$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa File: ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa (raw, json) Hash identifier: jPxbhXOv4M+ZCFcQnk3OTGgRZVPv3/kxezbHzfzEEXI= Subject key identifier: E6:9D:F7:D4:58:D0:B2:57:13:D2:1B:43:0A:50:E6:3D:C5:F9:4B:8D Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584B82117B90A99DB36DA583B540 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa Signing time: Mon 13 Oct 2025 12:38:01 +0000 ROA not before: Mon 13 Oct 2025 12:38:01 +0000 ROA not after: Sun 11 Jan 2026 13:38:01 +0000 asID: 205329 IP address blocks: 140.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:11:7b:90:a9:9d:b3:6d:a5:83:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Oct 13 12:38:01 2025 GMT Not After : Jan 11 13:38:01 2026 GMT Subject: CN=83bfacc8-ba3d-4ae5-b525-089be92efade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:62:a8:c0:76:fc:03:b4:11:ae:80:1b:c8:0f: cd:b4:11:c2:f4:ec:25:ee:1c:db:77:af:60:15:74: 77:4c:82:27:d1:f9:b0:43:9a:2f:91:58:68:9d:0f: 5a:49:55:6d:7f:1e:a5:86:13:e3:09:13:06:b7:f8: 42:e4:f6:c6:3b:55:36:ac:de:3a:78:2c:c1:f6:1b: f6:4b:bc:f5:ed:63:50:e2:4a:bf:c5:39:22:0e:af: 64:91:8b:f0:0e:20:53:a1:32:f1:24:9b:7f:7a:c8: 10:47:d9:66:c4:9f:55:29:d0:da:37:9f:ee:ef:35: 5d:ea:8b:40:38:2e:f3:50:04:05:b9:4c:fa:ac:b2: 52:3c:54:e1:bc:65:3d:a4:e5:6b:c6:09:f1:8d:37: 3c:ed:33:94:59:c2:e6:00:ff:72:a7:8d:8f:e9:61: 5a:18:d2:0d:74:b1:ed:0a:a1:2f:dd:e3:b1:89:d4: a5:55:48:b5:3f:76:b2:fb:9f:ce:4e:28:24:be:1f: 37:e3:8b:ce:08:fb:e7:37:65:73:c7:c9:d5:73:4b: 91:23:80:0c:f0:d2:de:58:4c:91:87:5d:4d:4e:7b: 63:5c:e6:02:39:c4:dd:94:d6:31:59:53:b2:3f:b0: a7:40:f1:bd:2a:69:41:3b:e6:26:66:f1:97:0d:cf: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9D:F7:D4:58:D0:B2:57:13:D2:1B:43:0A:50:E6:3D:C5:F9:4B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5a:10:05:44:99:66:f5:a5:b6:2a:1e:fe:65:ce:d6:57:5c: c3:5f:27:30:02:13:35:51:60:ed:ed:d6:f2:03:52:76:3e:f4: 9d:d6:ff:2a:dc:7e:73:d3:25:cf:fa:e3:e0:50:71:e3:96:d6: 6d:fd:29:49:cd:c0:ed:b8:dc:77:ac:32:58:00:39:5a:66:2c: a1:de:fa:f3:af:6c:f2:f7:ca:a5:f2:bc:fb:60:6b:a7:4a:2c: cf:c8:28:71:36:88:b2:ec:c8:f2:73:73:4b:e3:47:43:76:a6: a9:ac:fa:5c:05:06:d9:44:43:4b:68:99:e4:a2:33:b3:2b:2c: f4:08:05:76:d9:1b:4f:6a:b6:3e:41:d9:b4:0a:f1:ad:68:10: aa:ce:89:49:b2:3e:3f:5a:ea:16:7f:97:f1:d1:c3:1c:b2:99: e4:65:d6:dc:34:d6:0f:bb:5f:e0:86:94:40:95:0d:67:12:11: 2b:81:0e:8c:a2:aa:68:08:c5:da:26:99:95:5c:9b:b4:f3:43: de:e8:70:24:2a:31:f3:5d:b1:2e:ab:50:1d:36:ec:ba:75:bd: ee:fa:01:ce:d1:d8:0a:d1:21:b5:2d:0f:86:d9:98:b0:ef:c0: ce:cf:a1:59:0b:93:92:a3:b6:76:18:d1:3e:68:45:74:03:01: 3a:ee:ac:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCEXuQqZ2zbaWDtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI1MTAxMzEyMzgwMVoXDTI2MDExMTEzMzgwMVowLzEtMCsGA1UEAxMk ODNiZmFjYzgtYmEzZC00YWU1LWI1MjUtMDg5YmU5MmVmYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGKowHb8A7QRroAbyA/NtBHC9Owl7hzbd69g FXR3TIIn0fmwQ5ovkVhonQ9aSVVtfx6lhhPjCRMGt/hC5PbGO1U2rN46eCzB9hv2 S7z17WNQ4kq/xTkiDq9kkYvwDiBToTLxJJt/esgQR9lmxJ9VKdDaN5/u7zVd6otA OC7zUAQFuUz6rLJSPFThvGU9pOVrxgnxjTc87TOUWcLmAP9yp42P6WFaGNINdLHt CqEv3eOxidSlVUi1P3ay+5/OTigkvh8344vOCPvnN2Vzx8nVc0uRI4AM8NLeWEyR h11NTntjXOYCOcTdlNYxWVOyP7CnQPG9KmlBO+YmZvGXDc+ZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOad99RY0LJXE9IbQwpQ5j3F+UuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvYWNlMzRhYTAtM2U2NS0z MGJkLWIyNjQtOWQyZTM1MTRjZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpaEAVEmWb1pbYqHv5lztZXXMNfJzACEzVRYO3t1vIDUnY+9J3W/yrc fnPTJc/64+BQceOW1m39KUnNwO243HesMlgAOVpmLKHe+vOvbPL3yqXyvPtga6dK LM/IKHE2iLLsyPJzc0vjR0N2pqms+lwFBtlEQ0tomeSiM7MrLPQIBXbZG09qtj5B 2bQK8a1oEKrOiUmyPj9a6hZ/l/HRwxyymeRl1tw01g+7X+CGlECVDWcSESuBDoyi qmgIxdommZVcm7TzQ97ocCQqMfNdsS6rUB027Lp1ve76Ac7R2ArRIbUtD4bZmLDv wM7PoVkLk5KjtnYY0T5oRXQDATrurH0= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:39 2025 by rpki-client