$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa File: de70bde6-180d-3658-82a5-a8d67698d4d2.roa (raw, json) Hash identifier: 1DylWOhkRH2xN9orX8/4AZNGlUKT0iDdwfU4xcXfWW4= Subject key identifier: 9F:79:91:F4:34:28:8D:33:4F:1B:67:84:AA:69:F3:59:A8:E1:53:C5 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584DC29AFDB56C7663F878CC7280 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa Signing time: Fri 08 May 2026 01:00:24 +0000 ROA not before: Fri 08 May 2026 01:00:24 +0000 ROA not after: Thu 06 Aug 2026 01:00:24 +0000 asID: 4540 IP address blocks: 135.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c2:9a:fd:b5:6c:76:63:f8:78:cc:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: May 8 01:00:24 2026 GMT Not After : Aug 6 01:00:24 2026 GMT Subject: CN=939454ab-946d-4ac0-88b3-088a2a57ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d4:6a:db:6f:89:8a:67:ae:68:9d:a1:79:7e: 7c:36:c1:8a:f0:bc:f9:71:5b:ff:0b:70:8f:eb:3f: 00:6b:ec:0e:75:ef:7f:f7:d9:5d:0d:d2:ef:13:17: 1d:bc:04:3d:ee:3d:d9:8f:f8:5d:bd:6d:2d:c3:df: ab:70:ab:b8:83:ea:24:56:e9:de:e4:ed:cd:e7:97: af:21:b7:d4:98:a4:59:8e:56:82:37:87:6f:ac:dc: 8f:ff:3f:bd:fe:30:df:03:e7:92:10:0d:71:7d:ab: 3e:57:b0:88:1c:d2:ae:09:61:51:0a:a5:d0:8c:94: 64:80:59:90:57:e8:3e:86:d5:bc:bd:58:30:27:70: aa:a3:2b:c7:5f:9b:55:85:27:3c:6b:1c:7c:c4:2f: 37:4d:b2:53:b1:b9:5b:e3:6c:3f:e6:5e:7b:46:52: a1:a0:f5:56:13:d5:d6:ac:87:fa:db:47:13:02:b3: 2f:23:db:d1:0a:b8:a9:08:77:31:9e:3b:43:81:b7: 08:7d:3d:da:3f:40:40:7f:13:fb:1b:12:92:24:0f: 1c:dd:f6:99:53:0f:f2:08:c3:a3:52:0c:1d:28:b1: 79:d5:26:70:1b:76:bb:6c:9b:58:61:e8:af:f8:19: 9e:db:a8:58:6a:0b:b8:a8:b1:20:f1:65:c8:3c:40: 03:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:79:91:F4:34:28:8D:33:4F:1B:67:84:AA:69:F3:59:A8:E1:53:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8b:a4:8a:63:dc:ee:c3:f8:de:1c:5d:a3:d2:e4:e5:8f:38: 86:bb:eb:99:9e:7c:f5:71:e4:a1:13:0f:e4:ae:0c:1c:60:42: 73:64:f9:f3:a6:cb:2e:f8:08:6a:d2:99:04:4e:9e:6b:74:72: d6:b5:ad:51:fd:82:2d:74:30:ca:16:19:cb:ed:c3:a3:f0:2d: f0:58:10:bf:3d:eb:d3:a4:1c:21:65:56:8f:41:31:fd:19:ec: a1:1e:6a:b1:f8:ea:3a:88:71:08:4d:57:fd:09:c1:27:b0:8e: a9:75:a0:45:e6:20:bf:63:ef:a6:04:c6:88:45:fa:da:b3:76: e7:21:05:55:96:f7:05:43:e6:78:d1:7c:13:4e:ea:7a:bb:35: b2:3b:fd:94:7e:8b:39:51:10:c2:52:8d:a0:59:14:11:f3:87: eb:a4:c3:80:0f:c6:cc:16:93:da:c6:86:90:03:b6:39:05:5c: 8f:f3:d8:88:03:50:48:a2:d8:06:26:46:bf:99:f3:0c:bd:5d: 3f:ac:88:ce:41:e9:77:15:d5:a0:ad:0f:21:d0:5d:d9:a6:4c: 28:96:6b:60:2b:54:b6:e4:9a:f1:8d:59:3e:94:de:0d:4b:3b: 31:90:da:80:89:b5:59:ec:78:b9:eb:48:10:9a:63:8d:1a:f1: c7:cd:6f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmv21bHZj+HjMcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk OTM5NDU0YWItOTQ2ZC00YWMwLTg4YjMtMDg4YTJhNTdlYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitRq22+JimeuaJ2heX58NsGK8Lz5cVv/C3CP 6z8Aa+wOde9/99ldDdLvExcdvAQ97j3Zj/hdvW0tw9+rcKu4g+okVune5O3N55ev IbfUmKRZjlaCN4dvrNyP/z+9/jDfA+eSEA1xfas+V7CIHNKuCWFRCqXQjJRkgFmQ V+g+htW8vVgwJ3CqoyvHX5tVhSc8axx8xC83TbJTsblb42w/5l57RlKhoPVWE9XW rIf620cTArMvI9vRCripCHcxnjtDgbcIfT3aP0BAfxP7GxKSJA8c3faZUw/yCMOj UgwdKLF51SZwG3a7bJtYYeiv+Bme26hYagu4qLEg8WXIPEADawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ95kfQ0KI0zTxtnhKpp81mo4VPFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZGU3MGJkZTYtMTgwZC0z NjU4LTgyYTUtYThkNjc2OThkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWLpIpj3O7D+N4cXaPS5OWPOIa765mefPVx5KETD+SuDBxgQnNk+fOm yy74CGrSmQROnmt0cta1rVH9gi10MMoWGcvtw6PwLfBYEL8969OkHCFlVo9BMf0Z 7KEearH46jqIcQhNV/0JwSewjql1oEXmIL9j76YExohF+tqzduchBVWW9wVD5njR fBNO6nq7NbI7/ZR+izlREMJSjaBZFBHzh+ukw4APxswWk9rGhpADtjkFXI/z2IgD UEii2AYmRr+Z8wy9XT+siM5B6XcV1aCtDyHQXdmmTCiWa2ArVLbkmvGNWT6U3g1L OzGQ2oCJtVnseLnrSBCaY40a8cfNb0g= -----END CERTIFICATE-----Generated at Wed May 13 07:49:45 2026 by rpki-client