vJ/3dQ+dBkSRdcKxUlxyrZAxX+URcsTE cTD2OqWpww1dKQfV8sOw8QZKYuuCWQ7ly/fqWoi0s5CGnwHMBaee6eUIFhLCQDBa zoliVf8Azsr9u31W7kJodRxBO2UrzVCm4KyNBTyg99AlIwTIj5zycSRALTrujUdD s6d8xf1Ygi1Vgepw7h6WQXTlqIeOr4GYoAZy8wbOuYOhgN1bVTNdzGX07z1esDg9 hGEd3yLNSOPD3retVtyrc51TknxtTXjaURlACehValnLP9lKtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBA0KKk+ITmPyRazJNW8cFfdTSORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvNGYzZGI3ZGUtMzI5NS0z M2I2LWFiMDctM2NiMTJkYWZjMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk0j5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcYaUzaxDBtFAPGOmm3QRjrha4q+/DwHeoGBBpSp8glNp0KdbPfLQEL tCPmQEFLG8gUA7+qVrMS51FhwIGYm941ZoMo4pFBfqcMVU9rK3XV0+MVaohqhzQF KLNTbd3ytc1LTtzjOVSnco1XgfOV1W1cPugBTgffmjduz4rv+C3Bw5LrqkelEqaB G0V5YYwQHzpLpnhavpSFYuQfQeAo+4YxnOFoyZnLfZ3g7ySGarnwe+QPoDzgJTlb eLjG1A1fp/M1x4rfNEUJZz3LyjlYcCKah8nJmjRo0/rHWKSaqNbXghY9+hUxOIFB IE7AwKMdhZbAib/IEhtZ8KEJNTb4uKQ= -----END CERTIFICATE-----Generated at Thu Sep 17 23:56:05 2026 by rpki-client