$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/16ee8767-953e-3295-a967-50357d512b07.roa File: 16ee8767-953e-3295-a967-50357d512b07.roa (raw, json) Hash identifier: Eb1iZpWBEnFKFghTlK/nF3rJ1xV8o3DyegrWQHuNgXY= Subject key identifier: C5:A3:55:36:A9:54:0E:F6:5D:57:17:05:77:03:C1:F8:E3:AF:83:87 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F0A32302FFD7C13C5DF326C80 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/16ee8767-953e-3295-a967-50357d512b07.roa Signing time: Wed 02 Sep 2026 09:14:39 +0000 ROA not before: Wed 02 Sep 2026 09:14:39 +0000 ROA not after: Tue 01 Dec 2026 10:14:39 +0000 asID: 11308 IP address blocks: 144.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:32:30:2f:fd:7c:13:c5:df:32:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 2 09:14:39 2026 GMT Not After : Dec 1 10:14:39 2026 GMT Subject: CN=f5711485-d833-4621-aac9-9c3bf47c197d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:93:84:02:f1:fd:7e:ab:b9:42:44:01:9c: 6c:00:7e:33:41:e8:b2:e2:36:92:95:71:a8:1c:20: e6:85:06:a3:7f:f6:f0:33:aa:eb:83:14:dc:13:02: d8:74:b3:f6:90:85:26:c7:8c:12:4e:42:1a:64:23: 52:31:33:2b:92:28:93:6a:bf:31:15:9b:22:76:06: 34:10:3e:13:ec:b8:39:12:18:cb:de:62:26:11:4c: ff:23:57:b1:01:30:99:a2:cc:e9:25:09:c2:4f:2c: 88:d1:7c:ca:b8:d0:f5:1d:5b:42:bf:47:11:a5:af: 32:2a:20:55:71:00:49:93:27:29:c9:ba:0d:1e:c2: 1a:d1:57:12:00:d0:41:34:f5:37:60:3b:24:60:22: e9:63:05:d0:4b:68:37:5f:f2:e3:66:53:01:31:c5: a8:47:c2:ac:d8:9b:d8:1f:09:e6:59:c1:73:36:50: 98:5b:e9:60:90:cd:e7:83:1a:5e:25:28:2b:af:c3: 0b:b0:f5:e4:77:37:2b:ea:4c:c6:91:87:8e:a5:c9: de:6e:66:14:f0:53:5b:8e:43:bd:4f:23:d3:99:a7: c5:12:17:c4:70:53:f0:da:4d:42:5f:2e:78:64:c9: eb:59:2c:df:f4:60:7e:d3:70:76:b4:bc:4d:d0:11: c7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:55:36:A9:54:0E:F6:5D:57:17:05:77:03:C1:F8:E3:AF:83:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/16ee8767-953e-3295-a967-50357d512b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:08:59:59:34:e1:9a:a8:2b:e4:c0:cf:03:bc:35:45:c6:42: e9:ab:15:52:d0:25:f5:21:e8:30:67:22:01:7c:55:d5:e2:8e: 6a:5e:5c:1d:80:ea:7b:ec:fb:3b:8b:6d:77:bd:ef:f6:e4:92: 4e:e4:ac:f4:52:8e:9c:3d:4a:11:38:46:34:de:d4:0b:20:13: 26:63:04:ad:b7:38:3b:16:12:bf:fa:aa:d8:79:ff:41:49:5a: 17:32:e3:3f:ff:10:1c:81:ff:c6:83:57:33:9d:a7:9a:e1:36: 8f:a0:cc:65:55:5b:de:ec:12:c2:48:fe:03:cf:8d:76:8b:1b: 87:7e:6d:ff:f0:f3:c9:d3:b1:23:fe:bd:af:8a:44:20:7b:d6: 31:ec:2f:93:1b:94:cd:75:ed:23:3e:f2:61:4a:27:3d:39:d6: 39:c7:cf:c3:5e:27:64:d0:d8:4f:b7:62:cf:31:7e:73:c5:6f: 11:71:85:d8:33:69:12:ee:36:76:13:24:22:d4:dc:69:5a:a1: 3a:93:24:24:78:b0:d3:c6:28:da:26:1c:7f:5c:e9:3e:3e:ee: 25:02:28:65:13:89:f0:1a:f6:9b:07:2b:0e:02:fb:a9:a6:e1: c7:93:a6:89:11:ff:91:bc:fa:6c:4c:47:c6:ac:31:17:8e:a3: 43:42:f0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KMjAv/XwTxd8ybIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkwMjA5MTQzOVoXDTI2MTIwMTEwMTQzOVowLzEtMCsGA1UEAxMk ZjU3MTE0ODUtZDgzMy00NjIxLWFhYzktOWMzYmY0N2MxOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+uThALx/X6ruUJEAZxsAH4zQeiy4jaSlXGo HCDmhQajf/bwM6rrgxTcEwLYdLP2kIUmx4wSTkIaZCNSMTMrkiiTar8xFZsidgY0 ED4T7Lg5EhjL3mImEUz/I1exATCZoszpJQnCTyyI0XzKuND1HVtCv0cRpa8yKiBV cQBJkycpyboNHsIa0VcSANBBNPU3YDskYCLpYwXQS2g3X/LjZlMBMcWoR8Ks2JvY HwnmWcFzNlCYW+lgkM3ngxpeJSgrr8MLsPXkdzcr6kzGkYeOpcnebmYU8FNbjkO9 TyPTmafFEhfEcFPw2k1CXy54ZMnrWSzf9GB+03B2tLxN0BHHmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWjVTapVA72XVcXBXcDwfjjr4OHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvMTZlZTg3NjctOTUzZS0z Mjk1LWE5NjctNTAzNTdkNTEyYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcIWVk04ZqoK+TAzwO8NUXGQumrFVLQJfUh6DBnIgF8VdXijmpeXB2A 6nvs+zuLbXe97/bkkk7krPRSjpw9ShE4RjTe1AsgEyZjBK23ODsWEr/6qth5/0FJ Whcy4z//EByB/8aDVzOdp5rhNo+gzGVVW97sEsJI/gPPjXaLG4d+bf/w88nTsSP+ va+KRCB71jHsL5MblM117SM+8mFKJz051jnHz8NeJ2TQ2E+3Ys8xfnPFbxFxhdgz aRLuNnYTJCLU3GlaoTqTJCR4sNPGKNomHH9c6T4+7iUCKGUTifAa9psHKw4C+6mm 4ceTpokR/5G8+mxMR8asMReOo0NC8FM= -----END CERTIFICATE-----Generated at Sun Oct 4 18:02:31 2026 by rpki-client