$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa File: 58ec0e37-e22c-32f5-b147-1e377b817c07.roa (raw, json) Hash identifier: 09lMLMsVq3Wy4auDwfGL41bCq1W4Qm3lt4Y1YRCd8Qo= Subject key identifier: F5:69:C0:45:78:40:A7:38:F7:7F:F2:94:C8:24:E4:25:38:96:3D:45 Certificate issuer: /CN=579fe1a7-1d04-4f71-b411-613b966124fb Certificate serial: 010D0C9F4328584AFEE6ACEBC2B44E2055B3BAC0 Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 7018 IP address blocks: 140.235.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:ac:eb:c2:b4:4e:20:55:b3:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=5a61c545-8d46-4829-9c95-2ed31a87b7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:12:40:91:d0:c7:06:cf:05:ce:ee:4b:87:76: 8e:5f:fd:0c:af:4e:89:ce:13:31:53:f0:2b:9e:9e: e8:d8:de:20:5f:3d:8a:66:97:9d:35:7d:cc:f0:f4: f3:44:45:14:ec:78:4b:84:09:bf:ed:72:f8:11:ff: 90:f1:65:c3:82:22:78:45:c5:ca:31:94:cb:81:96: b6:bd:fd:7c:df:0a:b5:a6:52:6a:93:94:4c:14:dc: 86:46:69:65:09:60:00:da:58:88:1d:d4:97:34:b3: 6a:86:97:4e:d7:8e:c6:8f:c1:39:d5:4d:bb:34:7d: 4b:d1:bd:09:80:49:67:86:00:9d:d2:c8:62:93:d0: c4:85:98:be:11:a2:19:bc:cf:95:ee:54:11:3c:ba: a6:72:79:e3:23:6d:e2:78:f3:b5:fd:43:c0:9c:79: ec:42:3e:b6:29:0d:7e:af:15:13:c7:ae:69:f1:9a: 4f:cc:f8:a2:6d:95:e7:6a:5a:79:eb:43:dc:7a:18: 16:29:5a:af:57:b6:8c:96:9f:4b:2e:80:e4:94:f6: fe:a2:6d:d4:14:52:c7:b1:ec:f1:44:9d:3a:03:ef: 4e:b7:27:49:a5:e3:9b:21:ee:63:49:e7:1e:28:ff: 46:8a:25:1d:e6:05:fc:3a:33:d9:27:a5:45:54:cf: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:C0:45:78:40:A7:38:F7:7F:F2:94:C8:24:E4:25:38:96:3D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/58ec0e37-e22c-32f5-b147-1e377b817c07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl X509v3 Authority Key Identifier: keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:01:33:7f:38:18:d9:86:8f:27:e6:5a:e6:52:70:41:81:9f: cf:b6:5a:15:f6:ce:f8:63:db:3f:ba:d3:fc:76:7e:d7:5f:6f: 74:12:90:ef:ef:ff:97:d9:6e:16:9d:d0:c7:34:be:0e:e4:9a: 6f:8e:f1:96:00:34:01:75:0d:c0:fb:48:95:6a:73:6a:d9:59: b2:ff:d5:1b:40:39:6c:72:3f:25:03:82:08:11:96:68:7c:58: 2b:ce:7a:9f:8f:b1:9c:5a:a4:ce:63:4c:b2:f1:13:75:ce:be: 97:07:35:cd:b3:92:07:ac:bb:aa:45:0d:cf:93:df:1e:f1:94: 34:fa:46:f6:a5:7b:96:2c:ea:a8:93:94:88:ea:d8:71:73:3f: f5:ee:ef:56:4d:66:64:14:5e:35:87:75:58:3c:e6:0c:ad:5c: df:10:fc:83:e6:6d:5a:b8:c0:ca:9f:e4:e3:1c:ec:f6:ef:d1: 4c:65:8e:14:ed:05:35:9f:29:1c:6b:5f:fa:07:e7:3e:08:15: 96:12:c1:5b:22:50:62:e0:63:b7:01:7e:e9:37:ac:bb:ff:17: b5:b3:0b:3a:00:c0:52:fa:cd:03:9b:98:d2:8d:de:46:f3:eb: e0:7d:7a:28:32:3b:d7:3b:8c:2f:29:63:6f:d2:a7:1f:8f:14: 31:aa:79:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5qzrwrROIFWzusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy NGZiMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NWE2MWM1NDUtOGQ0Ni00ODI5LTljOTUtMmVkMzFhODdiN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxJAkdDHBs8Fzu5Lh3aOX/0Mr06JzhMxU/Ar np7o2N4gXz2KZpedNX3M8PTzREUU7HhLhAm/7XL4Ef+Q8WXDgiJ4RcXKMZTLgZa2 vf183wq1plJqk5RMFNyGRmllCWAA2liIHdSXNLNqhpdO147Gj8E51U27NH1L0b0J gElnhgCd0shik9DEhZi+EaIZvM+V7lQRPLqmcnnjI23iePO1/UPAnHnsQj62KQ1+ rxUTx65p8ZpPzPiibZXnalp560PcehgWKVqvV7aMlp9LLoDklPb+om3UFFLHsezx RJ06A+9OtydJpeObIe5jSeceKP9GiiUd5gX8OjPZJ6VFVM9KrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVpwEV4QKc493/ylMgk5CU4lj1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvNThlYzBlMzctZTIyYy0z MmY1LWIxNDctMWUzNzdiODE3YzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0 MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIABM384GNmGjyfmWuZScEGBn8+2WhX2zvhj2z+60/x2ftdfb3QSkO/v /5fZbhad0Mc0vg7kmm+O8ZYANAF1DcD7SJVqc2rZWbL/1RtAOWxyPyUDgggRlmh8 WCvOep+PsZxapM5jTLLxE3XOvpcHNc2zkgesu6pFDc+T3x7xlDT6Rvale5Ys6qiT lIjq2HFzP/Xu71ZNZmQUXjWHdVg85gytXN8Q/IPmbVq4wMqf5OMc7Pbv0UxljhTt BTWfKRxrX/oH5z4IFZYSwVsiUGLgY7cBfuk3rLv/F7WzCzoAwFL6zQObmNKN3kbz 6+B9eigyO9c7jC8pY2/Spx+PFDGqeUI= -----END CERTIFICATE-----Generated at Thu Oct 30 03:15:57 2025 by rpki-client