$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/d08da737-73de-36b3-8a2d-28c3aa0f7a48.roa File: d08da737-73de-36b3-8a2d-28c3aa0f7a48.roa (raw, json) Hash identifier: z3RSVZ/2ETseew7PNKjHC/igiKAqYkj3Q5aQS7qnvSc= Subject key identifier: 09:9C:E6:20:6B:66:60:A4:89:61:D7:36:04:00:00:AE:D2:AF:46:40 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F45429A91614193B845792260 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/d08da737-73de-36b3-8a2d-28c3aa0f7a48.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 4540 IP address blocks: 135.136.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:9a:91:61:41:93:b8:45:79:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=50ddfe23-44be-4eb0-8527-42ba38a0ca06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:56:2d:ed:ff:09:ce:b6:af:dc:d3:0d:11: 4a:5b:9f:2e:a9:a8:a6:b0:5a:b9:e8:e0:48:18:d6: bd:bf:01:02:76:7b:83:cd:5e:5d:51:d6:e6:a6:5b: 9e:93:e7:73:19:52:c4:62:77:22:ee:1a:64:2d:ab: 22:7f:9d:38:71:19:cd:e7:af:88:dc:5e:96:e1:8d: cf:27:97:b1:65:4c:85:5c:6b:be:50:e8:cb:bb:5d: 01:17:80:be:03:55:04:c1:9d:3f:0d:f7:64:c4:f9: 03:eb:a8:a3:18:7b:4d:79:9b:93:53:aa:a6:33:93: 37:91:ba:25:ec:1b:49:af:6c:0c:fc:46:c2:63:19: 7e:44:ac:e7:b2:ee:06:c4:4e:98:03:bd:27:8b:95: 02:de:c4:17:f4:56:68:04:05:8b:bd:c8:16:bb:e1: df:be:ff:b6:39:5c:dd:6b:3e:ab:91:37:5a:31:6f: b2:26:d8:f2:7e:77:51:b0:05:ef:47:2b:a3:de:6f: f5:dc:ef:96:fa:cb:ce:0e:b7:b6:1e:a4:c4:3f:7d: 89:1b:a6:29:a4:7b:39:06:b8:73:26:db:a1:58:30: 3f:21:ed:5d:20:f3:b0:9c:1d:38:01:bd:5d:d0:37: 97:9f:1a:a7:e8:9c:4c:06:72:ed:70:0b:3e:55:69: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:E6:20:6B:66:60:A4:89:61:D7:36:04:00:00:AE:D2:AF:46:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/d08da737-73de-36b3-8a2d-28c3aa0f7a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e5:f2:dc:04:c1:1b:88:99:1d:38:46:ac:20:d6:54:d5:f3: 85:0e:f0:ef:44:f7:9c:89:e8:f1:7a:68:56:2d:f4:ad:7e:b9: 7c:f5:90:29:35:21:56:4c:33:52:05:5c:1a:d2:44:78:fa:cb: 9f:7f:79:34:d1:df:9f:53:2e:b5:ca:3e:45:4d:ec:34:9a:7c: dc:05:cc:96:d9:fd:14:68:c7:46:5e:e6:65:52:68:80:70:7c: 38:96:39:a6:40:2e:38:48:f1:aa:aa:dd:0f:3f:ca:3d:11:f5: f0:6e:9b:d3:45:05:67:88:1a:3e:82:2d:a9:aa:91:d9:df:c3: e8:28:8c:7f:00:1d:fa:82:14:d6:c7:e8:93:b2:6e:cb:d9:bf: 96:6c:8b:5b:25:b1:5f:a3:14:aa:42:20:f8:b9:b2:1a:b2:55: 6f:db:23:3c:4e:7f:38:ce:4d:d1:98:87:39:0a:be:6b:56:30: 3a:35:e0:ab:75:a3:1b:fc:ba:54:6c:e3:cd:ad:96:55:b5:2b: ad:79:00:f7:af:54:f7:49:5b:8e:be:d6:c0:31:f6:24:98:90: 74:f5:d9:b9:42:98:fd:e6:a8:c2:2e:07:bf:46:cc:3d:43:9b: 25:a5:5b:a1:f1:8e:92:6c:a5:f6:02:23:a7:a4:dc:c7:e1:2d: 0a:17:51:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpqRYUGTuEV5ImAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NTBkZGZlMjMtNDRiZS00ZWIwLTg1MjctNDJiYTM4YTBjYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg9WLe3/Cc62r9zTDRFKW58uqaimsFq56OBI GNa9vwECdnuDzV5dUdbmpluek+dzGVLEYnci7hpkLasif504cRnN56+I3F6W4Y3P J5exZUyFXGu+UOjLu10BF4C+A1UEwZ0/DfdkxPkD66ijGHtNeZuTU6qmM5M3kbol 7BtJr2wM/EbCYxl+RKznsu4GxE6YA70ni5UC3sQX9FZoBAWLvcgWu+Hfvv+2OVzd az6rkTdaMW+yJtjyfndRsAXvRyuj3m/13O+W+svODre2HqTEP32JG6YppHs5Brhz JtuhWDA/Ie1dIPOwnB04Ab1d0DeXnxqn6JxMBnLtcAs+VWnWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmc5iBrZmCkiWHXNgQAAK7Sr0ZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZDA4ZGE3MzctNzNkZS0z NmIzLThhMmQtMjhjM2FhMGY3YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbl8twEwRuImR04Rqwg1lTV84UO8O9E95yJ6PF6aFYt9K1+uXz1kCk1 IVZMM1IFXBrSRHj6y59/eTTR359TLrXKPkVN7DSafNwFzJbZ/RRox0Ze5mVSaIBw fDiWOaZALjhI8aqq3Q8/yj0R9fBum9NFBWeIGj6CLamqkdnfw+gojH8AHfqCFNbH 6JOybsvZv5Zsi1slsV+jFKpCIPi5shqyVW/bIzxOfzjOTdGYhzkKvmtWMDo14Kt1 oxv8ulRs482tllW1K615APevVPdJW46+1sAx9iSYkHT12blCmP3mqMIuB79GzD1D myWlW6HxjpJspfYCI6ek3MfhLQoXUSQ= -----END CERTIFICATE-----Generated at Fri Sep 25 19:53:01 2026 by rpki-client