$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/ea5a08c2-c1fa-3933-8356-ae80ad49b38e.roa File: ea5a08c2-c1fa-3933-8356-ae80ad49b38e.roa (raw, json) Hash identifier: U7dg7Kg2XlLi+kRHpHnaG9PTNWxXgdPcPN59uR5c4oQ= Subject key identifier: 48:64:A4:FA:B7:B5:93:92:1E:E1:CC:8A:A7:85:44:93:57:09:C3:52 Certificate issuer: /CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Certificate serial: 010D0C9F4328584F20FAA4BC2E517281E92DB380 Authority key identifier: 40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/ea5a08c2-c1fa-3933-8356-ae80ad49b38e.roa Signing time: Thu 10 Sep 2026 13:06:20 +0000 ROA not before: Thu 10 Sep 2026 13:06:20 +0000 ROA not after: Wed 09 Dec 2026 14:06:20 +0000 asID: 11308 IP address blocks: 144.250.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:fa:a4:bc:2e:51:72:81:e9:2d:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68c4387-dc13-43c8-bc01-5c59e3d0e557 Validity Not Before: Sep 10 13:06:20 2026 GMT Not After : Dec 9 14:06:20 2026 GMT Subject: CN=34fdcd96-eca0-4236-b022-e8374a4d24e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:ea:6b:e3:bd:e7:97:d7:d0:ff:fb:a2:b4: a1:89:c5:05:b0:81:d2:1b:71:16:df:f3:c8:59:c0: 0e:d4:84:ab:26:d0:fb:3c:16:1f:9d:d9:85:93:f7: 31:ea:4c:f2:83:2d:7a:67:b8:c9:e2:e7:e4:91:5b: 65:dc:b7:d5:05:4b:ac:a5:5a:3a:08:7c:ed:4c:f0: 1c:7a:9d:3c:2b:5a:62:06:61:7b:c8:e2:85:9e:bb: b9:74:8f:14:3a:4d:51:33:1e:20:b6:0e:1c:d7:97: 50:0b:d2:ec:f5:15:42:71:47:f2:75:36:a1:c3:a0: d9:69:a4:64:ba:fb:4a:4d:c6:78:3e:0e:61:e7:e9: 81:e8:b2:b3:d3:bc:1c:71:02:43:eb:da:22:97:11: a1:d5:ce:46:f7:e6:3e:45:eb:78:16:44:3f:b5:af: c9:8a:21:82:9b:6a:9b:89:f0:27:ba:1b:95:46:a1: 17:35:67:9d:4e:b7:3f:51:73:48:f1:50:c1:ca:11: ef:73:54:cf:f0:3c:e3:47:74:8f:f7:b0:2b:ec:98: 9f:50:38:91:02:71:ee:52:17:70:ef:75:82:79:90: 8b:0f:8e:99:d8:5c:e1:11:1c:21:fb:0c:bc:6b:e6: 15:48:c6:1b:9e:d9:6d:fd:86:a6:cb:cf:b2:a9:42: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:64:A4:FA:B7:B5:93:92:1E:E1:CC:8A:A7:85:44:93:57:09:C3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/ea5a08c2-c1fa-3933-8356-ae80ad49b38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557/f68c4387-dc13-43c8-bc01-5c59e3d0e557.crl X509v3 Authority Key Identifier: keyid:40:40:F4:8A:CE:80:38:0E:25:28:BB:5A:8F:24:43:B2:84:6A:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f68c4387-dc13-43c8-bc01-5c59e3d0e557.cer sbgp-ipAddrBlock: critical IPv4: 144.250.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:71:e0:4d:9e:c2:60:da:95:1f:5d:ee:12:fb:cf:94:94: be:6a:eb:30:fa:01:97:cb:c7:d5:ff:c2:8d:8b:42:df:a3:33: 4b:c4:6b:7f:ac:c3:34:9a:17:46:27:6f:f1:4d:ed:57:09:7c: ed:01:be:c0:ca:b2:bf:27:27:c6:b0:08:90:af:53:7f:22:ba: 83:0b:ba:28:00:f2:28:7e:4e:5b:4e:d7:b0:87:ff:f6:95:78: 9b:3d:98:3a:fb:c5:4a:ce:fc:a3:ea:9b:e9:29:a3:cd:3e:00: 1a:0e:d3:52:c9:1d:cd:6c:14:7f:52:23:d3:78:30:ee:c3:73: bf:7c:3c:c0:04:a2:f0:03:3a:31:8e:89:08:dd:bf:7c:81:7b: 53:84:10:8c:5d:50:e4:d8:ca:8c:83:11:4b:39:a6:35:c2:28: c7:f7:4b:fa:a4:13:1b:68:1a:69:34:58:7e:a4:a6:a2:d7:f4: dd:9f:bb:1b:19:5e:57:12:94:bd:92:6a:91:5b:76:8b:fe:dd: 71:7a:e0:70:b8:2f:88:c6:08:f2:e7:88:4b:4b:d6:fd:0e:69: 77:fd:1f:c6:19:46:0c:d0:8d:86:4c:1a:3a:55:c7:e8:25:4d: 7e:82:97:8e:0f:46:26:24:15:1d:50:0e:f8:3e:91:5d:00:64: d8:32:58:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g+qS8LlFygekts4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY4YzQzODctZGMxMy00M2M4LWJjMDEtNWM1OWUzZDBl NTU3MB4XDTI2MDkxMDEzMDYyMFoXDTI2MTIwOTE0MDYyMFowLzEtMCsGA1UEAxMk MzRmZGNkOTYtZWNhMC00MjM2LWIwMjItZTgzNzRhNGQyNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9Hqa+O955fX0P/7orShicUFsIHSG3EW3/PI WcAO1ISrJtD7PBYfndmFk/cx6kzygy16Z7jJ4ufkkVtl3LfVBUuspVo6CHztTPAc ep08K1piBmF7yOKFnru5dI8UOk1RMx4gtg4c15dQC9Ls9RVCcUfydTahw6DZaaRk uvtKTcZ4Pg5h5+mB6LKz07wccQJD69oilxGh1c5G9+Y+Ret4FkQ/ta/JiiGCm2qb ifAnuhuVRqEXNWedTrc/UXNI8VDByhHvc1TP8DzjR3SP97Ar7JifUDiRAnHuUhdw 73WCeZCLD46Z2FzhERwh+wy8a+YVSMYbntlt/Yamy8+yqUJoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhkpPq3tZOSHuHMiqeFRJNXCcNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mNjhj NDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5ZTNkMGU1NTcvZWE1YTA4YzItYzFmYS0z OTMzLTgzNTYtYWU4MGFkNDliMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjY4YzQzODctZGMxMy00M2M4LWJj MDEtNWM1OWUzZDBlNTU3L2Y2OGM0Mzg3LWRjMTMtNDNjOC1iYzAxLTVjNTllM2Qw ZTU1Ny5jcmwwHwYDVR0jBBgwFoAUQED0is6AOA4lKLtajyRDsoRqkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mNjhjNDM4Ny1kYzEzLTQzYzgtYmMwMS01YzU5 ZTNkMGU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkPoeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXMceBNnsJg2pUfXe4S+8+UlL5q6zD6AZfLx9X/wo2LQt+jM0vEa3+s wzSaF0Ynb/FN7VcJfO0BvsDKsr8nJ8awCJCvU38iuoMLuigA8ih+TltO17CH//aV eJs9mDr7xUrO/KPqm+kpo80+ABoO01LJHc1sFH9SI9N4MO7Dc798PMAEovADOjGO iQjdv3yBe1OEEIxdUOTYyoyDEUs5pjXCKMf3S/qkExtoGmk0WH6kpqLX9N2fuxsZ XlcSlL2SapFbdov+3XF64HC4L4jGCPLniEtL1v0OaXf9H8YZRgzQjYZMGjpVx+gl TX6Cl44PRiYkFR1QDvg+kV0AZNgyWBk= -----END CERTIFICATE-----Generated at Tue Sep 29 17:33:27 2026 by rpki-client