$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/0cafa05c-5f50-3b41-b94c-68f9370f2878.roa File: 0cafa05c-5f50-3b41-b94c-68f9370f2878.roa (raw, json) Hash identifier: jyXTtg4eqAwGxr+I7Jp7lXH6vxBO0gmjXY3bhj82dgY= Subject key identifier: 80:58:DF:B5:06:C9:F1:74:D3:83:1E:F9:B4:6E:B0:9D:F6:DD:54:46 Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb Certificate serial: 010D0C9F4328584F08651C5EA014C4ECB7370200 Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/0cafa05c-5f50-3b41-b94c-68f9370f2878.roa Signing time: Tue 01 Sep 2026 17:45:39 +0000 ROA not before: Tue 01 Sep 2026 17:45:39 +0000 ROA not after: Mon 30 Nov 2026 18:45:39 +0000 asID: 6939 IP address blocks: 140.235.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:08:65:1c:5e:a0:14:c4:ec:b7:37:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb Validity Not Before: Sep 1 17:45:39 2026 GMT Not After : Nov 30 18:45:39 2026 GMT Subject: CN=137a15ba-430e-4df2-b2bf-b798690d2cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:70:8c:14:c8:cc:45:bb:eb:23:79:5d:0a: b5:5b:fc:16:66:01:97:11:b2:a6:a3:05:be:3c:4e: 14:c6:db:c6:3e:64:73:28:98:05:e5:80:f6:19:bf: 47:d9:d7:ef:1e:37:6c:9d:aa:b1:b6:48:d0:82:9b: e9:5d:75:25:69:c7:71:46:f9:da:1e:4f:b7:63:c9: fd:49:37:35:37:70:e5:a4:3e:e4:a9:57:9c:40:ee: 04:a1:61:1b:c0:87:20:1b:77:62:8f:56:b9:89:05: 24:3c:7b:19:5d:2d:79:70:80:f5:d3:9d:48:93:57: 09:22:8f:18:cd:df:de:14:4f:f3:a1:70:fd:13:44: bf:a1:55:f7:ae:2a:9f:f6:d2:d0:d5:56:f4:75:19: 9f:98:6b:98:1f:29:06:4e:ca:77:f7:2c:b3:c0:f3: 8f:55:c8:59:43:1d:c1:ec:0c:b8:4c:76:0a:5f:c7: 28:cb:cb:62:bc:1b:40:33:b5:d2:72:6e:02:fc:ce: ca:d8:6e:e8:91:d6:47:d2:cd:d7:80:a8:40:65:b2: ea:cd:b2:cf:5e:56:c4:e0:70:82:04:99:b5:66:fc: ba:e5:f3:1d:32:65:b9:1f:12:c7:c0:f2:cf:ca:b8: c7:0d:64:ee:17:8c:39:eb:78:3d:70:e9:0b:07:0f: ba:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:58:DF:B5:06:C9:F1:74:D3:83:1E:F9:B4:6E:B0:9D:F6:DD:54:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/0cafa05c-5f50-3b41-b94c-68f9370f2878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl X509v3 Authority Key Identifier: keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0e:01:82:1f:da:69:af:85:29:f8:ac:b4:a1:8b:17:45:97: 21:80:a8:1b:6f:f1:3f:b0:c1:fb:da:67:b5:21:5d:95:11:41: 01:58:c3:85:da:e1:3b:80:56:5b:6b:6f:8f:1d:c3:5b:af:3a: 94:96:74:5d:60:26:a5:f3:47:8a:22:73:e7:c6:72:ac:5b:ce: b4:33:01:8a:35:77:23:2d:0d:74:88:a4:b7:95:4f:39:82:e8: 9f:07:f7:ba:c6:9b:f7:69:21:bf:c7:97:f6:00:8a:97:60:74: 6b:3c:97:0d:44:d8:1f:55:00:69:db:67:c2:a7:a2:19:90:37: 89:06:ab:bc:d7:60:b9:a3:f7:37:77:85:91:00:ca:f5:bb:64: 5f:ac:98:bf:b4:6d:f8:3e:3d:ec:b9:7e:d8:ed:16:11:b9:7a: 99:25:17:38:a9:11:dd:3e:98:d0:65:97:8c:5e:f7:06:ed:cc: 24:20:f8:6f:df:98:4f:b9:ef:8d:0e:f0:f2:79:0f:0f:28:8a: 93:ec:41:d4:cb:40:57:52:9c:89:d5:e5:51:1a:46:0a:9c:fb: 68:12:9b:b1:db:de:23:66:35:ff:5b:57:b3:96:87:28:3a:9d: 67:f6:fe:b8:d9:ce:05:3a:ff:5e:38:4d:92:75:a0:29:fc:b8: 76:5b:2c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8IZRxeoBTE7Lc3AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy NGZiMB4XDTI2MDkwMTE3NDUzOVoXDTI2MTEzMDE4NDUzOVowLzEtMCsGA1UEAxMk MTM3YTE1YmEtNDMwZS00ZGYyLWIyYmYtYjc5ODY5MGQyY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhplwjBTIzEW76yN5XQq1W/wWZgGXEbKmowW+ PE4UxtvGPmRzKJgF5YD2Gb9H2dfvHjdsnaqxtkjQgpvpXXUlacdxRvnaHk+3Y8n9 STc1N3DlpD7kqVecQO4EoWEbwIcgG3dij1a5iQUkPHsZXS15cID1051Ik1cJIo8Y zd/eFE/zoXD9E0S/oVX3riqf9tLQ1Vb0dRmfmGuYHykGTsp39yyzwPOPVchZQx3B 7Ay4THYKX8coy8tivBtAM7XScm4C/M7K2G7okdZH0s3XgKhAZbLqzbLPXlbE4HCC BJm1Zvy65fMdMmW5HxLHwPLPyrjHDWTuF4w563g9cOkLBw+62wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBY37UGyfF004Me+bRusJ323VRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvMGNhZmEwNWMtNWY1MC0z YjQxLWI5NGMtNjhmOTM3MGYyODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0 MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwOAYIf2mmvhSn4rLShixdFlyGAqBtv8T+wwfvaZ7UhXZURQQFYw4Xa 4TuAVltrb48dw1uvOpSWdF1gJqXzR4oic+fGcqxbzrQzAYo1dyMtDXSIpLeVTzmC 6J8H97rGm/dpIb/Hl/YAipdgdGs8lw1E2B9VAGnbZ8KnohmQN4kGq7zXYLmj9zd3 hZEAyvW7ZF+smL+0bfg+Pey5ftjtFhG5epklFzipEd0+mNBll4xe9wbtzCQg+G/f mE+5740O8PJ5Dw8oipPsQdTLQFdSnInV5VEaRgqc+2gSm7Hb3iNmNf9bV7OWhyg6 nWf2/rjZzgU6/144TZJ1oCn8uHZbLCQ= -----END CERTIFICATE-----Generated at Sun Oct 4 19:07:58 2026 by rpki-client