$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa File: d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa (raw, json) Hash identifier: I7fIke+eik/Dhbng49EMHJraujoBX0+JFKkw666n/B8= Subject key identifier: 7D:1E:8B:54:E5:56:BD:BA:CF:19:E8:C3:30:4A:23:FC:12:20:66:80 Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Certificate serial: 010D0C9F4328584DBD059536AA482B3B0F2AA150 Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 5050 IP address blocks: 147.72.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:95:36:aa:48:2b:3b:0f:2a:a1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=02e6cb3c-fca4-4b91-af11-693420ffc70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7c:f3:bc:a5:cf:27:ab:4b:06:b0:9f:df:0c: 67:98:c9:ae:e1:fe:30:3e:df:e1:b5:4f:e9:9d:fb: 06:03:5b:1b:53:da:05:00:32:6a:1a:d2:d7:dc:c9: a6:47:3c:d6:8b:2a:ba:44:88:08:ff:fe:dc:a5:64: 41:68:f5:fb:ff:d5:9a:a1:f1:96:43:ce:be:34:07: 4d:9e:32:5a:4e:3f:48:4c:8a:db:87:f1:a6:40:89: 38:ba:3e:dd:66:38:ad:ed:e5:ea:f5:65:de:a4:df: 3a:40:9b:d4:33:05:51:4c:82:d4:49:e2:78:1c:b1: dd:c7:6f:81:c2:56:b6:45:04:a2:e2:0e:ca:32:6e: 91:e5:d8:39:d2:23:0f:74:fd:8d:0c:f3:0b:04:8e: 40:36:fa:cc:31:0a:f0:9d:26:09:bc:b3:64:b4:15: c8:15:c1:e5:f1:67:4a:bd:84:44:8f:d8:70:d2:65: 64:2b:70:29:34:21:b4:d6:4e:0e:89:0c:fe:48:33: 3e:0a:ad:59:19:c0:59:95:f9:e8:af:e9:f5:50:af: 2a:be:af:97:e3:84:39:a7:af:50:09:f8:8c:be:14: fc:38:ec:1a:2e:8f:a9:99:b3:28:8a:eb:40:28:06: 9d:5a:a1:a1:06:a2:00:bd:89:be:6f:11:47:b0:a0: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:8B:54:E5:56:BD:BA:CF:19:E8:C3:30:4A:23:FC:12:20:66:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/d3fea9d2-5423-3d98-9da7-a3ab1970fd01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl X509v3 Authority Key Identifier: keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer sbgp-ipAddrBlock: critical IPv4: 147.72.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:81:f8:6c:6b:9c:74:75:6e:34:2b:2e:88:56:ab:72:ba:f9: 81:d7:14:e7:13:26:de:e0:81:bc:3c:56:4d:f5:13:d7:7e:21: 42:08:60:a2:72:15:22:db:4b:48:65:84:64:f9:0a:2b:02:c9: 06:20:03:42:ea:c3:89:8a:2c:b2:f0:ab:5c:bb:ac:36:66:63: 0d:85:9c:75:70:e0:a8:06:ce:42:32:e8:62:bc:96:7f:fd:92: a9:c7:a6:cc:ee:d1:b6:f5:1a:2f:58:c7:9c:8b:32:16:d2:45: 05:32:c8:41:36:e9:ff:cf:ae:6d:5f:de:d2:c1:6c:6b:7b:09: 6c:0b:83:72:f7:83:b9:43:2b:f4:9e:26:e7:5d:dd:b1:90:25: 7c:ce:d5:78:00:76:36:cf:f3:3b:97:9c:25:a4:e7:d9:00:36: 2b:05:ba:1c:1c:3c:04:e4:44:aa:b8:db:cd:a0:2c:46:63:78: 59:8f:a6:a2:87:87:04:b3:21:12:3d:5e:94:d9:d9:0e:4f:0f: 85:c9:49:05:a5:65:bf:57:b1:c8:ff:4a:12:3d:72:42:ba:43: ec:11:f9:93:ac:11:a1:3f:4b:8c:71:9b:1e:4a:7d:be:39:55: bf:b5:97:36:3a:c0:f4:b5:b9:30:98:31:25:e0:21:69:96:df: c5:b0:c0:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE29BZU2qkgrOw8qoVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz MGQyMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk MDJlNmNiM2MtZmNhNC00YjkxLWFmMTEtNjkzNDIwZmZjNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXzzvKXPJ6tLBrCf3wxnmMmu4f4wPt/htU/p nfsGA1sbU9oFADJqGtLX3MmmRzzWiyq6RIgI//7cpWRBaPX7/9WaofGWQ86+NAdN njJaTj9ITIrbh/GmQIk4uj7dZjit7eXq9WXepN86QJvUMwVRTILUSeJ4HLHdx2+B wla2RQSi4g7KMm6R5dg50iMPdP2NDPMLBI5ANvrMMQrwnSYJvLNktBXIFcHl8WdK vYREj9hw0mVkK3ApNCG01k4OiQz+SDM+Cq1ZGcBZlfnor+n1UK8qvq+X44Q5p69Q CfiMvhT8OOwaLo+pmbMoiutAKAadWqGhBqIAvYm+bxFHsKDUIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH0ei1TlVr26zxnowzBKI/wSIGaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4 YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvZDNmZWE5ZDItNTQyMy0z ZDk4LTlkYTctYTNhYjE5NzBmZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0 OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw MGYyMzMwZDIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk0gwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEARIH4bGucdHVuNCsuiFarcrr5gdcU5xMm3uCBvDxWTfUT134hQghgonIV IttLSGWEZPkKKwLJBiADQurDiYossvCrXLusNmZjDYWcdXDgqAbOQjLoYryWf/2S qcemzO7RtvUaL1jHnIsyFtJFBTLIQTbp/8+ubV/e0sFsa3sJbAuDcveDuUMr9J4m 513dsZAlfM7VeAB2Ns/zO5ecJaTn2QA2KwW6HBw8BOREqrjbzaAsRmN4WY+mooeH BLMhEj1elNnZDk8PhclJBaVlv1exyP9KEj1yQrpD7BH5k6wRoT9LjHGbHkp9vjlV v7WXNjrA9LW5MJgxJeAhaZbfxbDAAA== -----END CERTIFICATE-----Generated at Wed May 13 04:39:03 2026 by rpki-client