$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: x5Y4foCniMeTxhKZHJmaNGpQZkYKhH6u7KDaeAuTMXA= Subject key identifier: 16:C0:ED:20:01:0B:E5:F2:DE:23:1B:F4:97:7E:C4:64:76:10:9B:35 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584EA791BC23F9C636A51A927040 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:bc:23:f9:c6:36:a5:1a:92:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c578d445-e7a4-48d4-b93b-e90b76016ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4a:8f:3b:ae:50:27:33:ec:db:14:11:8a:8d: 0b:72:a3:0e:3a:15:5a:ed:48:dd:89:59:0a:7b:1d: b0:d3:41:c2:21:11:1a:c3:57:c4:3c:a9:cd:86:90: d1:b9:73:b3:61:07:7c:83:d4:65:b9:eb:44:c2:74: 0c:76:c8:9f:4d:19:91:d1:8b:e8:fb:f8:9d:db:a2: 61:d1:03:09:64:c7:12:79:52:55:f3:91:47:ef:a9: c7:48:1c:44:b7:d5:16:c0:e7:b4:8d:be:ba:45:5d: f3:11:ad:14:3e:21:fc:b1:09:b8:2b:36:35:6e:e4: b9:7b:59:e4:25:b3:b6:9b:ee:c2:56:9c:ae:62:6b: 01:5a:10:19:eb:9b:4e:88:c0:64:d7:e3:4d:85:81: 8e:8a:5b:f7:29:5a:9d:c1:19:57:26:09:47:a3:5e: 93:52:e3:6d:8a:1e:bc:23:2a:7d:42:61:0a:0f:7e: 13:58:03:e8:6a:30:2f:a9:8e:f9:f0:2a:fc:4c:e4: 9f:8b:14:c9:53:31:c3:f4:17:83:84:da:c2:4b:6f: 53:03:37:59:74:d6:12:7e:63:63:22:84:fc:5c:f7: c7:f8:b6:5e:4b:01:df:63:5a:e5:1a:bb:a1:a4:ae: 03:db:78:b3:14:bd:1d:00:f0:71:ea:ab:5b:1e:31: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C0:ED:20:01:0B:E5:F2:DE:23:1B:F4:97:7E:C4:64:76:10:9B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:eb:7d:92:05:be:94:5f:70:da:0e:9a:0d:01:07:fe:53:95: f0:b7:9f:b7:eb:d4:86:2e:2f:f8:90:cd:a3:cb:d7:37:5d:cb: a3:ea:5e:05:b7:c1:3f:5a:34:a7:3a:13:9d:75:8b:72:fe:34: 9d:c0:9c:a3:56:fb:4e:f8:75:01:06:30:9d:f2:bf:cd:53:7e: 66:59:26:46:f1:93:28:76:0c:7e:b3:51:fc:a8:7f:40:18:7b: 4a:07:8c:dc:f5:1f:44:a5:27:29:62:c6:50:90:06:bc:3e:c0: b4:3d:34:71:3c:8c:14:ec:d3:b5:b7:68:3e:86:92:15:8f:52: 8f:21:22:d7:fe:23:58:ae:04:e9:cd:c9:b0:80:67:39:cc:1e: 57:3d:6d:c2:f1:9d:64:19:4b:92:5c:58:7c:32:5a:3f:fa:d4: fb:9b:65:bf:9f:92:41:47:6a:2f:f7:6c:bf:fc:0f:7f:9d:51: 21:3f:60:3c:1e:88:2b:fc:d5:31:c9:e3:4e:f7:71:4c:16:b1: 49:af:68:7d:d4:84:af:2c:56:11:12:52:e8:0f:54:45:9c:61: 51:cd:41:bf:63:fe:9d:42:53:1d:03:2a:fd:2c:ce:8b:5b:bf: df:da:ba:28:1c:2b:80:9e:97:04:13:94:88:2e:c5:3a:e9:88: 25:e0:0d:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbwj+cY2pRqScEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzU3OGQ0NDUtZTdhNC00OGQ0LWI5M2ItZTkwYjc2MDE2YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEqPO65QJzPs2xQRio0LcqMOOhVa7UjdiVkK ex2w00HCIREaw1fEPKnNhpDRuXOzYQd8g9RluetEwnQMdsifTRmR0Yvo+/id26Jh 0QMJZMcSeVJV85FH76nHSBxEt9UWwOe0jb66RV3zEa0UPiH8sQm4KzY1buS5e1nk JbO2m+7CVpyuYmsBWhAZ65tOiMBk1+NNhYGOilv3KVqdwRlXJglHo16TUuNtih68 Iyp9QmEKD34TWAPoajAvqY758Cr8TOSfixTJUzHD9BeDhNrCS29TAzdZdNYSfmNj IoT8XPfH+LZeSwHfY1rlGruhpK4D23izFL0dAPBx6qtbHjGOqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbA7SABC+Xy3iMb9Jd+xGR2EJs1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITrfZIFvpRfcNoOmg0BB/5TlfC3n7fr1IYuL/iQzaPL1zddy6PqXgW3 wT9aNKc6E511i3L+NJ3AnKNW+074dQEGMJ3yv81TfmZZJkbxkyh2DH6zUfyof0AY e0oHjNz1H0SlJylixlCQBrw+wLQ9NHE8jBTs07W3aD6GkhWPUo8hItf+I1iuBOnN ybCAZznMHlc9bcLxnWQZS5JcWHwyWj/61PubZb+fkkFHai/3bL/8D3+dUSE/YDwe iCv81THJ4073cUwWsUmvaH3UhK8sVhESUugPVEWcYVHNQb9j/p1CUx0DKv0szotb v9/auigcK4CelwQTlIguxTrpiCXgDdA= -----END CERTIFICATE-----Generated at Sat Sep 5 04:27:01 2026 by rpki-client