$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa File: ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa (raw, json) Hash identifier: hV73+32dgpgW3uOB8x63em/GPjURQt8eHgZ0vmGXNcU= Subject key identifier: 9B:C8:36:3C:90:64:72:79:94:CD:2F:24:05:64:65:B8:4B:2C:B1:E9 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584EC371B50BFE2DEDBFD285D840 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 205329 IP address blocks: 140.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:b5:0b:fe:2d:ed:bf:d2:85:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=8df12195-fc07-4bff-82c1-8c1f10b87369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:94:74:15:1a:ee:9c:8a:47:b0:4b:73:b7:05: 8f:a9:e1:74:d4:6e:bf:d1:3c:49:33:ed:55:ef:db: 0c:28:83:ce:46:53:14:69:f0:87:ec:5d:d8:3a:0a: 5b:86:23:f7:ae:8a:c0:04:1b:7a:75:8e:ab:cb:18: b4:9f:07:2e:3d:03:b2:89:54:63:b6:69:50:af:db: b4:04:8f:b3:2c:3d:e4:ef:fa:9c:cc:6d:3f:62:ea: fd:59:19:68:91:67:32:0d:af:7b:80:96:a9:ae:84: 6f:f1:42:12:2e:6e:59:78:1f:bb:9a:69:c0:7f:e6: 58:7d:4c:b3:0f:3b:4c:92:f6:59:81:23:76:89:c3: 4d:ac:c7:fb:85:1d:a3:d3:c8:74:12:c4:7f:88:84: 1b:14:ea:5d:3f:6b:12:fc:cb:a1:9e:ca:07:6a:24: 55:e0:b5:7c:14:4e:49:85:60:b9:08:98:60:43:f4: 98:88:66:5f:50:74:7e:30:2b:49:e0:5d:0a:66:b7: f9:35:f2:8c:1b:8a:95:ca:60:49:65:db:f6:9f:0f: b5:7c:c9:a8:f6:a7:76:20:36:b1:71:f7:a0:35:56: f1:c2:a1:20:8f:96:e0:d6:53:91:56:84:c7:8f:e7: b9:f9:06:2e:f1:ee:af:a1:6d:3a:cc:02:30:4a:24: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:36:3C:90:64:72:79:94:CD:2F:24:05:64:65:B8:4B:2C:B1:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d2:ae:82:70:b7:f7:f0:e3:0e:61:bc:e8:21:e4:01:8c:98: 9a:a1:0d:83:32:21:4a:64:f1:53:db:69:da:82:36:71:c3:54: 1d:e0:67:f6:a8:10:8b:93:3d:3e:00:ef:47:7a:75:87:72:85: b6:55:48:67:d7:5e:0e:0e:59:ac:29:cf:a6:a8:c0:2b:95:8c: bf:81:40:37:95:57:fc:d1:6a:f2:f4:6a:4e:fc:f3:c6:e0:3d: 52:68:58:55:23:ce:a7:91:b6:a7:6b:18:d4:4b:65:49:7e:2a: 97:4c:4d:a1:bc:81:e7:fc:f1:78:f1:09:cf:91:78:99:1f:09: f3:80:49:f3:a5:83:c2:81:b4:18:5d:2d:33:3e:ae:2c:6b:8a: 9f:ad:ce:0b:fd:0c:a2:30:68:f5:23:62:00:bd:bf:f6:a2:58: df:b8:ee:bb:ff:88:66:7f:04:01:a6:c3:99:ea:95:7e:e0:20: f4:34:55:58:0b:15:89:6a:9c:c5:e1:1c:c9:47:a5:83:2f:f1: b5:6d:6c:33:6d:1c:32:08:d2:8d:9a:e7:06:1a:f4:7e:20:28: cf:fa:58:67:6d:40:3c:97:6c:d0:2b:b8:bc:8f:56:a6:80:f8: 6a:dd:31:ad:b1:0b:27:6a:7c:37:07:d5:00:79:8b:c1:ac:c8: 6c:0c:7e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbUL/i3tv9KF2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OGRmMTIxOTUtZmMwNy00YmZmLTgyYzEtOGMxZjEwYjg3MzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJR0FRrunIpHsEtztwWPqeF01G6/0TxJM+1V 79sMKIPORlMUafCH7F3YOgpbhiP3rorABBt6dY6ryxi0nwcuPQOyiVRjtmlQr9u0 BI+zLD3k7/qczG0/Yur9WRlokWcyDa97gJaproRv8UISLm5ZeB+7mmnAf+ZYfUyz DztMkvZZgSN2icNNrMf7hR2j08h0EsR/iIQbFOpdP2sS/MuhnsoHaiRV4LV8FE5J hWC5CJhgQ/SYiGZfUHR+MCtJ4F0KZrf5NfKMG4qVymBJZdv2nw+1fMmo9qd2IDax cfegNVbxwqEgj5bg1lORVoTHj+e5+QYu8e6voW06zAIwSiSR/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvINjyQZHJ5lM0vJAVkZbhLLLHpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvYWNlMzRhYTAtM2U2NS0z MGJkLWIyNjQtOWQyZTM1MTRjZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLSroJwt/fw4w5hvOgh5AGMmJqhDYMyIUpk8VPbadqCNnHDVB3gZ/ao EIuTPT4A70d6dYdyhbZVSGfXXg4OWawpz6aowCuVjL+BQDeVV/zRavL0ak7888bg PVJoWFUjzqeRtqdrGNRLZUl+KpdMTaG8gef88XjxCc+ReJkfCfOASfOlg8KBtBhd LTM+rixrip+tzgv9DKIwaPUjYgC9v/aiWN+47rv/iGZ/BAGmw5nqlX7gIPQ0VVgL FYlqnMXhHMlHpYMv8bVtbDNtHDII0o2a5wYa9H4gKM/6WGdtQDyXbNAruLyPVqaA +GrdMa2xCydqfDcH1QB5i8GsyGwMfvQ= -----END CERTIFICATE-----Generated at Wed Sep 16 10:31:11 2026 by rpki-client