$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/df5100ec-effb-3ae8-8a55-4c5f0356548f.roa File: df5100ec-effb-3ae8-8a55-4c5f0356548f.roa (raw, json) Hash identifier: S7lsAJK8+CvH7rk0YelFy94EtXInzIwjng9Wfs7R9XI= Subject key identifier: 10:61:B4:BE:43:8B:4E:8E:7D:4A:A7:B8:F3:13:A4:85:18:43:DA:D6 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F5BD92BD47E5299A32F38E640 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/df5100ec-effb-3ae8-8a55-4c5f0356548f.roa Signing time: Thu 01 Oct 2026 15:11:35 +0000 ROA not before: Thu 01 Oct 2026 15:11:35 +0000 ROA not after: Wed 30 Dec 2026 16:11:35 +0000 asID: 701 IP address blocks: 144.250.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:d9:2b:d4:7e:52:99:a3:2f:38:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Oct 1 15:11:35 2026 GMT Not After : Dec 30 16:11:35 2026 GMT Subject: CN=3f0876ca-3fce-488c-944d-15eeb6fbfc21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:eb:9f:cd:e0:a9:7d:a7:79:8e:10:b0:98: 49:88:ee:19:21:2c:39:5f:94:1a:b4:d4:72:ff:d5: 10:ce:41:3e:1f:2a:c0:85:b4:56:eb:9e:1a:e6:fc: 51:4b:02:e4:1f:8b:f3:23:43:fd:28:45:48:99:97: d9:41:74:7f:6a:db:60:14:f0:11:c2:99:94:9c:f1: 6c:d0:6d:74:c7:ba:b5:66:a5:7d:56:3a:37:4b:a5: 7a:87:98:44:cb:2e:39:a1:4b:81:17:5f:bc:b1:82: b3:08:13:a0:6a:9b:12:09:6b:64:4b:28:4c:9d:ab: 7e:c2:a5:36:e7:b1:bc:5b:96:fb:65:91:51:62:58: db:9f:9a:65:6d:de:5d:dd:9c:84:d3:0e:7e:ef:28: 17:8e:a3:5e:c1:a3:1b:08:ef:26:c8:f1:7e:15:8d: cd:41:f3:66:ce:bb:26:7e:f6:df:d9:bb:dd:b4:ec: 0a:24:5c:70:f9:0e:35:b6:c9:92:fa:1a:63:c2:3c: da:4f:2c:a4:69:07:d3:0e:92:28:2b:75:34:3d:84: 84:47:fe:f4:cd:b6:cb:c5:25:c6:e7:21:ab:da:cd: f6:84:96:d8:f1:1e:a8:c7:75:9a:ec:74:43:a9:16: 06:d1:51:23:b9:5c:f7:10:97:69:f9:9e:99:e4:61: bb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:B4:BE:43:8B:4E:8E:7D:4A:A7:B8:F3:13:A4:85:18:43:DA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/df5100ec-effb-3ae8-8a55-4c5f0356548f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0f:01:21:d2:11:2a:10:d0:94:99:7a:11:a7:95:74:0a:14: 4e:d9:91:a7:8b:08:d7:b2:39:31:27:d0:e1:54:4c:93:e6:dc: 6e:85:1c:32:50:ab:af:cc:29:b7:41:ba:8f:62:d9:67:23:e5: 63:28:af:8c:9b:e5:06:9f:12:fb:3a:12:78:a7:0c:69:40:49: ec:fd:5d:d9:48:3b:f3:fe:ec:e5:6e:25:89:74:f2:6f:cc:54: ec:b2:5d:67:a9:98:1d:78:e4:e6:6f:38:77:bc:e6:f1:0f:93: 4a:89:1f:80:40:a8:30:24:a0:1b:0a:b4:a0:85:c1:2e:9f:89: 1e:a2:23:73:ca:fe:c6:01:4c:dd:6e:5d:67:fe:92:8d:46:14: 89:03:b0:a5:3c:9a:fc:20:7f:48:a1:16:41:0c:c9:0e:69:40: 70:4a:78:16:50:ae:53:98:23:03:12:16:64:d6:15:a7:c3:ac: b8:54:4d:bc:35:2b:d5:ae:8f:2a:29:7a:6c:63:b1:36:df:06: 43:38:94:54:0d:3a:a2:d7:36:d6:55:67:ab:2c:95:96:a9:77: e5:56:3a:27:58:89:81:32:e2:0b:ee:4b:ef:86:98:ec:a9:02: 2c:6c:7c:09:13:45:04:e4:ae:f6:d9:40:fe:7e:0b:6a:71:4f: b2:05:79:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9b2SvUflKZoy845kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MTAwMTE1MTEzNVoXDTI2MTIzMDE2MTEzNVowLzEtMCsGA1UEAxMk M2YwODc2Y2EtM2ZjZS00ODhjLTk0NGQtMTVlZWI2ZmJmYzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHPrn83gqX2neY4QsJhJiO4ZISw5X5QatNRy /9UQzkE+HyrAhbRW654a5vxRSwLkH4vzI0P9KEVImZfZQXR/attgFPARwpmUnPFs 0G10x7q1ZqV9Vjo3S6V6h5hEyy45oUuBF1+8sYKzCBOgapsSCWtkSyhMnat+wqU2 57G8W5b7ZZFRYljbn5plbd5d3ZyE0w5+7ygXjqNewaMbCO8myPF+FY3NQfNmzrsm fvbf2bvdtOwKJFxw+Q41tsmS+hpjwjzaTyykaQfTDpIoK3U0PYSER/70zbbLxSXG 5yGr2s32hJbY8R6ox3Wa7HRDqRYG0VEjuVz3EJdp+Z6Z5GG7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBhtL5Di06OfUqnuPMTpIUYQ9rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvZGY1MTAwZWMtZWZmYi0z YWU4LThhNTUtNGM1ZjAzNTY1NDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkPqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIPASHSESoQ0JSZehGnlXQKFE7ZkaeLCNeyOTEn0OFUTJPm3G6FHDJQ q6/MKbdBuo9i2Wcj5WMor4yb5QafEvs6EninDGlASez9XdlIO/P+7OVuJYl08m/M VOyyXWepmB145OZvOHe85vEPk0qJH4BAqDAkoBsKtKCFwS6fiR6iI3PK/sYBTN1u XWf+ko1GFIkDsKU8mvwgf0ihFkEMyQ5pQHBKeBZQrlOYIwMSFmTWFafDrLhUTbw1 K9WujyopemxjsTbfBkM4lFQNOqLXNtZVZ6sslZapd+VWOidYiYEy4gvuS++GmOyp AixsfAkTRQTkrvbZQP5+C2pxT7IFeV0= -----END CERTIFICATE-----Generated at Sat Oct 3 22:33:10 2026 by rpki-client