$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa File: ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa (raw, json) Hash identifier: Xu5pHn/87MPAzBBfRoXSkL3cUVXAfEivyMQOE+eSiKE= Subject key identifier: 41:3C:58:28:B0:A8:60:71:10:2F:04:97:A6:64:2C:FE:69:AF:B3:91 Certificate issuer: /CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Certificate serial: 010D0C9F4328584D40CA3430C170BA96DE75A440 Authority key identifier: DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 205329 IP address blocks: 140.235.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:34:30:c1:70:ba:96:de:75:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8efea04-a4c6-48d5-b955-4a5b86ccd300 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=018f7247-c19c-48b2-bbad-dc74c502f17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:87:6c:f1:b4:40:fc:3a:82:36:1d:4c:b6: 28:76:bc:10:2b:6a:02:00:6e:e6:0b:ee:6a:5c:9d: 77:34:36:6e:e6:5e:f4:a2:8d:88:09:10:93:7b:9e: 14:66:6b:16:da:6b:f8:60:df:2f:6d:26:bb:f8:8a: 14:4f:0f:89:be:63:5a:23:f1:75:bf:89:11:2e:19: b5:9a:5b:6d:e5:26:cd:42:2d:ad:0b:99:96:9a:5d: 8c:36:2b:ec:08:f2:cd:91:d8:d3:85:76:33:92:2a: 64:d9:91:10:8e:13:1e:7f:b9:80:a4:95:d6:83:ea: a6:ad:a1:6c:01:1c:ff:d2:96:85:80:29:ad:ce:ff: 14:b0:ac:fb:5e:9d:9c:eb:45:7b:80:c6:ae:51:58: 04:88:03:f9:87:d8:4a:71:84:db:30:72:ca:67:fe: b5:02:d5:a8:13:9b:37:f9:95:70:f1:b1:57:ad:78: 14:42:4d:e0:9a:93:b4:7f:9f:d7:a9:37:e2:55:fd: 29:6f:97:83:71:65:f3:18:a4:de:d9:34:2d:9f:db: 03:93:56:50:c9:df:e0:d9:d1:3f:e0:db:f3:0e:55: fd:3d:fa:97:f4:90:5e:6a:60:fd:e3:84:28:5b:fa: 1b:29:9e:3e:17:18:92:9c:81:75:40:25:50:56:9d: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3C:58:28:B0:A8:60:71:10:2F:04:97:A6:64:2C:FE:69:AF:B3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/ace34aa0-3e65-30bd-b264-9d2e3514cd77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300/c8efea04-a4c6-48d5-b955-4a5b86ccd300.crl X509v3 Authority Key Identifier: keyid:DB:31:77:14:CC:54:33:2B:42:56:25:1A:37:B2:65:2E:B4:1D:48:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8efea04-a4c6-48d5-b955-4a5b86ccd300.cer sbgp-ipAddrBlock: critical IPv4: 140.235.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2c:34:a6:54:f8:d6:3d:9c:77:4e:a0:82:ea:fd:74:f6:05: 42:a9:5e:79:88:aa:e1:3c:af:70:c6:d6:c7:4e:e0:13:68:f5: b0:6d:03:37:80:49:a1:c0:36:22:8d:94:e3:4b:e5:4f:b3:7f: 73:56:0d:c1:a0:35:78:d9:e6:e9:65:94:58:c4:40:37:8c:39: 50:22:a8:5f:a3:e3:d4:b1:c8:ce:75:4c:d6:41:50:a0:ce:8b: a0:b4:37:6c:93:8c:49:7d:ff:b7:bb:c5:19:0c:55:b8:d4:ad: a6:b5:7c:06:d3:fe:e9:db:0b:08:ea:62:06:2d:f8:b2:91:12: 72:51:a1:d1:35:2d:0d:de:9b:32:07:2b:8f:a7:be:1d:5c:4a: 7a:0b:e4:30:f0:25:bf:86:63:45:32:ea:53:6c:c9:78:39:48: 16:6e:55:3f:b9:9f:59:8c:72:3f:9b:ac:c3:6c:7c:9e:7c:65: 85:5e:ca:88:41:02:75:86:56:af:29:42:31:64:b3:f7:70:90: 1f:49:f8:85:c9:1e:2c:95:c1:a9:01:94:b0:f4:e9:5f:33:28: 92:05:9e:0c:5d:75:e0:bf:ee:a0:0f:e6:c2:ce:9e:46:cd:2c: 4c:b3:3f:6b:5c:fb:72:39:93:18:64:05:a7:82:de:17:84:c0: d0:9f:52:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyjQwwXC6lt51pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhlZmVhMDQtYTRjNi00OGQ1LWI5NTUtNGE1Yjg2Y2Nk MzAwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MDE4ZjcyNDctYzE5Yy00OGIyLWJiYWQtZGM3NGM1MDJmMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4yHbPG0QPw6gjYdTLYodrwQK2oCAG7mC+5q XJ13NDZu5l70oo2ICRCTe54UZmsW2mv4YN8vbSa7+IoUTw+JvmNaI/F1v4kRLhm1 mltt5SbNQi2tC5mWml2MNivsCPLNkdjThXYzkipk2ZEQjhMef7mApJXWg+qmraFs ARz/0paFgCmtzv8UsKz7Xp2c60V7gMauUVgEiAP5h9hKcYTbMHLKZ/61AtWoE5s3 +ZVw8bFXrXgUQk3gmpO0f5/XqTfiVf0pb5eDcWXzGKTe2TQtn9sDk1ZQyd/g2dE/ 4NvzDlX9PfqX9JBeamD944QoW/obKZ4+FxiSnIF1QCVQVp0T2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE8WCiwqGBxEC8El6ZkLP5pr7ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVm ZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTViODZjY2QzMDAvYWNlMzRhYTAtM2U2NS0z MGJkLWIyNjQtOWQyZTM1MTRjZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhlZmVhMDQtYTRjNi00OGQ1LWI5 NTUtNGE1Yjg2Y2NkMzAwL2M4ZWZlYTA0LWE0YzYtNDhkNS1iOTU1LTRhNWI4NmNj ZDMwMC5jcmwwHwYDVR0jBBgwFoAU2zF3FMxUMytCViUaN7JlLrQdSOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGVmZWEwNC1hNGM2LTQ4ZDUtYjk1NS00YTVi ODZjY2QzMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcsNKZU+NY9nHdOoILq/XT2BUKpXnmIquE8r3DG1sdO4BNo9bBtAzeA SaHANiKNlONL5U+zf3NWDcGgNXjZ5ulllFjEQDeMOVAiqF+j49SxyM51TNZBUKDO i6C0N2yTjEl9/7e7xRkMVbjUraa1fAbT/unbCwjqYgYt+LKREnJRodE1LQ3emzIH K4+nvh1cSnoL5DDwJb+GY0Uy6lNsyXg5SBZuVT+5n1mMcj+brMNsfJ58ZYVeyohB AnWGVq8pQjFks/dwkB9J+IXJHiyVwakBlLD06V8zKJIFngxddeC/7qAP5sLOnkbN LEyzP2tc+3I5kxhkBaeC3heEwNCfUsw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:05:52 2026 by rpki-client