$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa File: bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa (raw, json) Hash identifier: F5q/lteP1KMmCALKOBSndIFfLsfIa+uFU952/Eqt2F0= Subject key identifier: AC:09:BD:D7:A7:36:48:D3:05:92:BF:53:4B:33:9E:2F:3D:19:D3:C5 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F682815813C5F1E2E19C1DB00 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 15830 IP address blocks: 144.250.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:15:81:3c:5f:1e:2e:19:c1:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=c4e5e01f-9a50-4394-9a28-ebb781748512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:aa:ac:15:5c:27:ee:9f:ec:91:08:59:4a: 76:45:77:94:ff:4a:80:e3:85:3b:15:56:27:55:8d: 21:19:05:fd:20:6d:a1:45:ad:e8:e8:a6:c4:98:2c: 28:78:72:a4:72:ba:c2:a3:d7:66:5b:92:35:d1:0d: 6b:9b:75:fa:db:0d:df:40:62:26:5a:81:e4:10:8a: 11:9f:e5:f0:34:0c:95:bf:f7:07:11:64:00:25:6f: 43:4c:2e:54:ff:47:0e:d9:96:6b:52:1a:47:b6:2a: c9:1b:a4:92:81:53:0e:d5:04:84:e4:90:8c:46:5f: 72:5a:42:8b:62:15:fc:92:60:7b:c1:61:e3:66:4e: f2:9e:29:55:18:42:6f:09:d7:f5:c2:89:09:c3:e5: 5e:15:25:ce:4d:f9:e7:46:9c:a3:3f:4e:b0:88:a3: de:ac:aa:ac:00:9c:43:4d:3a:d8:b0:b4:94:c9:1d: 6e:b1:98:27:45:ae:b5:80:ea:57:b2:22:6d:0e:e1: 5a:d1:2d:27:9c:e2:33:a7:30:78:75:6a:6b:2e:22: c9:e5:77:7c:f2:59:15:d3:f8:9d:7e:4a:e4:03:7e: 06:59:1d:2c:07:06:e9:b4:15:13:4c:1e:82:05:61: ca:ac:80:24:c2:c4:6e:6d:49:7c:42:09:c8:44:44: 3a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:09:BD:D7:A7:36:48:D3:05:92:BF:53:4B:33:9E:2F:3D:19:D3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:79:7f:c3:f1:2f:27:c2:1f:8e:4e:22:94:6d:b3:e2:17: ee:16:3b:1f:91:5e:91:10:8d:9c:82:6f:0b:dc:81:62:12:a2: 0f:d0:52:7f:ff:1e:02:f4:be:a3:4d:23:8d:8c:d5:79:96:60: 43:0d:6a:97:57:f8:6e:44:b0:d1:0f:b9:0a:d4:5d:d7:3d:e2: ce:b1:90:a1:b7:e1:c8:d2:27:be:4f:bf:23:14:d2:56:98:a5: 5c:ba:db:fb:a2:f6:f6:89:9b:bf:65:6a:ad:08:5d:3a:8b:64: 03:4b:bb:61:de:de:d6:d8:f4:fb:fe:93:a0:8a:56:1c:ac:35: 8c:6f:23:55:72:72:f0:0b:1b:dc:ef:2b:43:69:ee:0a:ac:f1: f0:df:e3:2a:d6:39:e6:e2:aa:ff:f5:8c:a6:01:3e:55:c2:16: 0f:b1:dd:9f:c6:19:19:27:73:40:1a:3a:cf:3b:90:f4:f5:e5: 81:94:2c:e1:ec:84:f6:a4:2a:45:d2:22:de:e4:95:7a:7b:9c: 41:39:92:b5:41:29:89:ec:64:50:99:60:27:32:8e:29:b0:71: 5f:47:39:af:73:6b:20:4a:7c:1f:ea:d1:8a:32:f8:d3:dd:35: 88:8d:c6:c2:b1:cb:01:20:13:aa:3f:39:cc:58:b4:26:c8:a9: 0d:42:af:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKBWBPF8eLhnB2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk YzRlNWUwMWYtOWE1MC00Mzk0LTlhMjgtZWJiNzgxNzQ4NTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOiqrBVcJ+6f7JEIWUp2RXeU/0qA44U7FVYn VY0hGQX9IG2hRa3o6KbEmCwoeHKkcrrCo9dmW5I10Q1rm3X62w3fQGImWoHkEIoR n+XwNAyVv/cHEWQAJW9DTC5U/0cO2ZZrUhpHtirJG6SSgVMO1QSE5JCMRl9yWkKL YhX8kmB7wWHjZk7ynilVGEJvCdf1wokJw+VeFSXOTfnnRpyjP06wiKPerKqsAJxD TTrYsLSUyR1usZgnRa61gOpXsiJtDuFa0S0nnOIzpzB4dWprLiLJ5Xd88lkV0/id fkrkA34GWR0sBwbptBUTTB6CBWHKrIAkwsRubUl8QgnIREQ6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwJvdenNkjTBZK/U0szni89GdPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvYmI1M2U0ZmItMGEyOS0z NjZmLThlOTUtNGI1MmJmZTFhZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1DeX/D8S8nwh+OTiKUbbPiF+4WOx+RXpEQjZyCbwvcgWISog/QUn// HgL0vqNNI42M1XmWYEMNapdX+G5EsNEPuQrUXdc94s6xkKG34cjSJ75PvyMU0laY pVy62/ui9vaJm79laq0IXTqLZANLu2He3tbY9Pv+k6CKVhysNYxvI1VycvALG9zv K0Np7gqs8fDf4yrWOebiqv/1jKYBPlXCFg+x3Z/GGRknc0AaOs87kPT15YGULOHs hPakKkXSIt7klXp7nEE5krVBKYnsZFCZYCcyjimwcV9HOa9zayBKfB/q0Yoy+NPd NYiNxsKxywEgE6o/OcxYtCbIqQ1Cr6s= -----END CERTIFICATE-----Generated at Sat Oct 17 15:24:46 2026 by rpki-client