$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa File: bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa (raw, json) Hash identifier: dVcMDXonnhkv9SjdGNYItHfHVTFewkH48mF7h6d3cHI= Subject key identifier: 1B:E2:F5:B3:96:13:F8:DF:19:07:B9:B0:35:F8:80:2F:69:B9:71:ED Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F45429975E00C5345532259C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 4540 IP address blocks: 135.136.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:99:75:e0:0c:53:45:53:22:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=c1dcbec3-4cde-4676-bc39-3753e1a1e872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:6f:b4:c9:b7:6b:a7:b9:98:2c:3d:15:f2: d0:cb:1e:78:58:0d:95:a1:d5:db:73:a4:fd:24:fd: d0:91:a8:83:10:e2:0c:7f:97:3d:d8:be:4e:ee:b8: 6c:04:ae:69:7a:bc:cf:a3:af:a3:f8:f1:5c:71:91: df:87:7f:73:15:50:21:ae:95:2a:c0:2b:e7:cf:f3: a8:6a:e6:93:bd:7e:fd:d6:4c:1e:d4:bf:37:2b:0b: 80:86:32:c2:da:f7:6e:95:ce:4a:e2:74:93:eb:a7: 60:ab:80:4c:27:41:08:af:b7:4f:e8:74:2e:b5:ef: 5c:60:12:08:db:51:17:1b:10:69:44:6a:d8:84:0a: 50:42:9e:66:da:73:82:3f:8b:0d:43:18:70:8e:87: dd:cb:05:25:a4:62:c5:33:f5:e3:23:fb:e1:8a:fc: a4:8f:ef:77:d9:85:d9:e0:d9:a4:81:36:86:08:5d: e6:af:4b:71:f7:d4:c0:53:51:89:af:35:24:00:53: b5:9e:a3:72:2e:97:26:e4:0c:c8:47:15:1b:c3:14: 1d:4d:cc:c2:5b:06:fd:87:a5:9f:4c:e7:ff:f8:a4: 0e:51:a0:a6:b7:68:81:3a:e1:04:4b:6d:71:72:30: 94:79:3a:21:6b:3d:82:04:b2:00:95:39:e8:5d:9b: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E2:F5:B3:96:13:F8:DF:19:07:B9:B0:35:F8:80:2F:69:B9:71:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7c:de:ac:64:cd:49:81:dc:b3:5a:12:e5:3c:7a:fa:5b:b1: 36:6e:9e:b4:9d:77:d4:ff:71:92:95:3c:74:12:57:16:fe:60: 82:f7:95:a5:28:26:23:17:0b:98:33:5d:ea:fa:b2:62:40:2b: 59:27:6e:d3:af:8c:77:c3:9f:7c:59:37:87:7f:bd:73:f3:1a: 0e:2e:87:7b:f9:9c:48:41:35:3b:f0:0d:4e:a2:78:f0:21:06: 53:f2:7a:98:7b:34:95:94:29:72:93:93:8c:5a:45:4a:6f:83: 9f:07:1e:dc:92:18:8c:c1:76:fd:dd:e5:af:97:32:92:b3:8b: 1c:5b:1d:a5:ac:f0:36:29:6d:dc:13:e6:5b:06:0d:04:9d:0e: 55:df:f0:b1:a9:96:48:50:5f:43:68:7c:18:fb:d0:67:6e:d8: 4b:e3:cb:57:9b:d4:96:76:7d:67:8c:74:9f:9e:41:c1:da:9a: e3:61:be:d3:f5:f6:42:5a:43:71:20:37:c4:4c:5b:89:88:6c: a7:cb:99:2f:0c:2f:c1:89:73:b0:99:2d:71:d2:ff:cb:f0:9c: ff:b8:a0:5b:0c:51:5d:40:3a:41:dd:f6:03:ea:52:c5:69:c3: f9:e1:cc:b4:82:55:71:f7:57:4a:1a:1e:39:4f:5f:ae:d7:43: 37:88:bd:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpl14AxTRVMiWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YzFkY2JlYzMtNGNkZS00Njc2LWJjMzktMzc1M2UxYTFlODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA229vtMm3a6e5mCw9FfLQyx54WA2VodXbc6T9 JP3QkaiDEOIMf5c92L5O7rhsBK5perzPo6+j+PFccZHfh39zFVAhrpUqwCvnz/Oo auaTvX791kwe1L83KwuAhjLC2vdulc5K4nST66dgq4BMJ0EIr7dP6HQute9cYBII 21EXGxBpRGrYhApQQp5m2nOCP4sNQxhwjofdywUlpGLFM/XjI/vhivykj+932YXZ 4NmkgTaGCF3mr0tx99TAU1GJrzUkAFO1nqNyLpcm5AzIRxUbwxQdTczCWwb9h6Wf TOf/+KQOUaCmt2iBOuEES21xcjCUeTohaz2CBLIAlTnoXZsfcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvi9bOWE/jfGQe5sDX4gC9puXHtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYmZhMDAzY2MtMTNkYy0z MGFjLTliNGYtMDI4MThiNjUxOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB83qxkzUmB3LNaEuU8evpbsTZunrSdd9T/cZKVPHQSVxb+YIL3laUo JiMXC5gzXer6smJAK1knbtOvjHfDn3xZN4d/vXPzGg4uh3v5nEhBNTvwDU6iePAh BlPyeph7NJWUKXKTk4xaRUpvg58HHtySGIzBdv3d5a+XMpKzixxbHaWs8DYpbdwT 5lsGDQSdDlXf8LGplkhQX0NofBj70Gdu2Evjy1eb1JZ2fWeMdJ+eQcHamuNhvtP1 9kJaQ3EgN8RMW4mIbKfLmS8ML8GJc7CZLXHS/8vwnP+4oFsMUV1AOkHd9gPqUsVp w/nhzLSCVXH3V0oaHjlPX67XQzeIve0= -----END CERTIFICATE-----Generated at Fri Sep 25 00:51:26 2026 by rpki-client