$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa File: 87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa (raw, json) Hash identifier: rOyWJAx3bFxu1wXx4dP2mboEMEG/KuZ5aiCNn89vZSI= Subject key identifier: 72:D4:23:68:93:EF:81:7B:FD:BD:A8:6C:F1:DC:E7:00:33:58:A9:F8 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584F305271D04464923CE38A02A0 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 36407 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:71:d0:44:64:92:3c:e3:8a:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=a257b94b-8608-460c-ab89-3c13e8901078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:b5:cb:11:2e:03:4f:7a:cc:68:94:a2:a7: 4d:31:a6:16:3d:46:06:c6:bb:3a:55:0e:ce:20:dd: fb:01:43:82:00:ed:57:22:0b:35:45:ff:55:75:78: 2a:d5:69:09:2d:29:47:63:dd:49:2f:57:df:ff:25: 04:c5:d7:61:77:3a:a1:f6:b4:28:0e:a9:ec:a7:02: ab:55:58:4c:8d:a7:3c:80:1d:f4:a2:01:5f:83:48: 54:c6:60:fa:e0:28:fc:96:c8:d5:79:5c:ce:65:78: c8:c5:70:f7:ae:25:e1:64:ba:a1:35:3a:fb:b2:e8: 78:b4:8a:46:42:c8:7e:64:f4:04:a3:85:fe:4c:ef: 13:c2:32:8e:86:ef:6b:0b:09:fb:f9:6c:d4:9b:f7: 05:d9:13:14:7b:d2:38:b4:1f:f3:63:15:b5:51:a9: 46:86:47:ce:a7:7e:93:a1:dc:67:0d:98:32:32:89: 49:27:be:5e:e0:ef:1b:37:a1:a6:2b:e0:e9:79:29: 71:bb:a8:8a:4e:68:d9:35:34:fc:8f:d4:0f:76:a4: 09:32:a7:68:d8:b7:79:32:fa:02:8b:22:87:8e:bf: d9:e8:4d:9a:d5:a4:8e:eb:46:a9:90:91:07:aa:5e: 0b:52:bd:9a:6a:3d:da:0f:a5:e5:a3:59:62:e7:2f: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:23:68:93:EF:81:7B:FD:BD:A8:6C:F1:DC:E7:00:33:58:A9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/87a5f571-3cfa-34c6-8ec2-110ee7140f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8e:41:6b:bb:4c:b3:10:08:16:86:2f:e1:fd:5a:c4:d6:85: ba:95:c6:8f:9f:2a:92:75:a1:24:27:bf:81:d4:cb:4b:fc:f0: 6b:e9:42:31:91:37:c2:a0:2c:ba:e4:3d:ec:c0:23:a3:f0:3c: 4a:26:94:a1:9e:9f:0e:be:e3:e2:77:5e:59:e9:ff:7e:20:5d: e9:71:00:6f:62:4d:74:ee:bd:f0:13:ad:7d:08:da:e7:82:03: 00:b0:e8:9b:81:97:27:28:f2:3a:81:e8:b4:e7:5d:ac:ec:53: 9c:73:db:0e:85:c7:e5:d3:0f:a2:0b:56:30:2d:bc:f7:53:96: af:ab:31:f8:7e:b5:55:ed:fe:b8:05:d0:f0:cd:ae:7f:57:71: 76:54:09:5a:51:dd:3d:72:e0:b7:ff:08:8d:33:9f:8e:09:01: 15:4c:5e:16:81:0b:99:df:91:74:c2:25:bd:b3:a8:34:92:6a: 88:21:04:7e:05:70:0b:77:3e:f4:e3:04:5f:ff:4a:30:e9:e1: 10:d5:b7:a4:cd:a0:35:74:96:30:f5:a0:85:b6:00:77:43:1a: 15:e6:e3:a8:75:ee:ef:8c:44:0e:49:0c:40:62:b3:89:d6:91: d7:c7:4b:6d:65:2a:fb:ff:89:ce:ac:2b:5a:2f:0e:e9:ea:b4: 9a:a7:0f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnHQRGSSPOOKAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YTI1N2I5NGItODYwOC00NjBjLWFiODktM2MxM2U4OTAxMDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7O1yxEuA096zGiUoqdNMaYWPUYGxrs6VQ7O IN37AUOCAO1XIgs1Rf9VdXgq1WkJLSlHY91JL1ff/yUExddhdzqh9rQoDqnspwKr VVhMjac8gB30ogFfg0hUxmD64Cj8lsjVeVzOZXjIxXD3riXhZLqhNTr7suh4tIpG Qsh+ZPQEo4X+TO8TwjKOhu9rCwn7+WzUm/cF2RMUe9I4tB/zYxW1UalGhkfOp36T odxnDZgyMolJJ75e4O8bN6GmK+DpeSlxu6iKTmjZNTT8j9QPdqQJMqdo2Ld5MvoC iyKHjr/Z6E2a1aSO60apkJEHql4LUr2aaj3aD6Xlo1li5y/JEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLUI2iT74F7/b2obPHc5wAzWKn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvODdhNWY1NzEtM2NmYS0z NGM2LThlYzItMTEwZWU3MTQwZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSOQWu7TLMQCBaGL+H9WsTWhbqVxo+fKpJ1oSQnv4HUy0v88GvpQjGR N8KgLLrkPezAI6PwPEomlKGenw6+4+J3Xlnp/34gXelxAG9iTXTuvfATrX0I2ueC AwCw6JuBlyco8jqB6LTnXazsU5xz2w6Fx+XTD6ILVjAtvPdTlq+rMfh+tVXt/rgF 0PDNrn9XcXZUCVpR3T1y4Lf/CI0zn44JARVMXhaBC5nfkXTCJb2zqDSSaoghBH4F cAt3PvTjBF//SjDp4RDVt6TNoDV0ljD1oIW2AHdDGhXm46h17u+MRA5JDEBis4nW kdfHS21lKvv/ic6sK1ovDunqtJqnDw0= -----END CERTIFICATE-----Generated at Thu Sep 17 23:57:20 2026 by rpki-client