$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa File: 58ec0e37-e22c-32f5-b147-1e377b817c07.roa (raw, json) Hash identifier: fKFzs/bDKnstMADxNSRaCYsMx9tge05XtSr1UXOe1DE= Subject key identifier: 88:F0:6D:22:31:7A:F9:D3:53:61:8E:C3:02:3A:F1:47:BE:08:67:74 Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb Certificate serial: 010D0C9F4328584F225D09F0C3E0F871FC31A9B0 Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 140.235.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:09:f0:c3:e0:f8:71:fc:31:a9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=3d1e3887-a150-45e9-8713-c11189c5c880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:77:bb:e8:21:fc:f6:1c:2a:09:71:63:9d:d7: fe:ce:da:b7:f9:8e:59:bd:ae:e5:9e:04:72:e2:4d: 18:48:31:6f:e8:b1:29:80:1c:81:63:54:6f:6c:99: a5:9a:9d:80:8f:00:54:ae:d2:21:1a:40:5e:60:18: 20:b6:1a:7d:c3:c7:f8:21:e3:83:f9:62:f9:88:a9: a0:2a:44:c9:00:b0:8e:4c:8b:d1:34:9d:45:13:d4: 44:9e:97:73:dd:d0:b6:05:09:df:c0:e9:9b:03:81: eb:af:5f:3b:92:48:59:89:88:8a:0c:8b:61:c1:e2: 5a:d2:35:47:27:c7:1a:38:1d:bf:33:d9:84:a3:ad: db:c8:cc:db:cb:1b:f9:fa:4f:f3:20:ad:d4:a7:4b: f5:c5:7c:b2:39:da:a5:98:eb:8d:16:8a:18:21:43: c1:25:1f:88:8a:1d:4b:a5:7b:03:79:77:98:4f:78: ac:d6:b8:c1:b8:08:40:37:36:68:2b:b9:f3:90:e9: 2d:50:36:fd:af:c3:2b:c7:64:00:44:f7:39:8e:46: a8:40:91:c6:6d:e9:65:17:02:65:c9:40:fc:bc:b5: 18:01:0c:d1:f2:08:0e:4e:7c:7d:a4:89:0c:7f:3b: 0c:1d:3d:b7:e0:04:5d:17:fb:62:99:d3:52:68:48: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:6D:22:31:7A:F9:D3:53:61:8E:C3:02:3A:F1:47:BE:08:67:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl X509v3 Authority Key Identifier: keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3f:9b:8d:d4:41:3a:37:d5:ae:d3:69:04:c2:71:1b:8b:d4: 7d:3a:08:98:c1:42:46:c5:8b:66:07:42:7a:f7:13:f0:1f:d8: 22:71:d1:7d:54:22:b0:e2:75:63:06:75:ec:c9:9f:d8:60:73: 5b:32:29:7f:8c:c2:2c:d9:46:61:86:fc:bc:40:6a:b4:be:d0: 15:04:d4:af:0a:e8:ff:35:e9:80:95:71:a8:35:16:96:07:90: c1:00:28:48:39:25:c6:bc:7d:2b:ab:bb:01:2f:24:8a:4a:82: c0:cc:63:7f:a3:81:16:28:22:9a:db:f6:93:34:6b:6e:fc:85: 57:e8:55:f2:54:9b:f0:96:77:7b:f8:83:29:ec:40:91:96:a8: d3:22:fc:88:d0:31:8f:67:4c:09:ee:90:11:04:3f:7a:7e:23: b5:63:6f:48:e7:53:93:dc:cf:e3:d2:49:6a:cd:3c:32:5b:73: 88:d1:b1:43:7c:c2:9d:0c:85:97:1b:24:2f:0d:98:02:92:41: 76:ce:71:33:f0:80:d9:c4:02:89:2e:48:a4:13:6d:d0:17:1b: 9f:3b:f2:75:89:aa:09:01:02:41:d4:fa:86:f1:53:f9:1d:94: 99:1f:f1:fe:23:19:df:e4:bf:b2:a3:33:d0:26:bb:d8:8c:bf: 13:59:c5:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXQnww+D4cfwxqbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy NGZiMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk M2QxZTM4ODctYTE1MC00NWU5LTg3MTMtYzExMTg5YzVjODgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83e76CH89hwqCXFjndf+ztq3+Y5Zva7lngRy 4k0YSDFv6LEpgByBY1RvbJmlmp2AjwBUrtIhGkBeYBggthp9w8f4IeOD+WL5iKmg KkTJALCOTIvRNJ1FE9REnpdz3dC2BQnfwOmbA4Hrr187kkhZiYiKDIthweJa0jVH J8caOB2/M9mEo63byMzbyxv5+k/zIK3Up0v1xXyyOdqlmOuNFooYIUPBJR+Iih1L pXsDeXeYT3is1rjBuAhANzZoK7nzkOktUDb9r8Mrx2QARPc5jkaoQJHGbellFwJl yUD8vLUYAQzR8ggOTnx9pIkMfzsMHT234ARdF/timdNSaEiaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjwbSIxevnTU2GOwwI68Ue+CGd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvNThlYzBlMzctZTIyYy0z MmY1LWIxNDctMWUzNzdiODE3YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0 MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU/m43UQTo31a7TaQTCcRuL1H06CJjBQkbFi2YHQnr3E/Af2CJx0X1U IrDidWMGdezJn9hgc1syKX+MwizZRmGG/LxAarS+0BUE1K8K6P816YCVcag1FpYH kMEAKEg5Jca8fSuruwEvJIpKgsDMY3+jgRYoIprb9pM0a278hVfoVfJUm/CWd3v4 gynsQJGWqNMi/IjQMY9nTAnukBEEP3p+I7Vjb0jnU5Pcz+PSSWrNPDJbc4jRsUN8 wp0MhZcbJC8NmAKSQXbOcTPwgNnEAokuSKQTbdAXG5878nWJqgkBAkHU+obxU/kd lJkf8f4jGd/kv7KjM9Amu9iMvxNZxdo= -----END CERTIFICATE-----Generated at Tue Sep 22 19:58:37 2026 by rpki-client