$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa File: bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa (raw, json) Hash identifier: TomF/QTxL+RuF2kvqE/fQLd3q7aH82JW7uSKKk2FSVM= Subject key identifier: C3:4A:A3:9B:CC:74:E4:FA:53:9A:19:44:DA:6B:EC:E0:3B:6A:03:BF Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584EC63C6EE1FE467C8FA0B3B980 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 15830 IP address blocks: 144.250.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:6e:e1:fe:46:7c:8f:a0:b3:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=c6c96b73-bde4-418c-8834-e505bffee27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:af:21:88:79:8d:37:1d:a7:16:60:16:59:f9: ad:85:a3:8a:1f:1e:b3:e6:51:71:55:3f:ae:11:c0: 8f:68:a1:c8:d5:24:14:b7:06:8a:8c:07:40:da:46: 89:4d:49:86:4b:40:a8:86:22:c1:d2:68:9b:2c:27: 44:76:91:db:fb:29:9c:95:5f:6e:18:1e:2e:46:d9: 68:bf:e2:98:3d:6c:e2:d5:69:4e:00:b4:e0:4d:09: 11:b8:7b:6f:be:ee:35:56:79:5b:9c:08:fe:5f:ba: d9:2f:99:f0:a1:5d:45:7d:8b:67:95:a0:2b:4e:42: a2:27:2c:40:ec:97:77:37:7c:d3:fd:20:b3:d7:52: 79:74:91:ca:4b:1e:08:55:d8:71:7c:05:ff:9e:72: 6d:0b:2b:a4:c0:ca:94:53:e6:a6:b8:eb:c5:5d:7c: 39:d8:d9:29:f0:5c:3a:14:72:28:f9:b9:b2:a6:eb: d0:e2:e5:d6:33:45:fa:15:5c:ec:77:49:8a:6d:42: 17:81:22:1f:4f:67:2b:f5:30:5b:1b:e0:82:7b:b9: dc:eb:36:e2:26:56:c3:a9:35:eb:bb:e2:20:1f:18: 7c:fa:f5:71:0e:8c:79:7e:d8:fe:8b:b4:91:22:de: 01:d3:32:a1:0e:8b:d2:ae:3e:1c:cb:65:41:eb:ee: 1a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:A3:9B:CC:74:E4:FA:53:9A:19:44:DA:6B:EC:E0:3B:6A:03:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bb53e4fb-0a29-366f-8e95-4b52bfe1ae1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:48:01:4e:c3:66:ee:28:0e:1e:a3:c5:49:d5:a8:54:ef:97: ab:16:5d:fc:bf:07:9e:95:7d:6c:74:dd:7f:d8:c0:b4:9a:72: 85:f2:2d:5b:45:f5:43:0e:cb:ff:4b:97:bd:40:17:6a:5f:9e: 3c:a3:cb:e0:3e:5e:e8:7e:64:0e:7d:f4:ff:a5:6f:5c:8a:00: 68:1f:dc:5a:7a:ad:ea:1d:62:95:b5:90:88:ad:ab:38:b7:3b: 24:f4:1c:6f:74:1f:e6:b3:3c:0e:e2:20:fe:19:fd:10:23:17: 1c:76:37:59:0b:b0:bc:7e:6e:7e:e8:d8:3e:ee:fa:06:5b:49: e8:f3:f0:02:1e:83:6e:b8:f9:9b:3c:9a:22:f5:33:61:d8:00: de:7d:19:af:b2:64:09:93:0b:0f:84:a7:30:1b:38:9d:0f:eb: 51:9e:8a:22:77:af:9c:b5:fc:a5:f4:8f:59:d1:05:02:c1:5a: 55:8c:c8:be:a2:6f:a4:c0:d2:0c:5b:6f:24:76:dd:b4:7f:8d: 3a:25:49:2c:7e:13:9c:5e:1e:48:6a:51:9d:91:b3:93:84:cd: 5f:21:3d:5d:49:82:c2:3e:4a:1f:03:e8:eb:cd:ce:ab:c1:15: 40:ec:7b:2a:28:a4:df:d9:5a:b4:2c:35:e2:78:22:38:c1:93: 1e:67:b7:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPG7h/kZ8j6CzuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk YzZjOTZiNzMtYmRlNC00MThjLTg4MzQtZTUwNWJmZmVlMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg68hiHmNNx2nFmAWWfmthaOKHx6z5lFxVT+u EcCPaKHI1SQUtwaKjAdA2kaJTUmGS0CohiLB0mibLCdEdpHb+ymclV9uGB4uRtlo v+KYPWzi1WlOALTgTQkRuHtvvu41VnlbnAj+X7rZL5nwoV1FfYtnlaArTkKiJyxA 7Jd3N3zT/SCz11J5dJHKSx4IVdhxfAX/nnJtCyukwMqUU+amuOvFXXw52Nkp8Fw6 FHIo+bmypuvQ4uXWM0X6FVzsd0mKbUIXgSIfT2cr9TBbG+CCe7nc6zbiJlbDqTXr u+IgHxh8+vVxDox5ftj+i7SRIt4B0zKhDovSrj4cy2VB6+4ayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNKo5vMdOT6U5oZRNpr7OA7agO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvYmI1M2U0ZmItMGEyOS0z NjZmLThlOTUtNGI1MmJmZTFhZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkPrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5IAU7DZu4oDh6jxUnVqFTvl6sWXfy/B56VfWx03X/YwLSacoXyLVtF 9UMOy/9Ll71AF2pfnjyjy+A+Xuh+ZA599P+lb1yKAGgf3Fp6reodYpW1kIitqzi3 OyT0HG90H+azPA7iIP4Z/RAjFxx2N1kLsLx+bn7o2D7u+gZbSejz8AIeg264+Zs8 miL1M2HYAN59Ga+yZAmTCw+EpzAbOJ0P61GeiiJ3r5y1/KX0j1nRBQLBWlWMyL6i b6TA0gxbbyR23bR/jTolSSx+E5xeHkhqUZ2Rs5OEzV8hPV1JgsI+Sh8D6OvNzqvB FUDseyoopN/ZWrQsNeJ4IjjBkx5ntxU= -----END CERTIFICATE-----Generated at Mon Aug 31 10:50:56 2026 by rpki-client