$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/04cf005b-54bc-3d92-80c7-88f1c2ad9c90.roa File: 04cf005b-54bc-3d92-80c7-88f1c2ad9c90.roa (raw, json) Hash identifier: T6/d+aICPJhNl4nVWmNM+24ZmSDhXR9FNC7QwdRM0e4= Subject key identifier: 5F:42:DF:48:4F:76:9B:4B:D6:73:44:E0:52:27:39:41:FA:BA:4A:3B Certificate issuer: /CN=87ec2265-8bb4-4fdc-91d8-de682ab374ad Certificate serial: 010D0C9F4328584F5F31E32EC873B6716FB26380 Authority key identifier: F2:F7:46:26:DD:E5:85:F9:A8:2A:04:53:8A:26:94:11:41:BF:E8:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/04cf005b-54bc-3d92-80c7-88f1c2ad9c90.roa Signing time: Fri 02 Oct 2026 19:57:46 +0000 ROA not before: Fri 02 Oct 2026 19:57:46 +0000 ROA not after: Thu 31 Dec 2026 20:57:46 +0000 asID: 402977 IP address blocks: 140.232.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:31:e3:2e:c8:73:b6:71:6f:b2:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87ec2265-8bb4-4fdc-91d8-de682ab374ad Validity Not Before: Oct 2 19:57:46 2026 GMT Not After : Dec 31 20:57:46 2026 GMT Subject: CN=8d03f4d4-a632-4475-9acc-793278514fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:71:05:14:71:0c:45:a7:4e:96:59:cd:81: 8d:58:48:63:52:7f:1c:0d:7c:a7:8d:25:a6:46:fb: c5:4d:53:90:ff:9c:27:5e:1c:19:c6:e0:79:66:55: 86:11:0c:5f:1b:ad:3e:c7:a9:7a:8d:49:79:1a:dd: ec:36:d4:ad:e2:3e:f7:56:0a:4f:e9:85:f1:bf:5b: 70:4d:f0:f6:68:7c:b4:6a:7f:ea:1d:81:f5:73:0f: 66:7a:fe:45:56:eb:62:5e:09:20:27:25:0f:c4:81: 1e:56:24:60:33:63:4e:5b:f1:a1:bb:7d:b8:00:65: 12:2d:b4:4b:5d:aa:c1:57:27:a5:bb:11:1f:a3:80: 95:7c:a0:de:0b:73:87:10:3e:4c:1f:af:f5:ba:08: f4:69:2c:85:d8:d5:23:5c:9d:33:da:2b:04:c9:ad: 00:79:27:41:a2:13:57:eb:63:1b:9e:ab:58:ee:80: c5:85:8f:c6:6f:35:eb:5b:24:48:46:ec:dc:55:55: 00:87:66:ea:51:1d:67:6b:1e:d2:db:23:06:89:28: 71:ab:a5:f5:60:7d:7d:48:81:93:ea:75:92:52:0c: 2d:fc:32:81:94:a7:64:60:ef:b4:86:01:f6:27:d0: 98:04:b1:7d:d3:51:76:f2:8f:83:a4:a4:af:77:24: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:DF:48:4F:76:9B:4B:D6:73:44:E0:52:27:39:41:FA:BA:4A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/04cf005b-54bc-3d92-80c7-88f1c2ad9c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad/87ec2265-8bb4-4fdc-91d8-de682ab374ad.crl X509v3 Authority Key Identifier: keyid:F2:F7:46:26:DD:E5:85:F9:A8:2A:04:53:8A:26:94:11:41:BF:E8:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/87ec2265-8bb4-4fdc-91d8-de682ab374ad.cer sbgp-ipAddrBlock: critical IPv4: 140.232.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c9:8c:96:7f:1c:5b:ce:fa:cc:eb:f3:90:f2:9d:dc:15:1c: af:ef:ce:88:64:98:be:c9:62:65:fe:f0:dd:65:04:6b:e1:76: cc:de:e0:a5:2b:d6:71:8e:4d:a8:f9:65:4c:b1:99:0a:5f:7d: 1b:48:b0:e9:2d:e0:56:20:93:63:cc:01:99:41:69:ef:61:e8: a9:00:ea:72:eb:11:93:91:0f:af:90:52:b9:0e:7d:5c:27:21: af:12:d9:d7:6b:5f:0f:2f:c2:06:ba:22:3b:fd:89:48:29:5a: 42:31:0b:26:43:17:a3:8b:33:dc:c3:75:d4:10:e1:5e:86:13: 55:b6:7e:cb:2c:22:91:6e:06:d7:41:83:07:e6:4f:6e:cc:aa: 06:4d:89:01:7c:ce:6e:8a:3e:cf:49:7a:61:db:cd:f4:06:ed: 15:19:f8:6c:b6:c9:12:49:bd:cd:2e:4e:86:dc:a5:82:93:33: 3b:bd:80:af:98:85:fc:f2:c8:f5:17:91:57:03:2e:60:7d:50: 7d:6b:89:ae:56:ee:1d:28:4a:43:f7:32:80:ff:93:97:53:7a: e5:94:c3:04:bd:bc:84:47:f3:0f:d7:32:c2:54:b2:45:06:d5: 64:4d:f9:e4:4c:61:cc:a9:19:ba:50:d5:84:03:e9:c6:de:a8: 2f:0d:26:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fMeMuyHO2cW+yY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdlYzIyNjUtOGJiNC00ZmRjLTkxZDgtZGU2ODJhYjM3 NGFkMB4XDTI2MTAwMjE5NTc0NloXDTI2MTIzMTIwNTc0NlowLzEtMCsGA1UEAxMk OGQwM2Y0ZDQtYTYzMi00NDc1LTlhY2MtNzkzMjc4NTE0ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaNxBRRxDEWnTpZZzYGNWEhjUn8cDXynjSWm RvvFTVOQ/5wnXhwZxuB5ZlWGEQxfG60+x6l6jUl5Gt3sNtSt4j73VgpP6YXxv1tw TfD2aHy0an/qHYH1cw9mev5FVutiXgkgJyUPxIEeViRgM2NOW/Ghu324AGUSLbRL XarBVyeluxEfo4CVfKDeC3OHED5MH6/1ugj0aSyF2NUjXJ0z2isEya0AeSdBohNX 62MbnqtY7oDFhY/GbzXrWyRIRuzcVVUAh2bqUR1nax7S2yMGiShxq6X1YH19SIGT 6nWSUgwt/DKBlKdkYO+0hgH2J9CYBLF901F28o+DpKSvdyTGtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9C30hPdptL1nNE4FInOUH6uko7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84N2Vj MjI2NS04YmI0LTRmZGMtOTFkOC1kZTY4MmFiMzc0YWQvMDRjZjAwNWItNTRiYy0z ZDkyLTgwYzctODhmMWMyYWQ5YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvODdlYzIyNjUtOGJiNC00ZmRjLTkx ZDgtZGU2ODJhYjM3NGFkLzg3ZWMyMjY1LThiYjQtNGZkYy05MWQ4LWRlNjgyYWIz NzRhZC5jcmwwHwYDVR0jBBgwFoAU8vdGJt3lhfmoKgRTiiaUEUG/6IcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84N2VjMjI2NS04YmI0LTRmZGMtOTFkOC1kZTY4 MmFiMzc0YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDJjJZ/HFvO+szr85DyndwVHK/vzohkmL7JYmX+8N1lBGvhdsze4KUr 1nGOTaj5ZUyxmQpffRtIsOkt4FYgk2PMAZlBae9h6KkA6nLrEZORD6+QUrkOfVwn Ia8S2ddrXw8vwga6Ijv9iUgpWkIxCyZDF6OLM9zDddQQ4V6GE1W2fsssIpFuBtdB gwfmT27MqgZNiQF8zm6KPs9JemHbzfQG7RUZ+Gy2yRJJvc0uTobcpYKTMzu9gK+Y hfzyyPUXkVcDLmB9UH1ria5W7h0oSkP3MoD/k5dTeuWUwwS9vIRH8w/XMsJUskUG 1WRN+eRMYcypGbpQ1YQD6cbeqC8NJgo= -----END CERTIFICATE-----Generated at Tue Nov 3 00:09:59 2026 by rpki-client