$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7023ec93-11a2-38f6-8617-aa057e6c265c.roa File: 7023ec93-11a2-38f6-8617-aa057e6c265c.roa (raw, json) Hash identifier: CNtQktHbnHPWE4pUQeekzs9WoMFDV/U+veftjOaNp3Y= Subject key identifier: 86:96:9C:29:34:03:8E:4F:F4:7D:05:D0:83:AC:0D:12:5F:D5:75:33 Certificate issuer: /CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Certificate serial: 010D0C9F4328584F1B451FD71B4EAF8CDDD30CC0 Authority key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7023ec93-11a2-38f6-8617-aa057e6c265c.roa Signing time: Tue 08 Sep 2026 12:01:33 +0000 ROA not before: Tue 08 Sep 2026 12:01:33 +0000 ROA not after: Mon 07 Dec 2026 13:01:33 +0000 asID: 53292 IP address blocks: 208.79.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:45:1f:d7:1b:4e:af:8c:dd:d3:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Validity Not Before: Sep 8 12:01:33 2026 GMT Not After : Dec 7 13:01:33 2026 GMT Subject: CN=c24b755a-bd3a-4ccd-8589-8d8718787725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:eb:ce:c8:7e:58:1c:fa:4d:f8:fd:18:18: fe:f0:82:c0:09:30:47:9a:c8:00:7d:cf:11:c1:26: 35:22:34:60:cf:0e:e3:cf:fd:6a:60:c4:25:5f:7c: a6:4c:ad:e6:b7:6c:4a:61:6f:6d:5b:35:8b:4a:85: e1:a7:54:b2:6f:56:1c:aa:c6:e7:5b:67:12:f5:0f: d9:be:44:24:d4:a3:78:76:45:2c:a1:c0:51:25:e0: 30:01:da:78:01:85:79:61:e9:ee:6c:b6:9d:85:b2: ed:62:87:cc:e9:f8:80:7b:c8:37:4f:2c:39:2f:83: a9:fe:d5:e5:ec:f8:81:6b:3f:47:c0:a4:08:04:d7: 71:da:25:c2:2c:62:33:92:36:5e:be:f7:e8:29:a4: 5d:49:8c:19:68:f6:be:64:d8:fa:5a:1d:54:bc:26: b7:4c:b0:39:58:96:65:29:18:1a:08:c7:d2:54:7f: 97:ed:34:bd:86:7e:79:0f:99:21:49:0f:2f:43:f1: b1:f9:2a:30:37:25:ee:6c:3b:ec:1f:0e:20:34:99: d4:ed:98:b1:c3:82:9c:2c:0d:f8:cc:5e:95:45:bc: 05:8e:c7:a4:a9:4e:82:6e:0b:16:78:8f:5f:f6:bb: 81:6d:d8:90:f9:8f:ac:4b:f3:12:9c:b2:fb:f5:7d: 9f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:96:9C:29:34:03:8E:4F:F4:7D:05:D0:83:AC:0D:12:5F:D5:75:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/7023ec93-11a2-38f6-8617-aa057e6c265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.crl X509v3 Authority Key Identifier: keyid:1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer sbgp-ipAddrBlock: critical IPv4: 208.79.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:26:18:c4:48:8e:22:8b:f2:5c:d4:ed:00:7e:86:4b:aa: b0:94:60:d5:51:d4:a9:be:f2:58:7a:9e:79:bf:bc:73:32:8e: 70:2d:1d:2c:91:ba:cc:3e:d0:4a:2a:0f:18:40:39:36:e2:77: 99:d9:83:e8:b9:a4:06:e7:8d:f8:95:3c:2a:21:73:bd:da:89: 68:d0:57:bc:63:9c:ba:ee:0e:6e:5e:eb:ef:d0:90:1a:0c:6c: 50:fe:48:ff:e7:99:fc:99:ea:13:4b:aa:11:de:4f:3c:50:e0: 61:cb:15:96:58:4c:84:6a:8a:7f:05:5a:7a:5d:b0:a3:4f:04: 0a:e8:2b:28:14:28:85:08:8f:b9:d6:4a:c4:95:ac:1c:76:01: ff:9d:aa:fa:d6:35:cb:49:57:92:34:14:c9:1d:2f:be:28:0c: bd:c5:11:9b:20:87:ba:3a:31:b9:c8:1f:89:16:b6:39:e7:f3: 0c:e8:98:53:4f:5c:a4:49:7f:c5:02:37:e0:59:c7:d0:ca:8b: 7e:08:e0:20:fb:23:21:23:4c:c8:6b:be:65:1b:04:33:8e:4d: 5c:a5:7c:3f:be:2c:1e:30:40:6c:d9:ee:15:f4:02:00:e3:19: e7:de:6c:6d:a6:d6:63:28:4b:37:47:ff:25:77:ef:44:c6:88: 94:ba:dd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bRR/XG06vjN3TDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0 YjE4MB4XDTI2MDkwODEyMDEzM1oXDTI2MTIwNzEzMDEzM1owLzEtMCsGA1UEAxMk YzI0Yjc1NWEtYmQzYS00Y2NkLTg1ODktOGQ4NzE4Nzg3NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm3rzsh+WBz6Tfj9GBj+8ILACTBHmsgAfc8R wSY1IjRgzw7jz/1qYMQlX3ymTK3mt2xKYW9tWzWLSoXhp1Syb1YcqsbnW2cS9Q/Z vkQk1KN4dkUsocBRJeAwAdp4AYV5YenubLadhbLtYofM6fiAe8g3Tyw5L4Op/tXl 7PiBaz9HwKQIBNdx2iXCLGIzkjZevvfoKaRdSYwZaPa+ZNj6Wh1UvCa3TLA5WJZl KRgaCMfSVH+X7TS9hn55D5khSQ8vQ/Gx+SowNyXubDvsHw4gNJnU7Zixw4KcLA34 zF6VRbwFjsekqU6CbgsWeI9f9ruBbdiQ+Y+sS/MSnLL79X2f8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaWnCk0A45P9H0F0IOsDRJf1XUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1 OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvNzAyM2VjOTMtMTFhMi0z OGY2LTg2MTctYWEwNTdlNmMyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDBiNTkyMGItMWJhOC00OGE0LWFk ZjctZjZiY2YwODY0YjE4LzQwYjU5MjBiLTFiYTgtNDhhNC1hZGY3LWY2YmNmMDg2 NGIxOC5jcmwwHwYDVR0jBBgwFoAUGm/YzquwXGu4gX/+CvDrI87kOuowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJj ZjA4NjRiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9WJhjESI4ii/Jc1O0AfoZLqrCUYNVR1Km+8lh6nnm/vHMyjnAtHSyR usw+0EoqDxhAOTbid5nZg+i5pAbnjfiVPCohc73aiWjQV7xjnLruDm5e6+/QkBoM bFD+SP/nmfyZ6hNLqhHeTzxQ4GHLFZZYTIRqin8FWnpdsKNPBAroKygUKIUIj7nW SsSVrBx2Af+dqvrWNctJV5I0FMkdL74oDL3FEZsgh7o6MbnIH4kWtjnn8wzomFNP XKRJf8UCN+BZx9DKi34I4CD7IyEjTMhrvmUbBDOOTVylfD++LB4wQGzZ7hX0AgDj GefebG2m1mMoSzdH/yV370TGiJS63Qg= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:31 2026 by rpki-client