$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa File: 207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa (raw, json) Hash identifier: 2NGztA4r6gAOfpYhkKgeDF6a9/TS6+oyJ8WT36sDozw= Subject key identifier: FA:FF:42:0E:FA:81:98:5F:77:D3:F9:C0:18:D2:15:EB:0D:7F:19:BF Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584F655D6E33BF40FF1BCED841C0 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 199594 IP address blocks: 140.235.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6e:33:bf:40:ff:1b:ce:d8:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=31d58702-2e4f-4055-aad0-cb7a491d44b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f6:16:7c:92:f5:6e:ed:1b:97:d5:c2:eb:8e: 9a:8c:69:6a:7d:4d:d7:bd:6e:a6:d0:ea:c4:bf:fe: 87:18:21:69:5d:19:55:16:a3:66:d9:cc:a3:59:ec: 75:62:b0:72:67:2c:7b:3e:fe:fd:a1:6a:ca:3f:ac: 39:5c:e2:09:30:82:92:f2:4a:d6:d3:ee:20:8f:52: 1f:cc:df:93:86:43:71:ea:13:f4:03:15:7d:9f:63: 00:f1:13:94:7b:76:7d:dd:3b:df:29:33:28:d3:a0: db:b9:85:bc:74:b8:07:8b:af:c4:d4:d2:97:ea:73: 8e:70:d9:f0:96:77:e7:43:cf:72:1c:5f:98:00:ec: 72:84:5d:8c:23:59:6e:e0:8e:23:cc:de:3b:80:bb: 86:3d:c7:87:88:2f:39:61:ae:b5:bd:27:cd:c9:a3: ba:96:91:14:fb:0d:02:e7:19:97:04:63:4e:00:65: 4e:1c:e5:b0:b7:b1:26:54:f5:9e:d6:80:fc:04:96: 80:d3:00:95:2b:d0:32:c6:6f:42:80:37:d1:d3:7d: e2:82:29:2b:5c:a2:ce:fc:a8:14:ab:3b:22:ec:48: 36:92:29:97:68:91:34:cb:17:db:2a:60:7b:c6:3a: c7:66:f0:d1:38:0a:f5:ef:88:11:23:87:fc:e8:58: 41:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:42:0E:FA:81:98:5F:77:D3:F9:C0:18:D2:15:EB:0D:7F:19:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c2:b8:f7:76:c2:b7:5f:f4:7b:ab:0e:dd:f6:8a:d0:6f:08: a3:52:34:9a:39:c1:e2:88:30:aa:29:f2:41:5f:da:d0:ee:b6: 0b:07:8e:4d:fa:0e:ef:73:cc:d1:1c:ec:79:c8:10:d8:b2:e2: b2:31:2f:94:81:69:9d:8a:85:94:9c:4e:fd:79:78:bf:35:58: 73:f9:e8:6d:fb:86:28:e5:92:3d:53:f3:1a:87:70:6b:61:42: 97:f6:cc:92:89:60:c5:48:4d:2f:22:0d:89:a4:d8:a2:b6:67: 86:92:21:2c:eb:bc:66:ad:38:1f:c1:68:0c:ce:07:2b:2c:3a: 6c:56:36:6d:dc:67:85:d7:01:a2:ef:34:b9:fd:43:40:2a:80: ad:a2:ac:9b:66:f4:2b:2f:63:c8:8e:60:34:3f:2e:5e:bc:dd: 69:32:1d:e7:e6:e9:52:05:ae:79:4c:ad:b2:72:0d:2d:0b:fa: 90:f1:ef:80:84:08:7c:0e:98:25:0a:94:97:03:66:6d:ca:55: 7e:e5:7e:83:9a:9d:00:10:7d:ac:82:91:b7:d0:a3:e8:98:84: 3d:3f:d5:bb:11:60:d5:ef:c2:e9:65:ab:e4:f2:e3:61:96:0f: 94:4c:83:1c:fb:60:b6:b5:7a:13:7c:9c:09:12:9e:33:01:74: d7:cf:f1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW4zv0D/G87YQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MzFkNTg3MDItMmU0Zi00MDU1LWFhZDAtY2I3YTQ5MWQ0NGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/YWfJL1bu0bl9XC646ajGlqfU3XvW6m0OrE v/6HGCFpXRlVFqNm2cyjWex1YrByZyx7Pv79oWrKP6w5XOIJMIKS8krW0+4gj1If zN+ThkNx6hP0AxV9n2MA8ROUe3Z93TvfKTMo06DbuYW8dLgHi6/E1NKX6nOOcNnw lnfnQ89yHF+YAOxyhF2MI1lu4I4jzN47gLuGPceHiC85Ya61vSfNyaO6lpEU+w0C 5xmXBGNOAGVOHOWwt7EmVPWe1oD8BJaA0wCVK9Ayxm9CgDfR033igikrXKLO/KgU qzsi7Eg2kimXaJE0yxfbKmB7xjrHZvDROAr174gRI4f86FhBPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPr/Qg76gZhfd9P5wBjSFesNfxm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvMjA3YzViYTgtYTZmNC0z OGI1LWI2YTQtODc1ZTc3MmYwZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDCuPd2wrdf9HurDt32itBvCKNSNJo5weKIMKop8kFf2tDutgsHjk36 Du9zzNEc7HnIENiy4rIxL5SBaZ2KhZScTv15eL81WHP56G37hijlkj1T8xqHcGth Qpf2zJKJYMVITS8iDYmk2KK2Z4aSISzrvGatOB/BaAzOByssOmxWNm3cZ4XXAaLv NLn9Q0AqgK2irJtm9CsvY8iOYDQ/Ll683WkyHefm6VIFrnlMrbJyDS0L+pDx74CE CHwOmCUKlJcDZm3KVX7lfoOanQAQfayCkbfQo+iYhD0/1bsRYNXvwullq+Ty42GW D5RMgxz7YLa1ehN8nAkSnjMBdNfP8TA= -----END CERTIFICATE-----Generated at Fri Oct 9 15:19:29 2026 by rpki-client