$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa File: 57bcb923-f2ed-369e-a204-a3e207938dd0.roa (raw, json) Hash identifier: i1xBHmI9VoLWBDcnKrDuDih6ABxMhPpN2IMPM8ydMK8= Subject key identifier: 43:78:4B:0C:30:72:1A:F8:3A:54:BC:A0:C9:9D:02:6D:8E:42:A6:53 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584EC371B89AB992EFA93C320EC0 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 205329 IP address blocks: 140.235.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b8:9a:b9:92:ef:a9:3c:32:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=de272b03-20dd-4e5a-8aa9-8d418055b32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f9:29:69:fb:63:29:b0:e4:58:3e:32:dc:a4: a6:ca:d0:52:05:5d:4c:c2:3f:74:a8:1b:5e:61:e3: 94:2c:85:1f:de:36:38:6f:ee:60:6c:80:aa:4c:98: 26:37:08:26:d0:54:1b:09:99:b8:b5:a9:18:19:f3: 22:77:54:93:8e:73:2b:5f:79:d6:2c:12:b0:cf:e0: 79:55:fb:d3:de:b1:4a:0a:a0:64:0a:bd:09:75:94: e2:73:2e:f3:e3:a0:58:cb:b4:43:aa:73:f7:d9:d0: 3f:d6:80:e6:c1:10:a7:2e:66:0c:11:65:0a:9f:e6: b8:eb:72:9c:09:92:e3:2c:02:f8:3c:85:54:73:22: 3b:9a:b0:b5:b3:f1:c0:a3:48:18:91:42:f8:db:84: d8:0f:18:34:f9:88:66:9c:82:56:2a:7d:07:b9:02: 22:9e:67:16:9f:2b:3d:e3:f1:6a:19:82:ad:6b:ea: e5:9a:c3:0a:11:41:92:3b:ca:4e:95:c8:b3:d2:60: 1f:f2:a0:cc:e9:1f:75:9d:6a:fa:8f:cf:54:41:20: a5:1b:26:6a:34:d9:3c:72:ff:46:ac:99:7e:69:03: ee:b5:f5:7f:7c:56:d9:7d:51:21:b5:c9:32:e5:37: 1b:81:90:8d:15:cf:ac:e1:69:3a:21:6d:43:18:83: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:4B:0C:30:72:1A:F8:3A:54:BC:A0:C9:9D:02:6D:8E:42:A6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/57bcb923-f2ed-369e-a204-a3e207938dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:8b:33:09:7d:55:f0:86:d6:23:92:51:9c:f3:91:5f:c5:df: 6e:76:1c:17:40:8c:7a:8e:b8:85:38:80:30:ed:76:76:1d:ba: fb:6e:81:3c:25:0e:da:d4:8a:f9:6f:af:4f:58:e7:38:33:68: 83:a5:77:56:cd:08:2a:78:e6:41:a5:31:2b:93:ef:bc:c2:ad: 74:01:b5:1d:04:9d:4c:5d:ef:e9:ad:79:31:3d:78:86:43:fc: 17:f6:1e:fc:82:a3:10:28:fb:f4:c4:60:df:f7:86:d0:61:af: a0:81:01:af:72:46:ee:3b:82:17:24:b4:08:d2:b4:d8:a4:4f: c9:e6:38:ec:8f:48:85:87:a3:da:8c:cc:3a:41:4d:b7:e0:95: 70:cf:02:b2:7a:81:bc:03:bf:39:e1:e8:52:86:a6:6e:7d:29: 7f:0d:72:e3:b6:fa:8c:70:e2:cf:c9:3e:dd:a7:9a:35:33:56: 14:03:2f:75:19:c6:90:be:ba:8f:71:11:f8:5d:0c:2c:1b:8d: b3:56:76:44:f0:57:62:46:71:ed:d9:2e:9a:b1:e0:4d:0c:d0: 30:3c:9b:26:66:80:91:35:4d:ef:15:a5:ad:b5:7a:fe:ff:c3: ac:d6:c8:f9:6c:a5:57:46:2a:20:c9:33:18:92:91:fd:e5:dc: 41:f3:29:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbiauZLvqTwyDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZGUyNzJiMDMtMjBkZC00ZTVhLThhYTktOGQ0MTgwNTViMzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvkpaftjKbDkWD4y3KSmytBSBV1Mwj90qBte YeOULIUf3jY4b+5gbICqTJgmNwgm0FQbCZm4takYGfMid1STjnMrX3nWLBKwz+B5 VfvT3rFKCqBkCr0JdZTicy7z46BYy7RDqnP32dA/1oDmwRCnLmYMEWUKn+a463Kc CZLjLAL4PIVUcyI7mrC1s/HAo0gYkUL424TYDxg0+YhmnIJWKn0HuQIinmcWnys9 4/FqGYKta+rlmsMKEUGSO8pOlciz0mAf8qDM6R91nWr6j89UQSClGyZqNNk8cv9G rJl+aQPutfV/fFbZfVEhtcky5TcbgZCNFc+s4Wk6IW1DGIP1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN4Swwwchr4OlS8oMmdAm2OQqZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvNTdiY2I5MjMtZjJlZC0z NjllLWEyMDQtYTNlMjA3OTM4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeLMwl9VfCG1iOSUZzzkV/F3252HBdAjHqOuIU4gDDtdnYduvtugTwl DtrUivlvr09Y5zgzaIOld1bNCCp45kGlMSuT77zCrXQBtR0EnUxd7+mteTE9eIZD /Bf2HvyCoxAo+/TEYN/3htBhr6CBAa9yRu47ghcktAjStNikT8nmOOyPSIWHo9qM zDpBTbfglXDPArJ6gbwDvznh6FKGpm59KX8NcuO2+oxw4s/JPt2nmjUzVhQDL3UZ xpC+uo9xEfhdDCwbjbNWdkTwV2JGce3ZLpqx4E0M0DA8myZmgJE1Te8Vpa21ev7/ w6zWyPlspVdGKiDJMxiSkf3l3EHzKbc= -----END CERTIFICATE-----Generated at Thu Aug 27 07:56:17 2026 by rpki-client