$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: hMA3fXJNTSeLA9Ngz436cdvW//wxiR0Vw7sJ4nD2208= Subject key identifier: 6E:21:ED:EA:A8:85:7D:3C:5B:44:AB:B6:1E:A2:68:5D:C7:1A:55:A7 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584DE84B417A6202F386F4E64240 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:41:7a:62:02:f3:86:f4:e6:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=e3649e86-43b9-4b7c-bd76-486f09b6c317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:59:f2:9c:a8:01:a2:c5:5a:be:f7:42:12: 3e:6b:00:ec:91:1c:81:98:7f:cc:2b:57:fb:5b:ed: 59:33:e8:32:30:10:3f:23:c6:81:e9:94:4b:1c:ff: 1b:85:f2:5e:95:62:b9:44:f3:e3:b8:50:9c:f8:c4: 6f:52:66:6e:84:47:e9:1c:61:8a:be:9b:e3:30:4f: d7:c9:3f:b4:46:35:83:23:68:09:42:5f:61:c8:98: 89:18:f1:d6:35:35:92:55:23:35:1e:1d:0a:f8:51: fc:d2:27:f8:91:6b:2a:9f:ae:bd:7b:11:90:b2:75: a6:53:a1:5c:8b:69:cd:cc:69:8d:f0:39:d2:b4:e7: b9:43:1a:08:0c:6e:67:95:12:17:8d:44:6d:7a:da: 71:97:b1:73:30:e2:f3:e3:ff:76:c7:60:26:0a:4d: b1:c4:01:05:b5:e0:25:5c:fc:6c:58:b0:0c:33:aa: 21:1e:34:c1:60:77:c5:c2:08:5a:a9:a4:8f:50:31: 68:67:74:0b:76:b9:4d:40:ec:35:f3:cc:23:04:49: 49:f2:cc:cd:11:d1:a1:5f:7b:44:08:36:90:03:16: 4b:22:5d:38:80:1c:aa:49:7b:66:09:5c:f1:ed:70: 97:28:34:89:fd:70:4b:83:82:26:7b:c1:c3:a9:e8: e3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:ED:EA:A8:85:7D:3C:5B:44:AB:B6:1E:A2:68:5D:C7:1A:55:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:25:b1:28:9b:0d:21:4a:28:6b:bb:b0:a2:eb:62:76:97:ba: b6:ad:50:55:af:84:67:5d:ea:d5:64:20:e4:0c:61:d6:89:24: 4c:a4:a6:fc:d0:fc:3e:76:9a:8f:a8:21:35:97:df:d1:1a:5d: 21:eb:05:76:e9:86:15:66:ab:60:fd:ad:e3:e4:c2:a6:4c:2b: e7:98:fe:12:02:f1:0f:fa:d9:bf:8d:75:f1:00:93:7e:8c:ce: 27:97:40:12:c9:66:d1:bd:ca:ca:d7:1c:c0:fe:fa:71:7d:c6: 5c:a3:f0:38:5c:88:28:95:bc:a5:a7:e8:fa:6b:17:bb:0f:0a: e6:e3:22:d6:6d:46:b3:fc:b6:51:29:22:19:95:29:16:4b:ab: 08:e8:c5:91:bb:76:66:93:53:41:53:40:d6:1b:66:9f:c8:c3: d0:f7:fd:b7:a0:b4:e4:09:dd:67:c7:d7:91:53:24:e9:df:19: 2d:96:1d:16:e1:13:e9:5d:39:45:9c:7f:99:e2:fe:45:25:47: fa:87:e7:86:3a:19:76:11:c0:53:78:07:2e:5e:33:9a:ea:05: 76:2f:62:a2:01:1c:36:45:fd:92:87:4b:e9:32:00:86:85:1c: 8c:30:76:7e:b9:82:64:ac:58:af:65:da:1b:18:b0:99:90:37: 24:7a:55:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS0F6YgLzhvTmQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk ZTM2NDllODYtNDNiOS00YjdjLWJkNzYtNDg2ZjA5YjZjMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivRZ8pyoAaLFWr73QhI+awDskRyBmH/MK1f7 W+1ZM+gyMBA/I8aB6ZRLHP8bhfJelWK5RPPjuFCc+MRvUmZuhEfpHGGKvpvjME/X yT+0RjWDI2gJQl9hyJiJGPHWNTWSVSM1Hh0K+FH80if4kWsqn669exGQsnWmU6Fc i2nNzGmN8DnStOe5QxoIDG5nlRIXjURtetpxl7FzMOLz4/92x2AmCk2xxAEFteAl XPxsWLAMM6ohHjTBYHfFwghaqaSPUDFoZ3QLdrlNQOw188wjBElJ8szNEdGhX3tE CDaQAxZLIl04gByqSXtmCVzx7XCXKDSJ/XBLg4Ime8HDqejj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4h7eqohX08W0Srth6iaF3HGlWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMlsSibDSFKKGu7sKLrYnaXuratUFWvhGdd6tVkIOQMYdaJJEykpvzQ /D52mo+oITWX39EaXSHrBXbphhVmq2D9rePkwqZMK+eY/hIC8Q/62b+NdfEAk36M zieXQBLJZtG9ysrXHMD++nF9xlyj8DhciCiVvKWn6PprF7sPCubjItZtRrP8tlEp IhmVKRZLqwjoxZG7dmaTU0FTQNYbZp/Iw9D3/begtOQJ3WfH15FTJOnfGS2WHRbh E+ldOUWcf5ni/kUlR/qH54Y6GXYRwFN4By5eM5rqBXYvYqIBHDZF/ZKHS+kyAIaF HIwwdn65gmSsWK9l2hsYsJmQNyR6VQA= -----END CERTIFICATE-----Generated at Wed Jun 3 19:46:20 2026 by rpki-client