$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: qsV2s6F8La51lyMWmkKmU3eBcgwRRCLLzklBJKzBoYg= Subject key identifier: 0A:D6:83:F1:6C:AB:35:F6:B8:A5:74:7E:5C:73:98:56:57:3A:42:E3 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584D07ACFCC21A05865042E55A40 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fc:c2:1a:05:86:50:42:e5:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=d2d2ad00-ae91-4c7e-989f-f0445022a77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:c6:4e:6f:e4:ce:d1:4c:73:18:8f:66:ec: 31:c4:30:ce:57:13:dd:18:87:76:fc:21:1e:3b:9f: f5:70:66:24:bd:08:d2:57:9e:73:36:50:9d:af:11: a3:60:05:2c:80:63:a2:3e:f3:23:e6:2c:bb:9b:14: 15:25:85:ed:77:61:2b:26:7a:64:0c:b4:14:49:4a: 6a:bf:05:dc:b1:88:85:cb:6f:4d:aa:05:01:51:fb: ad:66:92:73:fe:c6:2c:a7:36:29:0f:3f:8e:2c:11: d7:a6:80:20:c8:40:3d:ae:10:9f:c1:5f:13:1d:41: 9a:fa:6d:fa:84:77:cf:e8:46:d4:8b:2c:84:3e:78: 45:9e:68:e8:c0:ab:e3:0c:d3:80:31:c8:5e:f9:6d: 5e:58:c4:70:63:5c:b2:a9:92:21:da:1c:6e:a4:85: f2:43:51:19:2a:52:fa:7b:50:50:d5:e3:e8:23:cd: 10:28:4b:37:22:52:ba:90:4b:de:af:8d:14:18:22: b3:e9:51:d3:7a:9f:a4:5c:9d:e7:5b:32:e2:18:a1: a8:83:f8:17:89:76:00:27:e6:8d:9b:37:ee:ff:ab: 69:c7:bf:60:54:8b:37:18:96:44:f4:3b:48:26:f7: 04:33:6a:b6:70:8c:f2:99:35:42:28:df:90:ed:0b: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D6:83:F1:6C:AB:35:F6:B8:A5:74:7E:5C:73:98:56:57:3A:42:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ec:99:d5:59:73:64:50:40:45:df:c5:dd:d4:34:b1:c5:8a: 38:62:38:da:df:dc:74:9e:e0:aa:f4:1a:f1:8c:2e:30:2a:aa: 8d:09:ba:37:61:f3:74:31:9e:04:c0:e5:b6:12:3b:b1:87:e4: 73:fc:2a:ee:b3:95:88:d5:56:16:1a:3c:94:eb:eb:c1:06:9a: 71:65:85:d0:9b:b0:ce:7b:2a:7b:2f:6b:cf:8d:92:f9:1f:c9: 01:40:a5:3e:97:24:db:2b:a0:e9:4e:4e:21:79:44:a5:4b:35: 81:bf:cb:b5:bd:94:78:58:30:2c:3b:de:2a:28:2b:e4:30:e9: 79:15:4e:e2:3f:17:d4:97:f5:5d:79:92:46:85:72:75:31:3b: f5:5d:19:85:e9:dc:5b:85:40:b0:43:3e:6e:d9:82:fc:ab:04: f9:06:aa:d7:77:64:db:8f:a1:27:d0:8d:30:f1:10:3d:a0:2b: 5f:dd:a7:e7:07:2d:a6:f1:31:cb:27:e4:d0:db:99:1f:db:81: d3:49:1b:92:55:7d:e4:c3:b1:a1:98:5d:53:30:fd:58:4b:59: aa:64:36:ba:c5:83:ad:7f:c3:ba:b8:1f:78:98:5c:b9:4e:26: 8a:b4:45:82:2d:a0:97:4c:d8:0d:b0:4f:81:7a:d5:29:84:1e: 4b:0f:00:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPzCGgWGUELlWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZDJkMmFkMDAtYWU5MS00YzdlLTk4OWYtZjA0NDUwMjJhNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL/GTm/kztFMcxiPZuwxxDDOVxPdGId2/CEe O5/1cGYkvQjSV55zNlCdrxGjYAUsgGOiPvMj5iy7mxQVJYXtd2ErJnpkDLQUSUpq vwXcsYiFy29NqgUBUfutZpJz/sYspzYpDz+OLBHXpoAgyEA9rhCfwV8THUGa+m36 hHfP6EbUiyyEPnhFnmjowKvjDNOAMche+W1eWMRwY1yyqZIh2hxupIXyQ1EZKlL6 e1BQ1ePoI80QKEs3IlK6kEver40UGCKz6VHTep+kXJ3nWzLiGKGog/gXiXYAJ+aN mzfu/6tpx79gVIs3GJZE9DtIJvcEM2q2cIzymTVCKN+Q7QuW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArWg/FsqzX2uKV0flxzmFZXOkLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXsmdVZc2RQQEXfxd3UNLHFijhiONrf3HSe4Kr0GvGMLjAqqo0Jujdh 83QxngTA5bYSO7GH5HP8Ku6zlYjVVhYaPJTr68EGmnFlhdCbsM57Knsva8+Nkvkf yQFApT6XJNsroOlOTiF5RKVLNYG/y7W9lHhYMCw73iooK+Qw6XkVTuI/F9SX9V15 kkaFcnUxO/VdGYXp3FuFQLBDPm7ZgvyrBPkGqtd3ZNuPoSfQjTDxED2gK1/dp+cH LabxMcsn5NDbmR/bgdNJG5JVfeTDsaGYXVMw/VhLWapkNrrFg61/w7q4H3iYXLlO Joq0RYItoJdM2A2wT4F61SmEHksPAGM= -----END CERTIFICATE-----Generated at Wed Mar 4 19:20:22 2026 by rpki-client