$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bfe9e027-d05e-34d0-8f61-00002c1c2dde.roa File: bfe9e027-d05e-34d0-8f61-00002c1c2dde.roa (raw, json) Hash identifier: hppob3jDYcuBDQLJrRTpqSEERZNb1zobGIyXzV+ZmTE= Subject key identifier: 42:9F:BF:1A:EF:54:C3:2D:BF:D0:D0:62:D7:15:51:6B:D9:61:55:8A Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F20FAEF354FB675A77F530880 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bfe9e027-d05e-34d0-8f61-00002c1c2dde.roa Signing time: Thu 10 Sep 2026 13:06:55 +0000 ROA not before: Thu 10 Sep 2026 13:06:55 +0000 ROA not after: Wed 09 Dec 2026 14:06:55 +0000 asID: 7046 IP address blocks: 144.250.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:fa:ef:35:4f:b6:75:a7:7f:53:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 10 13:06:55 2026 GMT Not After : Dec 9 14:06:55 2026 GMT Subject: CN=9802ddd1-31e8-428d-8eb4-7d71ecc630d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:30:3a:11:c4:8a:48:24:83:6d:fe:e2:16:b4: 32:26:33:c4:00:5f:c4:df:76:41:22:c8:8a:b7:e4: fe:ed:c3:6a:50:87:b6:b4:3e:9f:47:93:2f:91:fc: 90:1a:37:08:a6:fd:3c:c1:df:2d:41:62:9c:05:9c: 81:dc:98:38:8d:cf:56:28:ba:69:e2:77:80:30:bf: d8:36:4f:3a:b0:80:10:84:28:5f:86:7f:11:af:0c: 23:a6:ff:4c:26:2f:12:cc:dc:a4:e9:3d:9c:14:d0: 0c:dd:a0:40:d3:79:18:9f:fd:3f:ca:45:8e:ed:e0: e6:87:e9:01:70:65:62:22:15:20:73:9b:42:21:ed: 93:2f:ac:eb:46:16:49:a4:01:f0:b9:6d:94:b1:25: 9e:3f:ad:1c:05:d5:ee:e8:26:33:91:df:2b:55:df: c8:47:01:f3:cf:f6:ca:17:f0:d5:f5:56:fa:1d:23: 19:7c:eb:cc:ce:be:f9:2b:aa:6b:a5:cd:b2:1d:e9: 4b:e1:75:73:9a:b0:ef:ee:cf:c4:ef:b7:3d:4a:7b: 8f:15:0c:ed:a9:08:9e:6a:93:49:00:7f:95:e3:c6: ec:94:b7:01:d3:ec:b8:56:57:de:11:29:ba:26:3c: 14:bb:d1:df:7c:41:27:08:83:43:e7:e2:82:b2:0b: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9F:BF:1A:EF:54:C3:2D:BF:D0:D0:62:D7:15:51:6B:D9:61:55:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/bfe9e027-d05e-34d0-8f61-00002c1c2dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:23:8d:ee:43:18:a7:ef:65:12:4b:79:aa:42:23:c6:29:07: 2b:37:bd:a6:81:de:61:62:ca:9a:d4:2b:78:bf:c4:8b:38:92: 90:fa:be:1c:e8:65:6f:b6:58:84:0c:69:49:4c:5c:bd:2c:2e: d3:65:78:cc:f5:63:ce:0d:ed:77:c5:2e:54:a4:9f:e0:62:14: 52:d8:af:c0:f1:e5:1e:f5:ea:9c:f6:e3:16:bb:ee:60:c9:89: 1e:03:a9:de:a4:22:20:b6:2d:f0:e4:c1:53:81:9e:78:11:d2: bb:88:de:54:6b:82:b0:20:7d:41:60:e5:61:9e:5a:85:6c:b7: 26:e7:14:9f:0f:ae:84:6f:c8:13:d9:a8:91:8b:fc:87:5d:86: b7:1e:f9:25:5d:f5:23:83:ed:8f:40:ba:f1:01:c4:0e:0e:ed: d6:96:30:43:6a:26:2e:26:49:b5:10:67:2f:45:ac:9e:f6:0d: 87:82:fd:37:1c:8c:e3:ae:38:b2:e9:01:35:3d:1a:75:5b:ca: ab:8f:11:53:f1:83:44:96:d7:f3:5b:b3:eb:d7:da:9b:22:7e: 3a:7a:af:12:e8:9e:a1:a0:f0:ff:c9:10:4b:c9:c6:7a:95:8f: 92:cc:a6:a2:a9:7c:4f:77:f6:26:63:cf:a2:fe:ac:b0:64:ae: 28:b4:43:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g+u81T7Z1p39TCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkxMDEzMDY1NVoXDTI2MTIwOTE0MDY1NVowLzEtMCsGA1UEAxMk OTgwMmRkZDEtMzFlOC00MjhkLThlYjQtN2Q3MWVjYzYzMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjA6EcSKSCSDbf7iFrQyJjPEAF/E33ZBIsiK t+T+7cNqUIe2tD6fR5MvkfyQGjcIpv08wd8tQWKcBZyB3Jg4jc9WKLpp4neAML/Y Nk86sIAQhChfhn8Rrwwjpv9MJi8SzNyk6T2cFNAM3aBA03kYn/0/ykWO7eDmh+kB cGViIhUgc5tCIe2TL6zrRhZJpAHwuW2UsSWeP60cBdXu6CYzkd8rVd/IRwHzz/bK F/DV9Vb6HSMZfOvMzr75K6prpc2yHelL4XVzmrDv7s/E77c9SnuPFQztqQieapNJ AH+V48bslLcB0+y4VlfeESm6JjwUu9HffEEnCIND5+KCsguBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKfvxrvVMMtv9DQYtcVUWvZYVWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvYmZlOWUwMjctZDA1ZS0z NGQwLThmNjEtMDAwMDJjMWMyZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkPoeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAjje5DGKfvZRJLeapCI8YpBys3vaaB3mFiyprUK3i/xIs4kpD6vhzo ZW+2WIQMaUlMXL0sLtNleMz1Y84N7XfFLlSkn+BiFFLYr8Dx5R716pz24xa77mDJ iR4Dqd6kIiC2LfDkwVOBnngR0ruI3lRrgrAgfUFg5WGeWoVstybnFJ8ProRvyBPZ qJGL/Iddhrce+SVd9SOD7Y9AuvEBxA4O7daWMENqJi4mSbUQZy9FrJ72DYeC/Tcc jOOuOLLpATU9GnVbyquPEVPxg0SW1/Nbs+vX2psifjp6rxLonqGg8P/JEEvJxnqV j5LMpqKpfE939iZjz6L+rLBkrii0Q84= -----END CERTIFICATE-----Generated at Fri Sep 11 07:00:18 2026 by rpki-client