$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa File: a00e1f15-edb2-3c13-b022-338fbe6d0327.roa (raw, json) Hash identifier: Gzc7FRQqHCLfB1NVSiZ1sBh9YrfnpcQ/b40vwevtOaU= Subject key identifier: 66:5D:4C:9C:CE:36:8F:FB:DC:B9:9F:96:19:9C:2D:41:ED:27:86:E0 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584F0672448B0E797C3E8FA3E680 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 8075 IP address blocks: 209.143.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:44:8b:0e:79:7c:3e:8f:a3:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=1af38c2a-fc6e-48fa-86a7-804fad2451e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:cc:7c:93:4b:d4:1a:f1:2b:8b:bd:d2:13: a9:6f:72:37:f3:06:71:88:ed:2c:d5:f4:64:8f:21: dd:a0:66:15:84:6b:1d:fa:76:5c:e9:b0:57:8c:95: b6:95:bb:98:1d:b6:c5:7c:f7:c1:72:fb:df:38:bf: 1e:cf:05:a6:66:dc:6b:ef:ee:2c:5a:e8:0c:39:6d: d5:9d:eb:e1:52:7e:03:0e:6e:90:97:bc:fc:6e:41: 0f:bf:f5:72:0b:aa:ce:d2:3e:b7:f4:3c:ab:f3:60: 39:ac:af:c0:6a:48:6e:ac:d3:8f:c1:39:85:00:50: 44:6f:3f:9f:d0:14:e0:dd:5b:2a:cf:a2:77:69:29: df:b6:31:f6:f8:30:7b:ca:4b:c8:7a:e8:8d:9f:e6: e9:4e:67:b0:fa:5c:87:5e:28:33:15:c7:11:09:0a: a2:e6:0c:0d:e1:ba:26:36:88:51:35:ad:52:a3:5f: 18:ec:ba:d8:38:20:6b:81:63:42:d0:80:80:12:bf: 0b:10:43:83:1d:93:36:c7:2e:4e:65:de:97:01:60: 84:f3:6d:24:d9:11:e4:05:49:b0:07:29:fb:53:b3: d6:71:e0:0f:9e:80:79:fe:18:f5:55:33:a3:dd:92: d2:6c:69:a7:96:0c:fa:cd:ff:84:d0:52:51:53:4a: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5D:4C:9C:CE:36:8F:FB:DC:B9:9F:96:19:9C:2D:41:ED:27:86:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/a00e1f15-edb2-3c13-b022-338fbe6d0327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:74:72:ff:8b:ee:1f:f3:b5:c6:eb:b9:62:fb:0f:92:37:95: 89:9a:8e:2d:ba:ec:ab:af:51:86:f2:29:16:65:d3:2f:7d:d2: 96:03:d6:e6:c1:a1:27:62:28:18:26:a5:62:a2:d3:49:12:68: 3e:65:59:98:88:2d:9a:db:a6:f3:24:27:be:a2:75:30:5e:c3: 6c:90:a9:2c:9d:16:91:0d:f5:5b:d8:e3:bf:58:49:a9:a3:0b: 4f:55:1a:41:f9:10:cd:6d:4a:1c:ba:f7:92:dc:08:fb:b5:e7: 77:b1:33:1c:2c:4d:86:46:88:de:d8:38:f7:b8:db:d9:6d:71: 8d:be:71:c4:03:2b:2a:d0:fa:63:49:9c:d6:49:53:e7:91:80: de:07:3f:f2:76:a1:17:fc:50:51:b0:70:5e:e4:a8:97:cc:a5: c5:a1:8b:33:a0:e1:c4:dd:3c:1b:6a:39:25:38:6d:5b:77:d2: 5e:c6:36:93:8f:08:48:02:e7:2e:ee:9c:0e:90:f6:9f:0c:96: 02:11:41:0d:06:4b:55:12:2c:50:90:c3:13:0b:5c:6c:f9:da: 5d:c1:32:2f:26:8e:81:f8:36:35:20:60:5b:5c:81:fa:9c:f1: 67:dc:c5:a7:c8:c1:06:e5:89:1d:83:8d:08:a4:42:56:d9:b9: 4f:22:70:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckSLDnl8Po+j5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MWFmMzhjMmEtZmM2ZS00OGZhLTg2YTctODA0ZmFkMjQ1MWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO3MfJNL1BrxK4u90hOpb3I38wZxiO0s1fRk jyHdoGYVhGsd+nZc6bBXjJW2lbuYHbbFfPfBcvvfOL8ezwWmZtxr7+4sWugMOW3V nevhUn4DDm6Ql7z8bkEPv/VyC6rO0j639Dyr82A5rK/AakhurNOPwTmFAFBEbz+f 0BTg3Vsqz6J3aSnftjH2+DB7ykvIeuiNn+bpTmew+lyHXigzFccRCQqi5gwN4bom NohRNa1So18Y7LrYOCBrgWNC0ICAEr8LEEODHZM2xy5OZd6XAWCE820k2RHkBUmw Byn7U7PWceAPnoB5/hj1VTOj3ZLSbGmnlgz6zf+E0FJRU0qleQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZdTJzONo/73LmflhmcLUHtJ4bgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvYTAwZTFmMTUtZWRiMi0z YzEzLWIwMjItMzM4ZmJlNmQwMzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y/SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx0cv+L7h/ztcbruWL7D5I3lYmaji267KuvUYbyKRZl0y990pYD1ubB oSdiKBgmpWKi00kSaD5lWZiILZrbpvMkJ76idTBew2yQqSydFpEN9VvY479YSamj C09VGkH5EM1tShy695LcCPu153exMxwsTYZGiN7YOPe429ltcY2+ccQDKyrQ+mNJ nNZJU+eRgN4HP/J2oRf8UFGwcF7kqJfMpcWhizOg4cTdPBtqOSU4bVt30l7GNpOP CEgC5y7unA6Q9p8MlgIRQQ0GS1USLFCQwxMLXGz52l3BMi8mjoH4NjUgYFtcgfqc 8WfcxafIwQbliR2DjQikQlbZuU8icFk= -----END CERTIFICATE-----Generated at Sat Sep 5 02:43:20 2026 by rpki-client