$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/9f0bed38-65de-370d-8953-f2a490746cfb.roa File: 9f0bed38-65de-370d-8953-f2a490746cfb.roa (raw, json) Hash identifier: bMDXcDr4GSrB27szC/2Gmt587JucOMVYqAN5H1jdKSc= Subject key identifier: 8A:3B:F9:64:5D:07:07:0E:61:19:A1:52:E0:63:2B:7D:03:77:06:B5 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F5BD98805624BE7150F143DE4 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/9f0bed38-65de-370d-8953-f2a490746cfb.roa Signing time: Thu 01 Oct 2026 15:12:18 +0000 ROA not before: Thu 01 Oct 2026 15:12:18 +0000 ROA not after: Wed 30 Dec 2026 16:12:18 +0000 asID: 11308 IP address blocks: 144.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d9:88:05:62:4b:e7:15:0f:14:3d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Oct 1 15:12:18 2026 GMT Not After : Dec 30 16:12:18 2026 GMT Subject: CN=a698540a-f377-4a30-a0e7-88502d51a27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b9:b1:40:4e:25:11:30:00:6b:64:ff:e0:d1: d2:ff:e9:ef:84:84:82:94:83:bd:c2:76:c1:79:2c: d8:66:5e:95:ce:b3:f0:47:21:89:fb:23:eb:4b:6d: a9:e2:87:13:70:b6:67:34:3b:70:a2:d2:cd:10:5f: 56:70:be:28:21:b3:ff:37:63:11:06:5d:06:a8:25: 9c:e8:71:17:49:3b:40:e7:bb:08:0b:52:21:58:5a: 99:1e:cf:fa:25:1b:e5:89:9f:81:2a:db:d7:a2:b0: 56:49:4c:0a:f3:3a:f9:03:f9:67:6e:b4:ef:04:1f: 3d:7a:0f:00:3d:3e:ed:ee:ac:cd:c0:d6:8c:cd:66: 9d:72:96:1c:3b:0c:ec:8c:6e:8f:f1:6a:a4:2e:de: 81:2b:4d:6e:ae:dc:95:ea:04:27:91:96:28:00:b9: 68:32:66:5c:da:03:f9:07:3d:9b:2d:0a:b7:b1:34: 44:e0:9e:a1:14:30:46:97:86:7c:ed:11:da:54:a8: 7b:ee:47:78:06:70:06:33:23:cd:bc:46:59:fe:1a: 05:b1:8e:95:fb:19:bc:f2:42:f8:88:2b:e1:cd:d4: aa:e5:d8:bf:a2:1a:12:59:30:5e:61:cb:5e:9e:f7: 4d:6a:b5:88:66:1d:2a:48:8f:c1:4c:a6:94:93:c0: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3B:F9:64:5D:07:07:0E:61:19:A1:52:E0:63:2B:7D:03:77:06:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/9f0bed38-65de-370d-8953-f2a490746cfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:77:06:b5:f0:c1:2d:6a:b8:80:d6:da:ce:2c:bb:02:c9:78: ee:48:16:06:2e:ed:9c:25:22:04:5b:65:9a:80:63:36:6c:4e: 98:e7:a5:1f:7c:46:3f:e5:05:52:03:47:82:fe:67:93:67:fe: 6d:48:57:86:5b:39:07:0d:3f:10:9d:fe:39:d4:71:c1:07:83: 68:fa:ba:1e:00:af:05:76:62:b0:b4:4e:8f:95:ce:7a:ce:56: fb:cb:c4:25:b7:8c:be:d6:de:9f:b7:e1:85:49:23:c9:05:66: 94:3d:2d:04:ad:eb:24:f3:05:9b:1c:8f:3f:04:f8:76:98:4e: fb:b9:d4:05:4a:24:8c:2a:3d:b2:29:74:35:16:f0:7c:06:27: 83:fb:43:3b:ed:ab:3d:19:54:8f:96:35:e6:3e:2d:13:6c:f1: 7c:4c:85:62:3d:25:40:76:20:c0:d2:e4:6a:96:a6:6c:c2:11: 39:21:11:2e:0f:8a:82:d8:22:42:3f:46:2c:4c:52:1b:06:d9: 4c:fa:d1:77:5d:f2:e8:da:83:f3:b0:3c:2a:fe:79:e9:e7:f3: 65:d4:c5:2b:6f:c0:be:c9:61:e0:9a:62:c7:ad:da:c8:07:7c: 48:3e:e7:49:91:72:81:3c:82:b4:45:4a:be:95:7a:42:ff:8f: f5:36:ef:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9b2YgFYkvnFQ8UPeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MTAwMTE1MTIxOFoXDTI2MTIzMDE2MTIxOFowLzEtMCsGA1UEAxMk YTY5ODU0MGEtZjM3Ny00YTMwLWEwZTctODg1MDJkNTFhMjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mxQE4lETAAa2T/4NHS/+nvhISClIO9wnbB eSzYZl6VzrPwRyGJ+yPrS22p4ocTcLZnNDtwotLNEF9WcL4oIbP/N2MRBl0GqCWc 6HEXSTtA57sIC1IhWFqZHs/6JRvliZ+BKtvXorBWSUwK8zr5A/lnbrTvBB89eg8A PT7t7qzNwNaMzWadcpYcOwzsjG6P8WqkLt6BK01urtyV6gQnkZYoALloMmZc2gP5 Bz2bLQq3sTRE4J6hFDBGl4Z87RHaVKh77kd4BnAGMyPNvEZZ/hoFsY6V+xm88kL4 iCvhzdSq5di/ohoSWTBeYctenvdNarWIZh0qSI/BTKaUk8DsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo7+WRdBwcOYRmhUuBjK30Ddwa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvOWYwYmVkMzgtNjVkZS0z NzBkLTg5NTMtZjJhNDkwNzQ2Y2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB3BrXwwS1quIDW2s4suwLJeO5IFgYu7ZwlIgRbZZqAYzZsTpjnpR98 Rj/lBVIDR4L+Z5Nn/m1IV4ZbOQcNPxCd/jnUccEHg2j6uh4ArwV2YrC0To+VznrO VvvLxCW3jL7W3p+34YVJI8kFZpQ9LQSt6yTzBZscjz8E+HaYTvu51AVKJIwqPbIp dDUW8HwGJ4P7Qzvtqz0ZVI+WNeY+LRNs8XxMhWI9JUB2IMDS5GqWpmzCETkhES4P ioLYIkI/RixMUhsG2Uz60Xdd8ujag/OwPCr+eenn82XUxStvwL7JYeCaYset2sgH fEg+50mRcoE8grRFSr6VekL/j/U2774= -----END CERTIFICATE-----Generated at Sun Oct 4 19:07:28 2026 by rpki-client