$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa File: a1d318a9-2c59-3f17-9209-b28724c60909.roa (raw, json) Hash identifier: g+v3S3RYEIktmYcqtnJTWE6mPdFdQ7/w6RD2RDi9hP4= Subject key identifier: 88:34:0C:F3:51:45:B7:7F:0D:64:88:D1:A7:ED:F1:43:65:12:F0:B8 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584DF640AEA751B25D3B4F11A340 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 328631 IP address blocks: 209.61.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:ae:a7:51:b2:5d:3b:4f:11:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=f4d4d86d-a985-4872-8841-8c4fe5fdf729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cc:da:e5:2e:3d:38:c9:aa:7a:bb:0f:10:7c: a1:f0:d7:99:f5:a7:45:eb:f6:b4:ab:e0:49:f7:e9: 8f:fa:35:33:d3:81:18:ca:cc:b5:05:e1:c3:cb:2b: db:40:26:96:7e:04:bf:cd:5c:1d:e0:5f:05:83:42: 3a:10:cb:89:c6:e5:53:93:46:1b:e7:16:03:6a:bf: 90:68:24:3a:dc:e9:54:b1:10:2e:c2:04:d6:56:72: a7:53:68:b7:0b:6f:14:71:84:28:e8:8d:bf:99:f7: 26:bb:c4:a9:10:8c:84:da:05:80:f6:7b:15:e0:84: b7:9f:4a:72:32:f3:11:2a:4b:63:f3:c5:27:0e:87: c1:f6:b0:93:0d:50:d3:b6:f5:00:29:0d:ca:e4:d6: 88:9a:78:0a:e3:86:2b:a5:d3:11:1a:f1:a0:db:62: b1:d2:d2:57:03:a4:cb:3f:17:30:4e:44:f5:fc:72: 70:41:73:be:00:20:60:2b:a8:f2:71:5e:71:a1:88: ef:14:e9:87:b1:09:e6:6b:2d:0e:72:bb:81:34:75: e4:68:1a:32:b5:d3:f2:46:09:00:44:33:3e:bc:c0: e6:90:c1:32:87:48:f4:5c:e0:fc:1f:82:f9:56:6c: 72:c1:7e:8b:99:d6:c1:bc:1e:a2:46:9c:7e:0c:75: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:34:0C:F3:51:45:B7:7F:0D:64:88:D1:A7:ED:F1:43:65:12:F0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a1d318a9-2c59-3f17-9209-b28724c60909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4b:e9:72:86:8c:6b:ce:0c:9a:cc:70:05:b3:e4:35:dc:5a: 08:9e:ee:8f:bb:87:f0:ce:a6:bf:3e:cf:43:68:3e:9e:42:10: 64:6c:c5:23:c8:42:78:15:12:86:e9:33:61:49:ff:95:70:f4: b2:3a:98:4d:62:34:c8:a5:d2:58:e5:6f:30:cf:21:2b:00:56: 8f:0a:a1:57:36:6e:5a:bb:fb:0a:bf:cd:f2:df:a3:6a:9b:c6: 1c:3b:6a:a0:45:b7:72:47:31:31:3e:a3:88:99:42:cb:ac:01: 2e:7a:45:f3:87:34:e0:83:52:bc:51:a4:37:1b:fd:f4:81:34: 40:7e:42:3c:fe:75:ef:10:85:ad:54:94:4a:e8:19:97:33:2b: 8b:4c:72:54:a6:cc:4c:95:7a:43:dc:93:b8:26:4e:86:87:b6: b5:73:12:a5:4d:bf:31:df:57:92:d3:0c:56:6c:c8:af:9a:31: 6f:1d:ff:43:66:0c:ec:4b:79:2d:2c:dd:47:ab:ff:c3:98:b5: 21:f6:f2:d0:e9:fe:5c:57:bc:46:82:ec:c4:de:92:9a:46:84: 15:e3:3f:dc:b6:9e:0d:05:29:b4:45:6c:47:31:a3:54:53:8d: 66:ab:6c:9c:6f:e6:83:19:69:2a:57:e7:ff:75:b1:cd:c1:6a: 35:00:41:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QK6nUbJdO08Ro0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjRkNGQ4NmQtYTk4NS00ODcyLTg4NDEtOGM0ZmU1ZmRmNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcza5S49OMmqersPEHyh8NeZ9adF6/a0q+BJ 9+mP+jUz04EYysy1BeHDyyvbQCaWfgS/zVwd4F8Fg0I6EMuJxuVTk0Yb5xYDar+Q aCQ63OlUsRAuwgTWVnKnU2i3C28UcYQo6I2/mfcmu8SpEIyE2gWA9nsV4IS3n0py MvMRKktj88UnDofB9rCTDVDTtvUAKQ3K5NaImngK44YrpdMRGvGg22Kx0tJXA6TL PxcwTkT1/HJwQXO+ACBgK6jycV5xoYjvFOmHsQnmay0OcruBNHXkaBoytdPyRgkA RDM+vMDmkMEyh0j0XOD8H4L5VmxywX6LmdbBvB6iRpx+DHWD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg0DPNRRbd/DWSI0aft8UNlEvC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTFkMzE4YTktMmM1OS0z ZjE3LTkyMDktYjI4NzI0YzYwOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0T0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFL6XKGjGvODJrMcAWz5DXcWgie7o+7h/DOpr8+z0NoPp5CEGRsxSPI QngVEobpM2FJ/5Vw9LI6mE1iNMil0ljlbzDPISsAVo8KoVc2blq7+wq/zfLfo2qb xhw7aqBFt3JHMTE+o4iZQsusAS56RfOHNOCDUrxRpDcb/fSBNEB+Qjz+de8Qha1U lEroGZczK4tMclSmzEyVekPck7gmToaHtrVzEqVNvzHfV5LTDFZsyK+aMW8d/0Nm DOxLeS0s3Uer/8OYtSH28tDp/lxXvEaC7MTekppGhBXjP9y2ng0FKbRFbEcxo1RT jWarbJxv5oMZaSpX5/91sc3BajUAQbs= -----END CERTIFICATE-----Generated at Fri Jun 12 22:40:47 2026 by rpki-client