$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/b92ad896-36b8-3981-9612-0931ecb0505a.roa File: b92ad896-36b8-3981-9612-0931ecb0505a.roa (raw, json) Hash identifier: 3kjLoi57aoGIcokjOm7ShPz1ciOtkU0yNkWgzfK4MXM= Subject key identifier: 66:15:A8:0C:CD:22:3A:3A:F5:9E:D9:CB:54:03:F9:D2:CD:E5:FC:83 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F0A31F0F79394E48EEB82BA00 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/b92ad896-36b8-3981-9612-0931ecb0505a.roa Signing time: Wed 02 Sep 2026 09:14:10 +0000 ROA not before: Wed 02 Sep 2026 09:14:10 +0000 ROA not after: Tue 01 Dec 2026 10:14:10 +0000 asID: 7046 IP address blocks: 144.250.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:31:f0:f7:93:94:e4:8e:eb:82:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 2 09:14:10 2026 GMT Not After : Dec 1 10:14:10 2026 GMT Subject: CN=ba3f3399-f759-4b9c-be53-5be1b9bd3576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:91:a8:77:84:de:43:6a:c2:db:50:92:9e: 2c:50:b1:58:35:96:21:54:18:c3:62:9f:66:ff:c1: a4:90:07:b7:e7:3f:43:70:e7:e4:a6:aa:47:fa:30: df:d8:a3:34:a3:bb:f0:a1:21:3a:41:3d:b0:92:64: 03:18:5e:ff:9a:24:92:d8:41:74:35:7e:ef:32:18: 24:de:43:15:90:9f:d3:7d:b5:d7:32:f8:5c:dc:96: 21:0e:95:65:93:fb:25:b3:2a:69:cc:1f:90:5b:89: 3b:1c:ed:d4:52:c4:11:da:46:5b:a7:ce:8a:aa:70: 77:cc:05:1e:1f:91:41:cf:27:2a:b5:58:55:1b:4b: fb:42:b8:eb:83:d1:d2:cb:01:f9:13:7f:1a:40:e8: 17:23:91:78:7f:cb:75:62:de:25:b3:fa:ca:37:47: c2:05:df:34:87:96:df:ac:a5:45:1c:c8:f5:32:ed: 03:1c:9d:8e:f5:23:1f:6e:18:dc:63:42:ea:87:32: 2f:91:e8:96:03:21:67:71:d3:d1:d2:93:e9:8c:04: 87:df:bc:e5:b2:da:b1:bc:bc:0a:aa:d6:8f:ed:64: e0:4b:72:d4:b5:90:f6:69:0f:65:e4:cc:30:9c:f5: cd:28:53:49:23:02:08:f6:35:bb:ed:b5:aa:39:60: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:15:A8:0C:CD:22:3A:3A:F5:9E:D9:CB:54:03:F9:D2:CD:E5:FC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/b92ad896-36b8-3981-9612-0931ecb0505a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:47:25:f7:bc:13:ff:1a:ab:75:de:10:27:5d:d9:0b:9a:47: f6:26:d1:1c:b0:d5:ea:ae:3b:a0:8c:f8:99:94:2e:38:89:40: 54:e3:fb:c0:2a:20:c8:1f:80:8c:a9:f8:ab:0d:67:fe:bd:38: e1:9f:bb:8e:ce:7a:de:fa:a6:58:6a:5c:e5:5b:58:de:2f:e5: c4:4b:e2:3d:49:d5:96:0e:4f:db:7b:8e:3c:b9:b7:14:c2:32: 6e:8a:fc:82:5c:d1:b7:62:07:48:50:a1:7d:65:cd:e8:4c:81: b4:69:df:1e:7d:12:7a:4b:38:1f:25:41:75:53:70:1d:b6:44: 92:c3:63:6d:97:e4:5f:33:9d:8f:62:9a:88:f2:7f:a9:75:dd: 63:3f:f6:d0:01:a4:d8:99:69:89:ff:22:38:86:92:51:3c:6a: d1:c1:51:81:10:8a:34:c2:64:fb:93:b4:f2:05:03:b0:96:d9: f2:40:26:ba:4e:4e:49:ed:8c:49:6b:d3:d8:35:14:86:cd:9a: e4:11:c0:29:0b:7d:1b:15:b7:01:2c:7b:94:71:5f:89:e7:07: 4b:2b:fc:c9:81:e5:e7:23:ba:07:7e:ce:bb:91:e3:97:b3:f4: cc:48:94:d3:0e:a6:4c:cc:6e:63:73:ab:62:97:08:69:57:d6: da:77:a4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KMfD3k5TkjuuCugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkwMjA5MTQxMFoXDTI2MTIwMTEwMTQxMFowLzEtMCsGA1UEAxMk YmEzZjMzOTktZjc1OS00YjljLWJlNTMtNWJlMWI5YmQzNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1+RqHeE3kNqwttQkp4sULFYNZYhVBjDYp9m /8GkkAe35z9DcOfkpqpH+jDf2KM0o7vwoSE6QT2wkmQDGF7/miSS2EF0NX7vMhgk 3kMVkJ/TfbXXMvhc3JYhDpVlk/slsyppzB+QW4k7HO3UUsQR2kZbp86KqnB3zAUe H5FBzycqtVhVG0v7Qrjrg9HSywH5E38aQOgXI5F4f8t1Yt4ls/rKN0fCBd80h5bf rKVFHMj1Mu0DHJ2O9SMfbhjcY0LqhzIvkeiWAyFncdPR0pPpjASH37zlstqxvLwK qtaP7WTgS3LUtZD2aQ9l5MwwnPXNKFNJIwII9jW77bWqOWBQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYVqAzNIjo69Z7Zy1QD+dLN5fyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvYjkyYWQ4OTYtMzZiOC0z OTgxLTk2MTItMDkzMWVjYjA1MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPoWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlHJfe8E/8aq3XeECdd2QuaR/Ym0Ryw1equO6CM+JmULjiJQFTj+8Aq IMgfgIyp+KsNZ/69OOGfu47Oet76plhqXOVbWN4v5cRL4j1J1ZYOT9t7jjy5txTC Mm6K/IJc0bdiB0hQoX1lzehMgbRp3x59EnpLOB8lQXVTcB22RJLDY22X5F8znY9i mojyf6l13WM/9tABpNiZaYn/IjiGklE8atHBUYEQijTCZPuTtPIFA7CW2fJAJrpO TkntjElr09g1FIbNmuQRwCkLfRsVtwEse5RxX4nnB0sr/MmB5ecjugd+zruR45ez 9MxIlNMOpkzMbmNzq2KXCGlX1tp3pGg= -----END CERTIFICATE-----Generated at Fri Sep 11 07:00:18 2026 by rpki-client