$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa File: 1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa (raw, json) Hash identifier: kfiVlaaQTvIKnLp7lSDB53r5jQkXAVtUgd/yoPiwmnU= Subject key identifier: D2:2C:6E:C7:B0:96:22:30:3E:59:BC:B9:D0:18:DE:11:11:44:3F:F3 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584F49755AE2FBCECE4FAAE2E1C0 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 209.143.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:5a:e2:fb:ce:ce:4f:aa:e2:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d90647bc-54e4-4b09-95e4-b0fffc79fbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:d5:63:1c:f9:56:62:2b:e6:12:c9:dd:d5: 73:d3:66:28:3b:40:78:d6:90:d2:f6:21:b2:c9:d9: 04:72:f1:86:e8:61:da:f7:da:b9:18:a4:e9:2b:6d: 0d:bb:d8:c8:4f:6a:55:a3:a3:04:af:4c:67:ea:1d: 09:f0:9b:09:af:40:87:3a:7b:bf:f6:aa:1d:44:2d: bd:7a:26:9b:32:a1:22:b5:a6:c8:ea:6c:33:40:b1: 7b:00:33:18:21:56:2e:79:c6:0c:91:82:6c:25:32: dd:ac:bf:5f:0d:10:b5:df:db:f2:c0:fc:50:58:2e: e9:ce:36:71:5b:58:11:22:b2:be:13:7d:6f:1c:c0: 27:3b:3b:e8:64:3e:9c:86:db:57:75:6f:cc:a7:dc: 16:75:63:a7:55:cb:93:2c:13:ea:c4:58:b2:ea:1e: 57:2c:89:61:ae:58:f8:b2:bc:4d:e7:d4:07:ff:2d: c0:e0:d7:74:69:dd:00:06:fb:d8:35:91:7e:1d:fe: 4a:61:c7:4f:5b:ae:62:06:68:6c:17:56:b8:39:01: 46:b5:4d:bd:6f:06:af:79:c1:65:67:3f:62:45:77: ca:bf:fb:42:91:76:a3:28:01:47:5c:46:40:a7:31: fb:79:77:d5:3b:b3:51:99:a9:8e:9e:bb:8c:e3:8d: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2C:6E:C7:B0:96:22:30:3E:59:BC:B9:D0:18:DE:11:11:44:3F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/1a704d1c-4e79-3cfb-b33f-f7325a5a7df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fe:a5:bb:24:d3:dd:04:1a:89:44:83:7d:98:86:ed:fa:31: 8f:3b:dc:a3:d0:9f:ad:b1:98:86:7a:65:6a:58:76:36:e7:4f: 3f:62:93:4b:16:d8:21:16:0e:06:43:1f:41:bc:dc:95:00:9e: 86:db:dd:22:c0:97:66:1e:79:76:07:e6:fc:59:6b:fa:a2:56: 23:31:95:49:1c:73:cc:4a:8b:03:aa:17:48:44:5c:4c:f1:f5: 09:ab:31:62:01:44:ab:c7:82:b4:25:78:cb:3f:f8:4f:1f:31: 25:c6:a4:d6:ee:a5:d5:28:f4:0f:68:00:f1:d3:f7:da:a0:73: 49:0f:91:fa:5e:22:d8:69:79:1a:8f:d0:dc:c8:e4:d4:41:c5: 48:fd:7d:d7:2c:8c:f9:52:a6:e9:cd:53:b8:0d:36:16:e8:42: c2:f1:b5:5a:25:ad:fb:64:34:35:78:9e:2b:b0:4f:89:3f:cb: 83:50:05:9d:6c:f8:3d:bc:59:8e:5a:a6:4e:fb:88:f6:df:de: 77:1d:0b:3b:79:9f:fd:cc:5f:bb:ae:40:59:2e:b6:4a:3a:8a: f6:9b:d5:70:23:a5:ee:1f:00:6f:86:06:d5:e9:70:a6:7f:6e: 36:06:2f:99:6f:28:a0:ba:89:d1:6a:30:dd:59:32:d6:91:6e: b1:75:35:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVri+87OT6ri4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkwNjQ3YmMtNTRlNC00YjA5LTk1ZTQtYjBmZmZjNzlmYmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhjVYxz5VmIr5hLJ3dVz02YoO0B41pDS9iGy ydkEcvGG6GHa99q5GKTpK20Nu9jIT2pVo6MEr0xn6h0J8JsJr0CHOnu/9qodRC29 eiabMqEitabI6mwzQLF7ADMYIVYuecYMkYJsJTLdrL9fDRC139vywPxQWC7pzjZx W1gRIrK+E31vHMAnOzvoZD6chttXdW/Mp9wWdWOnVcuTLBPqxFiy6h5XLIlhrlj4 srxN59QH/y3A4Nd0ad0ABvvYNZF+Hf5KYcdPW65iBmhsF1a4OQFGtU29bwavecFl Zz9iRXfKv/tCkXajKAFHXEZApzH7eXfVO7NRmamOnruM440kfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIsbsewliIwPlm8udAY3hERRD/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvMWE3MDRkMWMtNGU3OS0z Y2ZiLWIzM2YtZjczMjVhNWE3ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL+pbsk090EGolEg32Yhu36MY873KPQn62xmIZ6ZWpYdjbnTz9ik0sW 2CEWDgZDH0G83JUAnobb3SLAl2YeeXYH5vxZa/qiViMxlUkcc8xKiwOqF0hEXEzx 9QmrMWIBRKvHgrQleMs/+E8fMSXGpNbupdUo9A9oAPHT99qgc0kPkfpeIthpeRqP 0NzI5NRBxUj9fdcsjPlSpunNU7gNNhboQsLxtVolrftkNDV4niuwT4k/y4NQBZ1s +D28WY5apk77iPbf3ncdCzt5n/3MX7uuQFkutko6ivab1XAjpe4fAG+GBtXpcKZ/ bjYGL5lvKKC6idFqMN1ZMtaRbrF1NUM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:22:33 2026 by rpki-client