$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa File: 207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa (raw, json) Hash identifier: rL4c65cE7ZZUppe1LtNfHAKboIlbwnm2E67obxnPX3Q= Subject key identifier: DD:AA:38:8F:A7:42:28:EB:4B:17:8A:28:EF:1A:2A:50:C8:EB:A1:37 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584D40CA3DCB322BBC42B48F6AC0 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 199594 IP address blocks: 140.235.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:3d:cb:32:2b:bc:42:b4:8f:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=d347dd99-b888-4af4-b2e6-a54f4041237c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:be:50:db:5b:ce:d4:32:4e:d7:3d:1d:e1: 5d:5b:9a:8f:72:d6:42:95:0c:25:8c:53:85:77:a8: 71:71:4d:17:36:a9:41:bc:4e:df:d7:91:5d:37:83: 86:1c:b0:9b:4e:20:de:5a:9a:a8:75:5d:e3:8a:19: 0d:d1:68:82:ae:65:88:fb:6a:c6:04:1e:f7:7c:c7: 61:ee:78:82:37:d0:d9:cc:65:d5:a6:f9:35:b1:c5: 2c:89:79:75:d7:ba:50:f7:60:27:0f:45:f9:84:89: d7:f7:25:78:36:ee:52:43:f5:4f:6c:59:15:d5:63: 64:86:1b:f9:fa:ca:e2:79:df:d3:90:8b:97:4d:16: 04:af:0f:83:66:6c:3e:93:b1:df:d3:a3:cc:50:16: 61:84:27:97:ca:00:51:25:40:ba:c5:f6:04:22:4c: 88:81:14:bc:48:13:9f:56:d5:d4:25:b7:bd:2a:13: 8c:01:32:06:fb:50:ab:1e:f9:6d:27:8c:7b:5a:74: b9:42:43:dd:e4:49:ed:10:4a:c9:15:f2:9b:c1:8c: d7:6b:c9:a9:1a:93:25:ac:98:0c:ce:fa:93:8f:1c: c2:fe:55:6f:77:9a:ee:e0:52:d9:60:4a:f9:f2:74: 57:cc:83:1d:48:8d:96:f7:03:87:4c:5f:03:51:93: 93:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:38:8F:A7:42:28:EB:4B:17:8A:28:EF:1A:2A:50:C8:EB:A1:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/207c5ba8-a6f4-38b5-b6a4-875e772f0e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:55:1d:6f:e5:01:6b:08:ec:41:a6:36:19:91:4c:ce:4c:1e: 02:30:a2:2c:d8:b0:ac:35:aa:20:3c:56:1f:c5:a7:4d:08:2e: bc:e4:f8:f1:aa:4f:bc:ae:07:a8:2e:cb:f8:26:94:64:d8:e7: 5b:ea:ed:50:07:a9:1d:72:0a:af:43:63:7d:60:38:f1:ad:75: 94:32:eb:04:c7:54:80:f5:ee:f8:4a:64:83:49:5f:9b:86:d6: de:43:61:f0:3a:25:ab:d1:49:90:04:d1:3c:39:dc:76:af:73: bd:05:62:d9:dc:2d:02:9e:f1:7b:fc:cd:8f:ba:76:6b:00:7a: 5c:ef:c8:b8:42:01:47:93:5b:6a:2b:48:ed:36:8d:a3:f2:df: 1f:74:bd:eb:1e:a1:b3:0a:6a:84:97:93:02:a2:60:a7:2e:66: 30:f2:29:2b:4c:3a:47:02:76:97:83:f5:74:34:0c:b8:d2:c3: 24:bf:f5:2c:44:d3:c0:b6:96:a1:e9:ad:07:ee:d1:a6:c7:95: 48:54:08:50:7d:20:9d:c4:8c:b9:4b:c7:19:9b:8f:21:61:f4: c3:a4:6a:d4:16:bd:a6:74:d9:4a:b8:6e:9c:3c:8d:6f:31:28: bf:f9:47:72:c7:2d:ac:80:82:1f:d3:e4:fe:11:52:2a:43:27: a5:69:9c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayj3LMiu8QrSPasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZDM0N2RkOTktYjg4OC00YWY0LWIyZTYtYTU0ZjQwNDEyMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3C+UNtbztQyTtc9HeFdW5qPctZClQwljFOF d6hxcU0XNqlBvE7f15FdN4OGHLCbTiDeWpqodV3jihkN0WiCrmWI+2rGBB73fMdh 7niCN9DZzGXVpvk1scUsiXl117pQ92AnD0X5hInX9yV4Nu5SQ/VPbFkV1WNkhhv5 +sried/TkIuXTRYErw+DZmw+k7Hf06PMUBZhhCeXygBRJUC6xfYEIkyIgRS8SBOf VtXUJbe9KhOMATIG+1CrHvltJ4x7WnS5QkPd5EntEErJFfKbwYzXa8mpGpMlrJgM zvqTjxzC/lVvd5ru4FLZYEr58nRXzIMdSI2W9wOHTF8DUZOT7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2qOI+nQijrSxeKKO8aKlDI66E3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvMjA3YzViYTgtYTZmNC0z OGI1LWI2YTQtODc1ZTc3MmYwZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5VHW/lAWsI7EGmNhmRTM5MHgIwoizYsKw1qiA8Vh/Fp00ILrzk+PGq T7yuB6guy/gmlGTY51vq7VAHqR1yCq9DY31gOPGtdZQy6wTHVID17vhKZINJX5uG 1t5DYfA6JavRSZAE0Tw53Havc70FYtncLQKe8Xv8zY+6dmsAelzvyLhCAUeTW2or SO02jaPy3x90veseobMKaoSXkwKiYKcuZjDyKStMOkcCdpeD9XQ0DLjSwyS/9SxE 08C2lqHprQfu0abHlUhUCFB9IJ3EjLlLxxmbjyFh9MOkatQWvaZ02Uq4bpw8jW8x KL/5R3LHLayAgh/T5P4RUipDJ6VpnDk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:58 2026 by rpki-client