$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa File: 29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa (raw, json) Hash identifier: J7A6tyYY+IGnVqycuioqlQET16cHJlMJEeFAcmb1Sws= Subject key identifier: E4:66:66:EE:F1:94:67:5D:F7:1A:D7:57:08:D4:C6:23:A1:C7:87:7E Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584FD0F687E1331448FC35F3D000 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa Signing time: Thu 12 Nov 2026 14:00:13 +0000 ROA not before: Thu 12 Nov 2026 14:00:13 +0000 ROA not after: Wed 10 Feb 2027 14:00:13 +0000 asID: 9 IP address blocks: 147.72.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d0:f6:87:e1:33:14:48:fc:35:f3:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: Nov 12 14:00:13 2026 GMT Not After : Feb 10 14:00:13 2027 GMT Subject: CN=89be4659-5c57-4e92-b253-c48e42adda0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b6:64:68:32:6a:4c:31:0f:ec:7f:7c:28:b8: 2a:92:f0:00:2d:02:3a:c4:6e:91:6f:85:ad:09:fa: f0:4e:b0:0c:05:45:af:86:89:86:b7:80:ea:ff:b7: 8d:a7:25:e7:0c:97:43:41:17:7c:c4:39:43:dd:67: 2a:fc:2f:69:65:ee:13:83:e1:24:87:ed:63:9f:b0: 8b:72:a9:1a:11:e7:3f:6f:51:12:ac:5b:62:e6:82: 18:03:10:33:be:49:d8:b9:07:b3:37:0d:a5:b1:6b: ea:d7:9f:84:99:10:30:f3:8b:63:9c:8e:20:e6:99: 9d:04:aa:cf:ed:22:de:e3:1a:08:ca:64:b7:58:5a: 0d:b2:8c:1b:86:f5:ce:cd:7d:af:db:0f:58:59:f1: 66:40:40:58:7c:6f:02:17:0e:97:74:75:6d:ea:7f: 1c:4f:35:25:82:f3:9c:07:e0:4a:9d:da:ff:77:99: ea:01:1c:53:b0:d7:d9:b1:22:d0:90:08:ad:41:d7: 72:36:76:c9:ef:6f:75:17:fc:09:b8:86:b5:85:61: e2:85:58:8e:a1:83:28:86:ec:ca:f2:91:02:10:b3: 5e:03:68:8d:c4:77:1d:b6:4e:49:7c:45:70:42:99: c7:33:59:bf:69:69:f3:1c:45:82:ea:31:09:4e:90: ff:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:66:EE:F1:94:67:5D:F7:1A:D7:57:08:D4:C6:23:A1:C7:87:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/29ea96ef-5fc0-39fa-b14a-810bdeee9b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:44:9c:a7:bc:e9:66:c3:1c:71:6b:92:e7:9b:49:70:f3:c9: bc:36:fb:3a:90:33:78:f4:c2:40:4a:52:e7:e4:13:68:15:c8: cb:42:8d:e3:ec:dc:e5:fe:eb:0c:90:c1:ec:27:9a:11:f7:f5: 1c:c3:93:e9:43:c8:4b:f4:81:83:1e:2c:03:c1:6e:ad:09:db: 63:b6:22:b4:92:e0:e1:26:9e:db:17:47:e9:d9:86:23:a8:76: bb:7c:80:bc:4f:e8:93:db:eb:bb:45:2c:d0:fb:d4:da:b0:f7: f3:ac:8f:96:79:27:f3:11:b5:2c:e7:f7:7c:02:96:1e:99:23: b6:ef:1d:b6:dd:95:7d:e2:06:0f:ff:d8:dd:1e:0f:1c:30:97: e4:e3:93:de:0f:05:bc:43:6d:f2:ca:8e:9b:d1:b3:d0:79:99: 2e:20:01:52:38:ce:ef:63:81:a8:e5:51:48:86:0c:00:b5:57: bb:71:ad:23:d7:ae:cc:ce:5a:c7:ea:bc:f5:e6:b6:75:64:64: 94:ee:09:79:24:5f:44:8d:7e:e0:de:16:6e:ee:9a:56:5f:1e: d0:84:48:e9:65:db:ce:ca:85:99:37:5d:0a:63:aa:5f:d8:15: 23:29:93:20:c6:a6:01:b8:24:28:c8:e7:83:c7:89:cf:2e:5d: 9c:eb:63:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Q9ofhMxRI/DXz0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MTExMjE0MDAxM1oXDTI3MDIxMDE0MDAxM1owLzEtMCsGA1UEAxMk ODliZTQ2NTktNWM1Ny00ZTkyLWIyNTMtYzQ4ZTQyYWRkYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ZkaDJqTDEP7H98KLgqkvAALQI6xG6Rb4Wt CfrwTrAMBUWvhomGt4Dq/7eNpyXnDJdDQRd8xDlD3Wcq/C9pZe4Tg+Ekh+1jn7CL cqkaEec/b1ESrFti5oIYAxAzvknYuQezNw2lsWvq15+EmRAw84tjnI4g5pmdBKrP 7SLe4xoIymS3WFoNsowbhvXOzX2v2w9YWfFmQEBYfG8CFw6XdHVt6n8cTzUlgvOc B+BKndr/d5nqARxTsNfZsSLQkAitQddyNnbJ7291F/wJuIa1hWHihViOoYMohuzK 8pECELNeA2iNxHcdtk5JfEVwQpnHM1m/aWnzHEWC6jEJTpD/dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORmZu7xlGdd9xrXVwjUxiOhx4d+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvMjllYTk2ZWYtNWZjMC0z OWZhLWIxNGEtODEwYmRlZWU5YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk0j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALVEnKe86WbDHHFrkuebSXDzybw2+zqQM3j0wkBKUufkE2gVyMtCjePs 3OX+6wyQwewnmhH39RzDk+lDyEv0gYMeLAPBbq0J22O2IrSS4OEmntsXR+nZhiOo drt8gLxP6JPb67tFLND71Nqw9/Osj5Z5J/MRtSzn93wClh6ZI7bvHbbdlX3iBg// 2N0eDxwwl+Tjk94PBbxDbfLKjpvRs9B5mS4gAVI4zu9jgajlUUiGDAC1V7txrSPX rszOWsfqvPXmtnVkZJTuCXkkX0SNfuDeFm7umlZfHtCESOll287KhZk3XQpjql/Y FSMpkyDGpgG4JCjI54PHic8uXZzrY2k= -----END CERTIFICATE-----Generated at Sun Nov 15 21:03:14 2026 by rpki-client