$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/190b4ce0-2f56-3537-b585-b9e524871d2e.roa File: 190b4ce0-2f56-3537-b585-b9e524871d2e.roa (raw, json) Hash identifier: yrO7yJDT8VgpTDIMOzyIVkiaVFiF2gYrMta36XEXmaY= Subject key identifier: B0:E8:C5:0B:55:ED:11:08:C5:FA:01:58:FA:57:D4:66:48:8E:AC:E7 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F0A32982B55126FED496D1400 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/190b4ce0-2f56-3537-b585-b9e524871d2e.roa Signing time: Wed 02 Sep 2026 09:15:28 +0000 ROA not before: Wed 02 Sep 2026 09:15:28 +0000 ROA not after: Tue 01 Dec 2026 10:15:28 +0000 asID: 8075 IP address blocks: 144.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:32:98:2b:55:12:6f:ed:49:6d:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 2 09:15:28 2026 GMT Not After : Dec 1 10:15:28 2026 GMT Subject: CN=6f31c5e5-66b5-4d8b-9243-1bba10b2011a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d3:67:a8:03:6b:9f:b3:54:03:fc:ee:96:18: b1:28:36:eb:8f:1f:13:73:b5:ed:4e:fe:9d:7e:7b: 5e:a3:d6:40:7f:40:3d:d6:a4:23:82:e0:ee:95:a8: a6:20:24:c0:ea:05:0b:4c:fd:e1:fe:6a:49:5c:b0: 40:83:56:aa:24:a8:6d:66:a9:b5:88:e1:4e:f3:c4: af:b5:25:bb:72:1f:9f:58:d9:95:cd:cd:83:15:e9: 11:ea:0f:7d:b4:14:fc:eb:0a:24:a2:1d:7f:82:a5: a0:80:1e:11:26:ab:4d:94:1b:42:1f:1f:20:90:d8: 6a:f9:2f:1a:77:a1:6b:e0:37:be:6e:dd:0a:57:87: a1:86:cc:0a:66:9f:08:d4:b3:f1:72:94:72:e6:9d: f3:ad:78:6d:92:af:a8:d9:68:d5:8c:b2:39:3a:73: f4:4d:df:1a:f0:bd:5b:43:68:7d:9a:a6:e4:48:e6: 8c:c3:06:7f:12:a2:62:87:cd:61:4a:7f:59:d6:4f: b1:80:b4:e7:73:fc:81:60:6c:33:43:fb:05:75:76: ec:cd:ff:30:16:75:d1:a6:4a:50:16:3d:bd:b2:c5: 3f:ff:d3:5a:14:89:21:5a:d7:a7:e0:d2:90:e8:60: 49:0b:2d:db:71:b4:c1:00:c5:41:ff:38:b1:00:50: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E8:C5:0B:55:ED:11:08:C5:FA:01:58:FA:57:D4:66:48:8E:AC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/190b4ce0-2f56-3537-b585-b9e524871d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4b:f4:0e:20:1f:ee:8d:50:cc:c0:e8:74:f6:64:de:4b:e8: 7e:79:05:7f:12:b3:50:4b:38:0e:d7:20:36:8a:21:ac:bb:f3: 04:45:66:26:b5:66:93:c2:dd:04:d9:ee:8e:ff:a4:db:72:11: d6:8d:12:c0:5d:02:1e:40:aa:6e:17:07:e7:fb:1b:e1:32:66: 22:fa:20:f0:f6:a3:ab:a6:12:d0:47:3a:e2:0c:ea:99:1d:41: ef:9b:72:7f:a5:c2:91:fa:31:98:ae:a3:09:24:0c:12:8d:62: 8c:1c:44:0d:db:23:cf:55:6c:fb:31:7d:96:17:5e:75:41:ee: c7:7a:e8:4b:60:c0:55:fb:ee:36:91:4d:18:20:fe:04:39:84: 71:5a:97:76:6d:77:2d:59:f7:40:15:32:b6:52:15:76:f8:0d: a4:15:3b:58:b7:1a:55:14:20:bb:db:da:39:8b:33:31:44:9e: d3:aa:f8:92:bb:cc:44:79:ce:43:f6:89:3d:d8:76:f8:18:73: bb:5c:8b:8d:45:cc:c2:73:84:3c:85:da:d8:62:b6:eb:7f:16: 44:00:02:7b:2f:01:8d:35:cd:c1:be:f5:eb:55:10:eb:34:8f: 49:37:33:24:d0:5e:b8:91:8e:ed:30:03:3b:37:28:36:f0:7a: 2e:2f:4d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KMpgrVRJv7UltFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkwMjA5MTUyOFoXDTI2MTIwMTEwMTUyOFowLzEtMCsGA1UEAxMk NmYzMWM1ZTUtNjZiNS00ZDhiLTkyNDMtMWJiYTEwYjIwMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NNnqANrn7NUA/zulhixKDbrjx8Tc7XtTv6d fnteo9ZAf0A91qQjguDulaimICTA6gULTP3h/mpJXLBAg1aqJKhtZqm1iOFO88Sv tSW7ch+fWNmVzc2DFekR6g99tBT86wokoh1/gqWggB4RJqtNlBtCHx8gkNhq+S8a d6Fr4De+bt0KV4ehhswKZp8I1LPxcpRy5p3zrXhtkq+o2WjVjLI5OnP0Td8a8L1b Q2h9mqbkSOaMwwZ/EqJih81hSn9Z1k+xgLTnc/yBYGwzQ/sFdXbszf8wFnXRpkpQ Fj29ssU//9NaFIkhWten4NKQ6GBJCy3bcbTBAMVB/zixAFB/ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDoxQtV7REIxfoBWPpX1GZIjqznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvMTkwYjRjZTAtMmY1Ni0z NTM3LWI1ODUtYjllNTI0ODcxZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdL9A4gH+6NUMzA6HT2ZN5L6H55BX8Ss1BLOA7XIDaKIay78wRFZia1 ZpPC3QTZ7o7/pNtyEdaNEsBdAh5Aqm4XB+f7G+EyZiL6IPD2o6umEtBHOuIM6pkd Qe+bcn+lwpH6MZiuowkkDBKNYowcRA3bI89VbPsxfZYXXnVB7sd66EtgwFX77jaR TRgg/gQ5hHFal3Ztdy1Z90AVMrZSFXb4DaQVO1i3GlUUILvb2jmLMzFEntOq+JK7 zER5zkP2iT3YdvgYc7tci41FzMJzhDyF2thitut/FkQAAnsvAY01zcG+9etVEOs0 j0k3MyTQXriRju0wAzs3KDbwei4vTfI= -----END CERTIFICATE-----Generated at Fri Sep 4 22:49:04 2026 by rpki-client