$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: xl9d6ByWh/69Zuxj4tgcJ83x49fraVuthPO0/945e04= Subject key identifier: 79:9E:40:31:17:46:90:2A:F9:C1:EF:B7:A0:32:11:3D:43:C7:55:B0 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584D07ACFCD1DB3D65BC76F9D780 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fc:d1:db:3d:65:bc:76:f9:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=48af0221-2b38-4d8f-8274-62999bf25ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:2c:1c:bd:59:4d:14:5c:58:33:74:9f:da: ea:0d:5c:2e:b2:5c:a3:20:cd:d7:dd:d1:7c:f8:a3: ad:93:1c:55:d0:bc:e3:bf:60:e3:74:ce:9d:27:30: 9f:04:b3:48:1e:b6:eb:6f:e5:01:d4:f6:a4:ce:2a: cd:45:bb:2c:24:a5:b3:7c:51:d3:51:5b:e8:42:a1: 3e:8c:85:23:d0:8d:36:4d:8d:d2:2b:42:20:bf:f0: 8f:c4:5f:b5:ee:5a:ad:69:ad:f6:9c:92:0d:8b:0c: 9a:04:2b:7e:c0:48:f1:03:0d:78:6e:16:27:07:4f: 2e:69:c6:d4:89:5a:27:6a:14:85:5f:71:6e:df:00: 40:d9:f0:3a:f4:98:04:47:59:ec:d6:e1:0c:23:1f: 70:7c:eb:88:5e:60:07:54:fc:41:93:e3:c4:9e:28: e9:20:c0:8a:19:2b:89:cc:1a:0d:c7:10:3e:97:4c: 9a:4e:bf:ed:9b:3a:b5:46:eb:d3:31:c8:b0:df:00: c4:0c:00:2d:f7:d6:36:b4:2c:65:19:73:0e:15:9a: d1:04:1f:27:4f:1d:c8:7d:58:a9:60:99:36:2d:28: a6:2f:09:38:51:c6:d9:fd:04:a0:2e:94:e3:92:f3: de:89:f6:3d:19:0e:fd:60:ea:38:da:fa:62:c2:53: ed:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9E:40:31:17:46:90:2A:F9:C1:EF:B7:A0:32:11:3D:43:C7:55:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fd:3e:a5:2b:f0:70:89:b4:e3:66:a1:d1:3c:56:3d:f7:df: 6d:1f:b8:e2:96:63:26:f4:01:69:62:4f:a3:74:4f:80:b3:03: f5:06:cc:13:91:e0:7a:91:7e:f7:40:69:2a:4b:c4:93:c7:a2: ee:ba:b3:a6:55:85:7d:03:c9:b1:3c:da:59:1b:0f:1b:a0:c5: 8c:91:a1:0e:89:7b:90:65:04:ca:c0:74:80:13:c2:1b:cd:f0: 89:11:79:5d:5f:df:8f:b9:7b:92:b3:31:05:eb:96:86:a4:45: 84:c0:d7:4a:09:6c:b5:d5:c3:b8:bf:f9:2c:9b:a4:c4:a4:33: d9:c6:d8:21:7d:c7:03:38:19:81:0a:66:99:f8:03:75:54:6b: cb:ee:71:b7:01:d5:c3:16:81:15:3e:4b:c9:7e:8d:16:82:ad: 05:48:e3:6f:a9:e1:78:4a:1b:45:58:f2:dc:5e:8b:fc:6f:c5: 00:22:42:51:8a:59:68:75:1d:27:67:2a:2b:21:90:a4:5f:6f: 53:cc:92:73:e2:77:2c:a1:db:14:5c:da:7a:fc:65:53:b7:3e: 8e:0f:1e:b6:2b:52:01:51:ca:ff:47:0f:d9:06:c2:df:fc:ce: 18:27:e7:2a:4c:8d:be:51:31:7e:6b:71:2c:1b:01:0c:e5:0b: 08:bc:3c:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPzR2z1lvHb514AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk NDhhZjAyMjEtMmIzOC00ZDhmLTgyNzQtNjI5OTliZjI1YmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwgsHL1ZTRRcWDN0n9rqDVwuslyjIM3X3dF8 +KOtkxxV0Lzjv2DjdM6dJzCfBLNIHrbrb+UB1PakzirNRbssJKWzfFHTUVvoQqE+ jIUj0I02TY3SK0Igv/CPxF+17lqtaa32nJINiwyaBCt+wEjxAw14bhYnB08uacbU iVonahSFX3Fu3wBA2fA69JgER1ns1uEMIx9wfOuIXmAHVPxBk+PEnijpIMCKGSuJ zBoNxxA+l0yaTr/tmzq1RuvTMciw3wDEDAAt99Y2tCxlGXMOFZrRBB8nTx3IfVip YJk2LSimLwk4UcbZ/QSgLpTjkvPeifY9GQ79YOo42vpiwlPtGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmeQDEXRpAq+cHvt6AyET1Dx1WwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP9PqUr8HCJtONmodE8Vj33320fuOKWYyb0AWliT6N0T4CzA/UGzBOR 4HqRfvdAaSpLxJPHou66s6ZVhX0DybE82lkbDxugxYyRoQ6Je5BlBMrAdIATwhvN 8IkReV1f34+5e5KzMQXrloakRYTA10oJbLXVw7i/+SybpMSkM9nG2CF9xwM4GYEK Zpn4A3VUa8vucbcB1cMWgRU+S8l+jRaCrQVI42+p4XhKG0VY8txei/xvxQAiQlGK WWh1HSdnKishkKRfb1PMknPidyyh2xRc2nr8ZVO3Po4PHrYrUgFRyv9HD9kGwt/8 zhgn5ypMjb5RMX5rcSwbAQzlCwi8PBA= -----END CERTIFICATE-----Generated at Wed Mar 4 19:20:01 2026 by rpki-client