$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: n/75pEPAsqMPOK70IudSZkM8bP9J90mgPZNSrA+zTdU= Subject key identifier: B2:37:98:FB:19:B4:F7:B5:2A:E9:FE:8D:81:0B:91:72:F2:12:CF:D0 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584EA791BC1926DA05A46CBF7280 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:bc:19:26:da:05:a4:6c:bf:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7bb4f97f-98a7-4bdc-96bd-f4f27aa99c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5a:56:ab:8f:59:35:14:a1:ce:5f:e3:65:56: 05:b4:c9:f7:37:17:09:ac:f6:11:9c:10:f9:8c:6e: 37:5a:26:36:4e:45:38:47:f2:bf:ed:22:ed:13:6d: d2:c0:e0:5c:79:50:3e:e8:68:9e:29:17:50:5f:1d: c8:02:50:5c:c6:b6:6e:03:50:73:9c:47:f5:21:42: 9a:20:bd:df:cd:f8:08:69:bb:aa:ff:a2:5d:b5:58: 68:8f:da:ac:7b:d7:16:10:45:28:78:b3:e5:0b:88: d7:44:82:a4:98:79:87:78:80:15:d7:3a:b4:5f:4f: 50:32:43:a2:7c:19:39:e1:12:78:bc:85:bb:32:62: 61:93:97:1e:0a:09:03:71:33:2f:43:3c:e5:48:26: b1:18:32:af:7a:6b:9b:ef:a4:7e:8e:f2:c7:cb:8b: b7:dc:c5:eb:67:e4:8b:4e:39:9a:e2:1b:cf:da:48: 1c:ba:98:f2:cc:9b:51:8d:59:55:98:5c:1d:d0:a3: a2:64:ca:40:d7:f1:71:2a:88:3b:59:e2:4d:a8:56: c7:7f:28:93:6e:55:ec:b1:4b:76:f5:64:3e:41:18: 3b:6d:63:a7:2e:92:5b:e8:b1:bc:32:24:23:2e:a0: 36:35:4b:00:db:8a:7e:41:aa:97:18:41:ea:1b:df: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:37:98:FB:19:B4:F7:B5:2A:E9:FE:8D:81:0B:91:72:F2:12:CF:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d6:5f:b3:73:4a:39:1b:c2:14:da:ad:aa:b2:08:2e:d1:82: 4a:bd:47:fd:f6:33:04:cb:74:02:0d:2d:e0:16:9b:7a:52:36: c8:8b:e2:72:e1:a2:2d:5f:1a:c3:c7:0c:83:f3:05:8d:71:85: b2:27:33:d1:dd:55:70:d7:6d:e0:df:a0:88:2a:40:44:70:6f: 26:e9:5e:50:f1:f5:43:1c:9e:d5:ab:8f:87:2b:c5:79:1c:8a: f5:2c:98:9f:e7:57:44:07:80:a5:89:a2:ff:9d:44:20:62:9d: 48:87:0e:bf:31:82:4e:d9:09:84:f0:e6:ce:49:31:f1:d4:e9: 68:16:61:24:b3:73:d1:8b:77:65:99:1a:9e:d9:e0:57:3c:7e: 2c:81:40:1d:28:73:a2:4c:6e:e1:66:2a:64:97:bd:40:ba:d7: 87:4b:79:50:db:aa:70:c7:7d:3d:75:99:92:95:a1:08:ad:c4: af:e5:90:99:22:38:56:fa:90:d4:84:e7:f4:37:c5:b4:6e:6c: 37:10:76:d4:19:0a:59:13:a3:d4:90:a8:b6:50:18:c7:6b:ea: ba:7c:ac:3f:ab:7c:b8:aa:92:59:7c:31:b3:1f:b5:87:16:14: c4:c4:aa:11:d3:6c:62:70:34:ca:1b:fc:24:fa:26:da:9a:55: e8:78:01:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkbwZJtoFpGy/coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk N2JiNGY5N2YtOThhNy00YmRjLTk2YmQtZjRmMjdhYTk5YzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51pWq49ZNRShzl/jZVYFtMn3NxcJrPYRnBD5 jG43WiY2TkU4R/K/7SLtE23SwOBceVA+6GieKRdQXx3IAlBcxrZuA1BznEf1IUKa IL3fzfgIabuq/6JdtVhoj9qse9cWEEUoeLPlC4jXRIKkmHmHeIAV1zq0X09QMkOi fBk54RJ4vIW7MmJhk5ceCgkDcTMvQzzlSCaxGDKvemub76R+jvLHy4u33MXrZ+SL Tjma4hvP2kgcupjyzJtRjVlVmFwd0KOiZMpA1/FxKog7WeJNqFbHfyiTblXssUt2 9WQ+QRg7bWOnLpJb6LG8MiQjLqA2NUsA24p+QaqXGEHqG9/RIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI3mPsZtPe1Kun+jYELkXLyEs/QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnWX7NzSjkbwhTaraqyCC7Rgkq9R/32MwTLdAINLeAWm3pSNsiL4nLh oi1fGsPHDIPzBY1xhbInM9HdVXDXbeDfoIgqQERwbybpXlDx9UMcntWrj4crxXkc ivUsmJ/nV0QHgKWJov+dRCBinUiHDr8xgk7ZCYTw5s5JMfHU6WgWYSSzc9GLd2WZ Gp7Z4Fc8fiyBQB0oc6JMbuFmKmSXvUC614dLeVDbqnDHfT11mZKVoQitxK/lkJki OFb6kNSE5/Q3xbRubDcQdtQZClkTo9SQqLZQGMdr6rp8rD+rfLiqkll8MbMftYcW FMTEqhHTbGJwNMob/CT6JtqaVeh4Ae8= -----END CERTIFICATE-----Generated at Wed Jul 29 08:32:28 2026 by rpki-client