$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa File: d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa (raw, json) Hash identifier: Cxuar/GE5dEag9RWepIhgyyr70tKkxYmrETm4905Fxo= Subject key identifier: 50:4E:E2:0D:C5:41:7D:53:4B:EE:E9:70:D6:F6:62:80:82:FC:68:68 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584F3FAD35F23269D69D09058700 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 5050 IP address blocks: 147.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:35:f2:32:69:d6:9d:09:05:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=99721c17-cad1-47b6-aa4c-f4a326b0f22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:b2:d8:fe:23:b9:a1:ab:7b:3e:5d:4c:5a: fd:b8:98:3b:38:db:d8:ac:99:07:6f:6a:af:07:e9: cc:ae:d6:5b:fa:bd:c0:34:c8:52:c3:76:5e:f6:dc: d3:b0:a1:54:a4:16:8d:1e:f4:74:12:90:fb:74:db: 71:42:ab:5e:3c:e4:1b:d4:27:0b:e6:92:4d:0b:65: bd:f8:91:75:b9:17:a5:77:ba:f4:b3:9b:81:aa:f0: 19:2f:c6:07:0d:9c:e3:19:05:68:53:7a:1e:53:c5: c4:3b:c8:e6:22:fc:cb:2d:71:1e:db:79:7d:54:4d: 93:ea:05:20:e8:b2:2e:22:68:31:f5:2e:95:68:3a: b5:99:2a:44:21:c2:12:81:5e:9a:a3:c5:2e:b5:84: 7a:0d:5d:12:8b:a1:14:1e:d2:99:3b:72:10:70:df: b7:ab:cf:24:6e:df:27:a1:59:1a:0f:2e:fa:c0:39: c6:56:a6:30:ba:77:a4:e4:6a:bc:a0:b6:2b:6e:a1: ce:3f:82:ad:2c:a6:eb:ee:bd:90:12:d8:92:9c:ed: 61:3e:cf:30:da:2f:e8:72:b5:3a:ef:16:69:a1:c4: 18:5a:95:e7:10:8d:da:f2:d0:c9:83:75:92:be:97: 4f:3a:37:c0:d2:d4:fe:f0:dc:1a:82:e1:55:08:36: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:E2:0D:C5:41:7D:53:4B:EE:E9:70:D6:F6:62:80:82:FC:68:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:aa:fc:d1:71:83:9a:61:fa:a3:8e:cc:ad:47:94:82:99:e1: b7:cd:8b:e8:31:e2:7b:ac:db:cd:cc:0e:4e:ba:ba:77:85:d7: 06:72:d2:ea:ea:4b:c6:c2:c4:78:67:68:ca:c1:a5:a4:db:76: 08:b0:86:79:c9:06:a3:ea:6d:e5:20:36:7f:81:55:23:c6:3c: 72:1b:79:26:e2:ae:64:6b:d1:0f:4d:16:58:7b:4a:55:45:35: 85:48:7d:e5:4b:40:11:a7:be:15:3d:70:d3:c1:84:20:98:56: 40:84:10:8e:a5:89:bc:79:d3:ae:6d:ce:84:f2:28:fd:80:fe: 50:a6:5c:70:8c:98:18:d5:90:65:19:7b:a9:e4:04:86:8b:6d: a3:39:cf:ac:08:07:ba:48:49:77:af:77:69:c5:85:fe:ec:78: ea:46:ca:21:cd:d4:fd:e8:14:f7:b7:a2:0a:15:7a:8c:d0:bc: aa:cf:fc:3d:1d:6c:5e:c4:e6:09:e8:cc:7b:00:b5:e5:46:6c: 60:83:8d:3b:57:52:8c:e9:4e:c7:8c:51:bf:9f:5d:9d:7d:6a: 3d:c5:8d:e7:e9:23:c8:fa:99:c7:38:a2:6f:c5:8e:09:7e:9b: b3:44:93:3c:54:d9:df:5d:4c:d5:a1:30:57:7d:4c:a2:b2:45: dd:89:55:1e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8/rTXyMmnWnQkFhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTk3MjFjMTctY2FkMS00N2I2LWFhNGMtZjRhMzI2YjBmMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aCy2P4juaGrez5dTFr9uJg7ONvYrJkHb2qv B+nMrtZb+r3ANMhSw3Ze9tzTsKFUpBaNHvR0EpD7dNtxQqtePOQb1CcL5pJNC2W9 +JF1uReld7r0s5uBqvAZL8YHDZzjGQVoU3oeU8XEO8jmIvzLLXEe23l9VE2T6gUg 6LIuImgx9S6VaDq1mSpEIcISgV6ao8UutYR6DV0Si6EUHtKZO3IQcN+3q88kbt8n oVkaDy76wDnGVqYwunek5Gq8oLYrbqHOP4KtLKbr7r2QEtiSnO1hPs8w2i/ocrU6 7xZpocQYWpXnEI3a8tDJg3WSvpdPOjfA0tT+8NwaguFVCDblcwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFBO4g3FQX1TS+7pcNb2YoCC/GhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvZDNmZWE5ZDItNTQyMy0z ZDk4LTlkYTctYTNhYjE5NzBmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk0gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARqr80XGDmmH6o47MrUeUgpnht82L6DHie6zbzcwOTrq6d4XXBnLS6upL xsLEeGdoysGlpNt2CLCGeckGo+pt5SA2f4FVI8Y8cht5JuKuZGvRD00WWHtKVUU1 hUh95UtAEae+FT1w08GEIJhWQIQQjqWJvHnTrm3OhPIo/YD+UKZccIyYGNWQZRl7 qeQEhottoznPrAgHukhJd693acWF/ux46kbKIc3U/egU97eiChV6jNC8qs/8PR1s XsTmCejMewC15UZsYIONO1dSjOlOx4xRv59dnX1qPcWN5+kjyPqZxziib8WOCX6b s0STPFTZ311M1aEwV31MorJF3YlVHg== -----END CERTIFICATE-----Generated at Wed Sep 23 22:44:57 2026 by rpki-client