$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: AihiT6SLuUDA1BXD9su7mVKZ15BhP/ybTeBGD7Lh7DQ= Subject key identifier: 87:D8:5D:BA:2E:44:73:02:1B:6E:1A:4A:80:23:54:CE:50:77:CB:44 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584DE84B416BCA938502329F9D00 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:41:6b:ca:93:85:02:32:9f:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=9b10c8df-8065-4c20-8b3e-9c9368e945cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:68:16:92:d5:f4:cd:b3:8d:50:34:ec:68:10: 67:72:7d:dc:1b:59:07:66:3d:4f:cd:35:64:a2:44: b2:ed:6c:04:cb:03:47:45:05:ad:7c:da:a9:ed:64: 76:85:bb:0a:52:07:3d:f7:c2:82:6f:97:b4:e2:f1: c6:58:65:0b:1d:fe:8f:91:a7:c8:71:59:92:b8:a4: eb:92:46:ff:38:0d:e1:32:0c:f9:65:ea:b0:37:48: 1f:50:98:73:cc:4b:5a:54:d2:4f:ef:46:67:b4:06: ad:b8:23:ea:48:4e:51:c2:b9:39:ed:0e:9f:19:02: 7b:8b:81:5d:48:e5:1f:c2:ad:2c:9a:64:ea:ee:49: c7:8f:05:d7:9f:0a:74:f9:f7:98:19:98:fb:ac:7e: 72:47:ea:f5:ee:c2:0d:2d:6f:1d:56:da:bc:e4:c3: ad:9f:ab:43:b7:ec:f8:db:11:41:ab:f9:e8:0c:dc: df:c4:7c:8f:52:4d:45:27:66:ad:7c:85:33:b6:bc: dc:fc:a5:00:97:a2:33:0a:0b:8f:8e:4b:6c:da:c2: 34:a6:d2:5a:0c:b9:27:8e:3e:96:07:31:a4:98:57: db:08:25:ae:f5:46:0e:47:a0:dd:66:92:6b:f3:47: 63:ad:64:f3:f2:53:43:6f:8f:df:00:7d:13:87:4b: b9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:5D:BA:2E:44:73:02:1B:6E:1A:4A:80:23:54:CE:50:77:CB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:aa:dd:33:10:8c:68:21:c9:1e:8a:66:35:19:62:7e:d0:c2: 53:30:86:33:2b:17:67:0e:b4:08:35:cb:2a:29:fb:c2:98:33: b7:87:1e:be:bd:bc:5b:fb:60:7d:7e:bb:8b:e3:b1:61:b0:7b: ff:70:bf:54:4d:55:5c:9a:78:4f:ce:56:56:ee:25:74:7a:ad: 3d:8c:27:a8:cf:61:47:af:98:96:b0:e2:e1:15:cc:77:d6:f8: c2:8a:ba:52:88:4c:0f:cf:fb:22:cc:84:eb:ed:4a:73:53:0b: 56:0c:04:10:63:b6:a5:63:c6:98:a6:1e:0e:b3:69:c6:9b:01: a3:61:f4:2f:42:43:2d:a2:4a:af:62:69:9b:98:90:80:1e:cf: e1:34:41:cb:56:66:1f:79:a8:e5:a7:53:b1:31:eb:80:4b:1b: 69:30:4d:e0:a5:74:eb:20:44:96:f0:9b:6e:c7:47:df:16:ab: 6f:72:03:37:70:5d:40:e1:3d:0e:10:ee:cd:b3:fd:7b:77:74: a4:74:4a:b6:5b:8b:a9:5f:8c:bf:c2:60:b8:ab:86:dc:c2:6d: 18:ca:b2:30:f7:e6:44:fc:7d:af:17:75:56:34:23:48:8c:d2: d2:51:46:67:d0:03:20:f2:de:04:08:cb:6c:09:81:23:a5:05: 23:55:06:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oS0FrypOFAjKfnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk OWIxMGM4ZGYtODA2NS00YzIwLThiM2UtOWM5MzY4ZTk0NWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimgWktX0zbONUDTsaBBncn3cG1kHZj1PzTVk okSy7WwEywNHRQWtfNqp7WR2hbsKUgc998KCb5e04vHGWGULHf6PkafIcVmSuKTr kkb/OA3hMgz5ZeqwN0gfUJhzzEtaVNJP70ZntAatuCPqSE5Rwrk57Q6fGQJ7i4Fd SOUfwq0smmTq7knHjwXXnwp0+feYGZj7rH5yR+r17sINLW8dVtq85MOtn6tDt+z4 2xFBq/noDNzfxHyPUk1FJ2atfIUztrzc/KUAl6IzCguPjkts2sI0ptJaDLknjj6W BzGkmFfbCCWu9UYOR6DdZpJr80djrWTz8lNDb4/fAH0Th0u5kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfYXbouRHMCG24aSoAjVM5Qd8tEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECq3TMQjGghyR6KZjUZYn7QwlMwhjMrF2cOtAg1yyop+8KYM7eHHr69 vFv7YH1+u4vjsWGwe/9wv1RNVVyaeE/OVlbuJXR6rT2MJ6jPYUevmJaw4uEVzHfW +MKKulKITA/P+yLMhOvtSnNTC1YMBBBjtqVjxpimHg6zacabAaNh9C9CQy2iSq9i aZuYkIAez+E0QctWZh95qOWnU7Ex64BLG2kwTeCldOsgRJbwm27HR98Wq29yAzdw XUDhPQ4Q7s2z/Xt3dKR0SrZbi6lfjL/CYLirhtzCbRjKsjD35kT8fa8XdVY0I0iM 0tJRRmfQAyDy3gQIy2wJgSOlBSNVBjs= -----END CERTIFICATE-----Generated at Wed Jun 3 19:46:44 2026 by rpki-client