$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa File: ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa (raw, json) Hash identifier: CUYKDGNiwrQPIJRPnYi1fuNAFus9N9/4lgPA08BKR2k= Subject key identifier: 98:55:3C:8F:5D:EC:64:07:EC:DE:48:A4:93:75:D1:EE:F3:79:3C:DB Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584F655D69F19BAAE342D483AC00 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 205329 IP address blocks: 140.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:69:f1:9b:aa:e3:42:d4:83:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=2542c628-b43a-4962-93ef-5b7f8ee2a7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:4b:01:c6:a5:e0:80:c2:19:b6:84:f3:71: be:52:e4:31:50:56:c3:4f:b2:11:14:88:d7:f8:de: 37:b9:af:08:dd:ac:1d:4b:f6:0e:7f:20:55:a1:61: 0e:2d:3f:c9:35:80:40:e7:55:01:18:24:08:05:1c: bb:0e:28:e1:5a:d4:04:50:05:91:56:02:30:67:ce: 3b:7f:63:fd:11:35:5f:f5:ed:6a:61:b0:c5:be:42: 03:96:08:c1:b8:3c:7e:79:fa:be:d7:58:04:ac:5d: af:cf:2b:86:ac:90:af:93:f0:35:a3:0d:99:76:23: 1f:36:3f:c4:05:90:20:53:ff:42:7b:79:2d:ec:9a: 06:ba:00:ec:01:44:06:c7:40:b4:ce:67:75:f9:ff: dc:45:bc:53:b7:b0:de:f7:e0:7f:70:52:7c:06:8a: 89:a2:a7:92:08:61:2f:b2:2f:b4:5d:29:4b:e3:52: 7b:36:be:12:a1:6e:78:7d:af:a7:0e:4d:01:e5:59: 37:e3:13:f9:f4:7e:c1:21:c6:a0:61:61:a2:23:54: bc:93:d9:97:e3:63:52:8e:1c:f2:cc:ab:dd:e7:0d: a6:5f:80:1a:a2:7b:48:97:2f:9f:00:b3:ec:45:35: f7:57:13:a3:2d:d3:13:d3:49:13:b4:2f:95:24:4c: fe:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:55:3C:8F:5D:EC:64:07:EC:DE:48:A4:93:75:D1:EE:F3:79:3C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e9:d0:c3:a3:91:e5:a5:1c:aa:99:51:0a:dd:db:4f:13:4d: 45:47:50:c7:0f:2d:d5:4e:69:b3:42:49:c8:63:30:48:86:03: 38:e5:34:ed:07:cb:2a:d1:8b:da:fb:4e:53:be:5b:e5:90:dd: 63:ae:4d:de:63:dd:91:3e:bb:8f:bd:f0:11:72:40:0d:ab:14: 83:de:1e:fb:a7:b5:4b:a0:26:a0:ab:77:83:cf:d9:42:9f:e8: 55:9b:a2:4c:1e:27:4c:cf:38:78:98:75:9c:06:40:c4:f0:98: ed:6d:6a:90:ba:db:f6:55:a9:2a:95:8a:8b:5b:a3:2f:03:7b: 0c:3e:4b:46:e7:5d:01:4f:94:54:ab:b7:df:d4:e8:b0:b4:02: b6:59:b0:f6:25:35:08:fa:d6:72:93:02:f3:79:81:36:22:95: 2e:ac:60:40:64:99:61:de:ee:5d:be:31:9e:7b:44:97:dc:b2: 8b:76:49:5d:77:66:25:a8:53:4a:ac:f0:93:21:9b:81:f9:f7: e6:a9:7c:c6:58:c5:5f:60:e0:a3:01:e3:d5:39:05:ac:da:12: d7:e6:fa:6a:ff:33:0c:ac:cc:2a:1a:ad:b7:3c:a8:ae:73:3e: 27:08:f1:8a:b1:9f:df:2e:aa:bb:c1:46:3a:35:43:0d:b7:62: 9a:91:76:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWnxm6rjQtSDrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MjU0MmM2MjgtYjQzYS00OTYyLTkzZWYtNWI3ZjhlZTJhN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsctLAcal4IDCGbaE83G+UuQxUFbDT7IRFIjX +N43ua8I3awdS/YOfyBVoWEOLT/JNYBA51UBGCQIBRy7DijhWtQEUAWRVgIwZ847 f2P9ETVf9e1qYbDFvkIDlgjBuDx+efq+11gErF2vzyuGrJCvk/A1ow2ZdiMfNj/E BZAgU/9Ce3kt7JoGugDsAUQGx0C0zmd1+f/cRbxTt7De9+B/cFJ8BoqJoqeSCGEv si+0XSlL41J7Nr4SoW54fa+nDk0B5Vk34xP59H7BIcagYWGiI1S8k9mX42NSjhzy zKvd5w2mX4AaontIly+fALPsRTX3VxOjLdMT00kTtC+VJEz+9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhVPI9d7GQH7N5IpJN10e7zeTzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvYWNlMzRhYTAtM2U2NS0z MGJkLWIyNjQtOWQyZTM1MTRjZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7p0MOjkeWlHKqZUQrd208TTUVHUMcPLdVOabNCSchjMEiGAzjlNO0H yyrRi9r7TlO+W+WQ3WOuTd5j3ZE+u4+98BFyQA2rFIPeHvuntUugJqCrd4PP2UKf 6FWbokweJ0zPOHiYdZwGQMTwmO1tapC62/ZVqSqViotboy8Deww+S0bnXQFPlFSr t9/U6LC0ArZZsPYlNQj61nKTAvN5gTYilS6sYEBkmWHe7l2+MZ57RJfcsot2SV13 ZiWoU0qs8JMhm4H59+apfMZYxV9g4KMB49U5BazaEtfm+mr/MwyszCoarbc8qK5z PicI8Yqxn98uqrvBRjo1Qw23YpqRdgg= -----END CERTIFICATE-----Generated at Tue Nov 10 09:19:53 2026 by rpki-client