$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa File: 57bcb923-f2ed-369e-a204-a3e207938dd0.roa (raw, json) Hash identifier: 5eB/5/cFTXWTjrVhJp4avOFChAeyCal4VcJVMN8HC2k= Subject key identifier: 3B:7D:84:55:F9:AE:5C:A7:53:64:A5:7B:66:F3:05:F3:FA:F6:B7:38 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584F655D6EBE88A5C12EC7B3B080 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 205329 IP address blocks: 140.235.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6e:be:88:a5:c1:2e:c7:b3:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=c5ba72a2-22dc-4a4d-87fa-781255a7d06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:d4:d4:de:d5:c6:cb:58:39:87:78:ab:d8: 4d:2c:d4:40:98:57:69:ec:c6:73:f3:29:33:e4:76: db:f2:12:37:45:84:8c:88:46:67:c2:6b:38:9c:64: 25:bc:b4:25:37:f8:dd:ca:33:9c:56:07:69:18:4f: 7e:8e:7f:6a:c4:84:d4:c5:6a:74:a6:f4:7e:e3:bd: 35:f1:ea:0f:53:93:ef:55:09:1a:cd:dd:1f:da:ae: 85:17:9f:2d:f1:bd:6c:dc:05:84:9a:f1:51:7f:09: 99:92:03:14:30:d7:47:b5:d9:1b:7b:c7:71:ff:91: b5:5c:ff:b0:82:85:68:08:52:46:ae:8b:19:ff:c6: df:94:7e:03:12:94:18:ca:16:53:2f:e3:4e:c9:e3: 57:e3:64:37:98:9f:e9:af:7d:69:b8:6e:b9:a1:3b: ca:d2:3c:f1:d7:99:ae:a4:d2:5e:52:c9:e3:50:d5: df:a9:7d:24:1e:67:3a:a4:f1:83:ef:1d:b3:00:87: 32:fc:de:b2:d7:60:c6:31:10:cc:22:ae:c6:e4:ec: fc:75:1c:7c:de:01:ff:e4:71:44:7c:6b:91:0b:7f: d3:67:c5:87:c1:4d:f9:a6:2c:02:94:06:4b:cf:5d: a7:33:20:32:9b:fa:7b:8e:47:89:77:09:43:a9:a1: c2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7D:84:55:F9:AE:5C:A7:53:64:A5:7B:66:F3:05:F3:FA:F6:B7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7e:c3:54:c3:29:3e:da:cf:d8:76:5f:dc:ca:f9:25:0e:01: 66:84:aa:d5:75:37:89:fc:01:ea:2e:17:15:c1:d9:fd:88:47: 28:31:4c:74:c2:f2:9d:3f:c2:07:97:a3:50:04:39:c5:df:54: 3d:bf:ff:b2:28:71:e1:34:9a:ee:c0:0e:14:c2:09:71:98:a6: 78:90:0a:fe:b2:3b:0d:46:68:c3:aa:e0:b8:89:2c:64:28:76: 3b:10:16:d4:b3:ef:fb:35:10:04:91:47:91:e5:23:c3:15:ca: 4f:2a:7e:18:9d:cf:d8:04:74:f7:fa:d4:b9:55:54:8e:d9:86: fd:ec:c7:82:c9:21:b6:f5:ba:09:ac:ac:19:0a:b8:95:b5:b3: 52:c8:96:37:7d:76:fa:46:14:04:05:3f:02:07:82:54:23:c1: bd:32:b6:05:b1:28:fc:63:73:28:b0:24:ee:7e:ce:41:e8:99: e8:b5:08:12:45:07:4f:ee:a2:f1:97:a6:bd:81:55:f1:8f:03: a8:84:8f:0b:20:4a:ce:42:17:55:86:ef:b1:ba:55:95:66:b7: ae:5c:4a:28:8f:96:7d:27:0c:9a:14:ed:58:bb:2d:fb:68:e2: 00:73:c7:5b:c3:08:21:df:28:8c:e4:e1:15:77:7c:b3:c8:60: 6c:ac:79:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXW6+iKXBLsezsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YzViYTcyYTItMjJkYy00YTRkLTg3ZmEtNzgxMjU1YTdkMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy3U1N7VxstYOYd4q9hNLNRAmFdp7MZz8ykz 5Hbb8hI3RYSMiEZnwms4nGQlvLQlN/jdyjOcVgdpGE9+jn9qxITUxWp0pvR+4701 8eoPU5PvVQkazd0f2q6FF58t8b1s3AWEmvFRfwmZkgMUMNdHtdkbe8dx/5G1XP+w goVoCFJGrosZ/8bflH4DEpQYyhZTL+NOyeNX42Q3mJ/pr31puG65oTvK0jzx15mu pNJeUsnjUNXfqX0kHmc6pPGD7x2zAIcy/N6y12DGMRDMIq7G5Oz8dRx83gH/5HFE fGuRC3/TZ8WHwU35piwClAZLz12nMyAym/p7jkeJdwlDqaHCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDt9hFX5rlynU2Sle2bzBfP69rc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvNTdiY2I5MjMtZjJlZC0z NjllLWEyMDQtYTNlMjA3OTM4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh+w1TDKT7az9h2X9zK+SUOAWaEqtV1N4n8AeouFxXB2f2IRygxTHTC 8p0/wgeXo1AEOcXfVD2//7IoceE0mu7ADhTCCXGYpniQCv6yOw1GaMOq4LiJLGQo djsQFtSz7/s1EASRR5HlI8MVyk8qfhidz9gEdPf61LlVVI7Zhv3sx4LJIbb1ugms rBkKuJW1s1LIljd9dvpGFAQFPwIHglQjwb0ytgWxKPxjcyiwJO5+zkHomei1CBJF B0/uovGXpr2BVfGPA6iEjwsgSs5CF1WG77G6VZVmt65cSiiPln0nDJoU7Vi7Lfto 4gBzx1vDCCHfKIzk4RV3fLPIYGyseT0= -----END CERTIFICATE-----Generated at Sun Oct 11 20:44:34 2026 by rpki-client