$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/25c5e361-f87f-3fc6-b83e-442c12278afb.roa File: 25c5e361-f87f-3fc6-b83e-442c12278afb.roa (raw, json) Hash identifier: WQfq5jDcWZt1VKS5xUFkHeLkYOP6ookIkBs8TP2jJzo= Subject key identifier: F7:AB:21:29:E2:25:88:F3:B6:01:70:1A:44:CC:04:4A:36:37:BA:AB Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F0A32DECFD05C289477087600 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/25c5e361-f87f-3fc6-b83e-442c12278afb.roa Signing time: Wed 02 Sep 2026 09:16:02 +0000 ROA not before: Wed 02 Sep 2026 09:16:02 +0000 ROA not after: Tue 01 Dec 2026 10:16:02 +0000 asID: 701 IP address blocks: 144.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:32:de:cf:d0:5c:28:94:77:08:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 2 09:16:02 2026 GMT Not After : Dec 1 10:16:02 2026 GMT Subject: CN=4c21fb18-2d86-41b2-9a3d-69fd603f1b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:e4:2c:51:9d:d0:08:06:37:1b:7a:c9:16: 1f:00:f1:b2:e9:39:05:37:1f:b5:9c:c5:f6:80:60: c3:eb:72:7d:7a:17:90:9a:7c:8a:13:1c:48:ef:fa: fb:4a:56:08:ae:31:74:ca:c7:86:03:74:d7:f8:9d: c1:fb:32:70:46:03:90:2d:32:ec:4f:a0:4e:be:c6: e1:da:64:2c:52:85:c0:26:b7:98:9a:dc:58:08:4c: e2:2e:e6:38:d3:c3:fe:46:dc:13:af:00:d7:7a:08: f8:1b:58:a7:0e:d5:77:77:39:83:65:15:5b:8c:86: 9d:37:53:c6:98:b2:4f:ef:0f:2f:3b:58:db:e4:ee: 1b:71:58:91:7e:15:3a:e8:88:69:e0:ea:e3:60:82: 06:12:d5:81:cf:b9:83:a8:b6:15:e3:09:8a:10:74: 17:b9:19:e5:61:4a:e2:c4:2c:29:9e:d2:91:ff:09: 96:e5:f3:c8:2e:f3:95:0f:2b:8c:cc:3a:7b:21:c1: 1e:2b:ce:35:22:a9:75:bd:1b:e9:c9:77:81:d2:b4: 99:96:a2:46:b5:16:85:9e:2e:da:07:e4:d5:bd:73: 31:68:eb:c6:99:7a:4b:9b:d1:e2:dd:3b:a1:5e:13: fe:dc:11:24:83:7c:76:77:26:8f:7c:b0:87:65:ba: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AB:21:29:E2:25:88:F3:B6:01:70:1A:44:CC:04:4A:36:37:BA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/25c5e361-f87f-3fc6-b83e-442c12278afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ce:26:70:9c:44:a7:a6:af:2d:eb:76:05:98:0d:a4:34:3f: b0:b0:dd:e4:73:d5:cb:36:be:77:3b:68:7e:90:07:7a:fd:1e: 7f:cb:64:25:9f:b8:06:d7:1f:cb:8f:cc:47:54:54:6b:98:8b: 3b:a2:13:0d:15:30:fa:51:d5:6a:7e:18:eb:d8:a2:15:fb:42: 8e:6c:a5:f4:08:48:99:b1:f5:d8:59:60:8d:5b:78:68:bd:9a: 5a:b1:8e:f2:32:6c:51:15:a6:26:1a:45:11:5a:62:18:7c:b8: 9a:6f:ce:cd:e2:07:c3:58:84:3d:f7:67:ee:77:7c:bf:39:4e: 2f:13:16:85:7e:d5:55:82:d4:2d:64:4c:d4:4c:ab:1d:cc:ab: a4:a0:06:b9:4d:d5:b6:33:74:1b:24:30:d4:b6:05:29:fa:3a: e6:31:ea:fc:08:d8:3a:dc:2d:31:12:12:d5:1a:00:c8:12:80: 7d:15:80:d5:7f:74:a2:84:c4:62:b4:6d:7c:1d:1d:7d:2f:41: 80:d2:66:c4:46:ca:0d:4e:4f:3f:d4:64:96:be:00:14:c1:53: e9:f9:12:0e:f4:13:7f:83:1d:eb:79:53:41:8d:3b:aa:4e:79: 37:e7:bb:c1:07:c7:4e:77:54:ef:bc:04:1c:8d:08:dd:d6:39: b4:d9:4c:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KMt7P0FwolHcIdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkwMjA5MTYwMloXDTI2MTIwMTEwMTYwMlowLzEtMCsGA1UEAxMk NGMyMWZiMTgtMmQ4Ni00MWIyLTlhM2QtNjlmZDYwM2YxYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BLkLFGd0AgGNxt6yRYfAPGy6TkFNx+1nMX2 gGDD63J9eheQmnyKExxI7/r7SlYIrjF0yseGA3TX+J3B+zJwRgOQLTLsT6BOvsbh 2mQsUoXAJreYmtxYCEziLuY408P+RtwTrwDXegj4G1inDtV3dzmDZRVbjIadN1PG mLJP7w8vO1jb5O4bcViRfhU66Ihp4OrjYIIGEtWBz7mDqLYV4wmKEHQXuRnlYUri xCwpntKR/wmW5fPILvOVDyuMzDp7IcEeK841Iql1vRvpyXeB0rSZlqJGtRaFni7a B+TVvXMxaOvGmXpLm9Hi3TuhXhP+3BEkg3x2dyaPfLCHZbqf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPerISniJYjztgFwGkTMBEo2N7qrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvMjVjNWUzNjEtZjg3Zi0z ZmM2LWI4M2UtNDQyYzEyMjc4YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrOJnCcRKemry3rdgWYDaQ0P7Cw3eRz1cs2vnc7aH6QB3r9Hn/LZCWf uAbXH8uPzEdUVGuYizuiEw0VMPpR1Wp+GOvYohX7Qo5spfQISJmx9dhZYI1beGi9 mlqxjvIybFEVpiYaRRFaYhh8uJpvzs3iB8NYhD33Z+53fL85Ti8TFoV+1VWC1C1k TNRMqx3Mq6SgBrlN1bYzdBskMNS2BSn6OuYx6vwI2DrcLTESEtUaAMgSgH0VgNV/ dKKExGK0bXwdHX0vQYDSZsRGyg1OTz/UZJa+ABTBU+n5Eg70E3+DHet5U0GNO6pO eTfnu8EHx053VO+8BByNCN3WObTZTMY= -----END CERTIFICATE-----Generated at Sun Sep 13 14:11:38 2026 by rpki-client