$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa File: 207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa (raw, json) Hash identifier: ePZHe0WvV5vT4lzzSNMRG4T4VsfUnceW4TrHm9Y/NaM= Subject key identifier: D4:77:39:22:9D:55:01:9E:B7:A5:A4:E8:E5:98:7F:89:F0:2A:DB:C9 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584B82112F99E3BA08F5B7BA9E00 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa Signing time: Mon 13 Oct 2025 12:37:25 +0000 ROA not before: Mon 13 Oct 2025 12:37:25 +0000 ROA not after: Sun 11 Jan 2026 13:37:25 +0000 asID: 199594 IP address blocks: 140.235.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:11:2f:99:e3:ba:08:f5:b7:ba:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Oct 13 12:37:25 2025 GMT Not After : Jan 11 13:37:25 2026 GMT Subject: CN=0b530536-5e89-46b5-95ba-d2dee154528d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:fe:36:50:b2:18:86:36:ee:8f:67:ed:c7: 27:cb:91:95:6f:be:03:ce:22:a2:d9:ad:af:d6:56: da:0b:d1:3f:72:b7:76:7b:65:31:e0:ce:c1:dc:77: 52:1c:19:46:96:0e:13:98:6a:4b:7b:84:51:67:ca: bf:f8:df:a8:49:a5:df:33:34:7d:e1:68:42:bc:b2: df:7f:45:84:d7:ae:b3:4e:13:29:ae:b2:78:4e:36: f7:d6:3a:22:0b:5f:ac:be:5f:6a:fd:18:1f:29:df: 3b:8e:3b:4f:38:66:2c:bd:fc:ee:70:4f:90:d3:7e: 5c:21:02:15:e4:38:b0:75:06:f1:4b:17:9e:85:61: 2b:58:cc:03:34:c5:c8:eb:24:bc:47:ae:31:79:11: 48:8a:16:af:ca:5a:c7:fe:45:46:33:5c:17:6c:d3: 86:dc:40:3b:67:91:d2:3b:9d:90:04:16:7a:90:85: 70:e2:4e:c6:35:9a:8a:9a:5a:43:22:20:2d:4e:8f: c4:06:5e:3d:4b:88:45:a5:b4:27:f1:61:8a:5c:70: 3f:55:d8:a3:02:30:fa:fb:10:9d:89:b0:a9:c6:79: 9e:25:ef:bf:9b:a0:c7:db:ed:25:0a:e6:76:89:e2: 68:ce:db:4e:f3:bd:e1:71:cd:d3:84:f2:d5:5b:46: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:77:39:22:9D:55:01:9E:B7:A5:A4:E8:E5:98:7F:89:F0:2A:DB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:80:34:84:68:a7:fa:23:51:be:8a:f6:14:ec:c7:d4:34:39: 99:1a:e0:2c:f8:64:1e:73:0b:a5:31:f5:24:51:28:25:31:b6: 22:10:72:dd:2a:25:df:4b:58:d4:ac:e0:95:d3:43:4e:76:e3: 52:97:ac:7b:45:09:ef:ff:cf:57:3e:d2:ba:b7:63:9d:b2:be: 24:77:aa:c0:42:14:90:92:63:6e:9b:64:26:16:e3:0b:ea:9a: 11:3c:48:a9:9e:bd:3b:72:01:01:da:b9:e6:5f:54:71:94:69: 73:b0:9c:e1:ef:de:ee:b1:b2:df:f0:69:5e:f6:b9:c6:c0:98: 0e:76:5d:46:4e:75:c9:84:81:8a:13:b5:65:45:c8:89:cf:b2: 9d:cb:78:cd:cd:e8:35:4d:d4:bd:16:fd:f7:02:79:d4:71:52: d6:6a:88:c6:21:0a:83:bb:63:5f:12:63:c7:9f:6a:c6:db:88: 54:00:a7:6b:dd:15:b8:7e:ce:68:73:79:c0:71:30:e4:98:f6: 0e:83:ca:c1:2e:29:20:03:8c:e8:d2:51:fa:11:87:da:fc:1a: df:2e:79:5a:82:1d:6a:9b:86:c7:8f:cd:e3:34:d7:82:56:ba: 96:c2:10:69:ba:e5:c5:43:25:ad:6c:25:ce:d0:40:82:01:d9: ff:75:2e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCES+Z47oI9be6ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI1MTAxMzEyMzcyNVoXDTI2MDExMTEzMzcyNVowLzEtMCsGA1UEAxMk MGI1MzA1MzYtNWU4OS00NmI1LTk1YmEtZDJkZWUxNTQ1MjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkL+NlCyGIY27o9n7ccny5GVb74DziKi2a2v 1lbaC9E/crd2e2Ux4M7B3HdSHBlGlg4TmGpLe4RRZ8q/+N+oSaXfMzR94WhCvLLf f0WE166zThMprrJ4Tjb31joiC1+svl9q/RgfKd87jjtPOGYsvfzucE+Q035cIQIV 5DiwdQbxSxeehWErWMwDNMXI6yS8R64xeRFIihavylrH/kVGM1wXbNOG3EA7Z5HS O52QBBZ6kIVw4k7GNZqKmlpDIiAtTo/EBl49S4hFpbQn8WGKXHA/VdijAjD6+xCd ibCpxnmeJe+/m6DH2+0lCuZ2ieJozttO873hcc3ThPLVW0br/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR3OSKdVQGet6Wk6OWYf4nwKtvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvMjA3YzViYTgtYTZmNC0z OGI1LWI2YTQtODc1ZTc3MmYwZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ANIRop/ojUb6K9hTsx9Q0OZka4Cz4ZB5zC6Ux9SRRKCUxtiIQct0q Jd9LWNSs4JXTQ05241KXrHtFCe//z1c+0rq3Y52yviR3qsBCFJCSY26bZCYW4wvq mhE8SKmevTtyAQHaueZfVHGUaXOwnOHv3u6xst/waV72ucbAmA52XUZOdcmEgYoT tWVFyInPsp3LeM3N6DVN1L0W/fcCedRxUtZqiMYhCoO7Y18SY8efasbbiFQAp2vd Fbh+zmhzecBxMOSY9g6DysEuKSADjOjSUfoRh9r8Gt8ueVqCHWqbhsePzeM014JW upbCEGm65cVDJa1sJc7QQIIB2f91LsI= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:44 2025 by rpki-client