$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/54e430a0-1d41-361a-9481-45440a362e7d.roa File: 54e430a0-1d41-361a-9481-45440a362e7d.roa (raw, json) Hash identifier: y8qoKZN2P6cGJOLe4GUlRJ2iK0fj/sm9I+VIziYKogM= Subject key identifier: A6:A3:F8:1A:D2:5C:2D:59:50:71:48:F4:C4:18:88:63:C8:D9:F7:79 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F5BD95FA5B23040A5401AA4A0 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/54e430a0-1d41-361a-9481-45440a362e7d.roa Signing time: Thu 01 Oct 2026 15:11:59 +0000 ROA not before: Thu 01 Oct 2026 15:11:59 +0000 ROA not after: Wed 30 Dec 2026 16:11:59 +0000 asID: 7046 IP address blocks: 144.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d9:5f:a5:b2:30:40:a5:40:1a:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Oct 1 15:11:59 2026 GMT Not After : Dec 30 16:11:59 2026 GMT Subject: CN=d866f44c-d290-4422-a670-4ce50195cef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ee:ec:89:e4:64:4c:37:7c:c6:69:04:27:bb: 4c:12:1a:63:c1:32:cc:1f:bf:bb:f9:b3:5c:1b:58: 47:06:74:55:6e:e7:f6:8e:a3:ef:10:78:fb:0e:6b: f9:75:f8:e1:ed:f9:7c:a7:00:22:03:a7:72:f8:6b: ca:db:e8:6d:92:33:40:fd:ab:d4:c5:9d:54:3b:f1: 41:7f:9f:bf:98:1e:96:ac:3d:d1:87:23:ef:5e:da: 57:fb:11:a8:a9:51:b6:00:54:0f:0b:20:96:a8:f8: 34:e0:0f:1c:b8:69:a4:b0:88:10:e2:84:46:d7:57: 89:f4:e8:18:8e:2d:fd:e9:d7:7b:38:f9:5f:10:6d: 64:27:1d:27:6d:ea:f5:c2:b9:32:76:cc:0a:12:ff: e6:c4:38:41:37:b2:61:4b:7e:23:66:a1:25:0f:92: dc:70:71:cf:12:ff:82:01:cd:0f:5c:39:3a:57:53: 9b:92:f2:9f:7a:8a:b4:d0:db:65:d3:d8:76:d6:9e: 42:19:2f:1a:65:16:90:c5:0a:1b:c2:3f:d9:1e:d1: 35:96:89:0f:ec:62:28:f9:d9:7a:89:76:a1:86:05: 1f:17:4c:21:da:5c:43:8d:5b:dc:b2:02:56:56:cb: 95:f4:91:fe:cc:07:4d:54:00:51:41:8f:57:ee:17: f1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:F8:1A:D2:5C:2D:59:50:71:48:F4:C4:18:88:63:C8:D9:F7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/54e430a0-1d41-361a-9481-45440a362e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f1:12:eb:82:57:06:c8:51:be:2e:04:2e:ea:f7:ec:da:79: fd:28:7f:77:4d:ec:f7:ba:7a:5f:20:47:a0:9d:22:fc:33:5d: 5d:ba:ea:26:72:1a:8b:c1:8a:c2:0d:03:96:ef:c4:7e:af:37: 2c:47:2e:1b:06:f0:6e:73:d0:eb:55:d0:e7:bb:5f:02:0f:13: 1f:0a:e5:ef:8c:98:d4:dc:d3:69:32:f2:8d:7b:c4:ba:44:dc: 38:e4:e6:a5:df:44:c0:0e:1a:5c:95:98:9c:40:36:0d:36:19: 85:a7:30:2b:48:c3:85:b0:85:83:8a:a8:01:c8:17:99:87:cd: ec:3e:a2:1b:6e:64:93:fe:09:dd:26:d5:48:5b:a6:40:ab:6a: ae:28:da:ff:f3:5a:20:7b:b8:c3:9f:71:e9:29:f7:8a:09:7d: f5:b2:da:81:e8:1c:c5:fd:47:24:dc:14:a2:b7:86:3b:2d:67: 92:66:20:ce:e1:9c:46:56:fe:ca:9f:a1:91:96:50:ac:e2:82: d5:a9:87:3a:ce:eb:75:ce:3c:c5:96:fe:ed:13:8f:cb:64:aa: f9:e6:17:95:48:a7:14:cd:c6:e9:fa:0a:65:51:11:5e:c7:8d: 12:48:60:7a:4a:80:92:04:69:06:5f:cc:ee:8c:62:47:6e:12: b9:13:26:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9b2V+lsjBApUAapKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MTAwMTE1MTE1OVoXDTI2MTIzMDE2MTE1OVowLzEtMCsGA1UEAxMk ZDg2NmY0NGMtZDI5MC00NDIyLWE2NzAtNGNlNTAxOTVjZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+7sieRkTDd8xmkEJ7tMEhpjwTLMH7+7+bNc G1hHBnRVbuf2jqPvEHj7Dmv5dfjh7fl8pwAiA6dy+GvK2+htkjNA/avUxZ1UO/FB f5+/mB6WrD3RhyPvXtpX+xGoqVG2AFQPCyCWqPg04A8cuGmksIgQ4oRG11eJ9OgY ji396dd7OPlfEG1kJx0nber1wrkydswKEv/mxDhBN7JhS34jZqElD5LccHHPEv+C Ac0PXDk6V1ObkvKfeoq00Ntl09h21p5CGS8aZRaQxQobwj/ZHtE1lokP7GIo+dl6 iXahhgUfF0wh2lxDjVvcsgJWVsuV9JH+zAdNVABRQY9X7hfxtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaj+BrSXC1ZUHFI9MQYiGPI2fd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvNTRlNDMwYTAtMWQ0MS0z NjFhLTk0ODEtNDU0NDBhMzYyZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/xEuuCVwbIUb4uBC7q9+zaef0of3dN7Pe6el8gR6CdIvwzXV266iZy GovBisINA5bvxH6vNyxHLhsG8G5z0OtV0Oe7XwIPEx8K5e+MmNTc02ky8o17xLpE 3Djk5qXfRMAOGlyVmJxANg02GYWnMCtIw4WwhYOKqAHIF5mHzew+ohtuZJP+Cd0m 1UhbpkCraq4o2v/zWiB7uMOfcekp94oJffWy2oHoHMX9RyTcFKK3hjstZ5JmIM7h nEZW/sqfoZGWUKzigtWphzrO63XOPMWW/u0Tj8tkqvnmF5VIpxTNxun6CmVREV7H jRJIYHpKgJIEaQZfzO6MYkduErkTJsQ= -----END CERTIFICATE-----Generated at Sun Oct 4 18:02:42 2026 by rpki-client