$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5d218057-7506-36c1-9296-8087859e69f1.roa File: 5d218057-7506-36c1-9296-8087859e69f1.roa (raw, json) Hash identifier: zzx15ymcSaVkjMz6JzqmZxNwHwdjLrLfJ7coNqcy6Ag= Subject key identifier: 8C:44:CD:F8:B1:36:52:37:2B:61:1F:4E:CB:4F:7C:3A:04:FA:67:28 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584F454281DD3FA6F068B33E6F00 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5d218057-7506-36c1-9296-8087859e69f1.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 4540 IP address blocks: 135.136.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:81:dd:3f:a6:f0:68:b3:3e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=14ea90f8-0ce3-4b39-878c-0227c4da351c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5d:a9:39:e9:a6:92:e1:b5:d9:72:c3:c2:56: af:c8:2d:00:83:c9:52:cd:61:0b:cb:cb:9c:c2:02: 49:a7:e2:18:47:bb:92:77:b6:cf:0b:be:0f:1b:12: ba:9f:0b:85:55:dd:94:14:ce:41:6e:c5:da:28:9a: 41:4b:23:0e:b7:b5:81:a0:f4:6e:14:a5:56:01:67: c3:60:95:3c:6d:0a:ad:1f:35:7f:3e:ce:8d:7e:e5: 92:5d:2f:c9:2d:ce:12:85:93:86:07:d6:7a:c4:40: 3d:f2:f7:e6:9e:d0:45:cd:31:21:22:d4:09:cc:8f: d4:53:2b:59:89:42:5b:0d:21:92:40:53:03:c0:45: 0c:82:c0:a5:05:b3:ec:ee:d1:11:27:ad:c9:b0:25: 7a:9b:aa:42:67:17:17:a4:72:80:1c:c0:47:ad:80: b8:c8:82:11:cb:c6:7c:40:c9:94:b9:40:55:ca:79: 19:16:b7:8f:88:1a:6a:d2:4d:0e:62:df:3c:92:b4: a9:ca:7b:54:08:20:50:82:4a:88:a5:45:e4:ca:4b: c6:d3:48:8c:65:87:15:84:b8:84:e2:67:f0:f7:8f: 6a:b8:e6:56:8b:e3:e2:c6:aa:be:d8:78:25:ab:6b: 50:98:ee:19:d0:c9:ca:d7:bc:08:2e:4f:ce:1b:a4: 46:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:44:CD:F8:B1:36:52:37:2B:61:1F:4E:CB:4F:7C:3A:04:FA:67:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/5d218057-7506-36c1-9296-8087859e69f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c6:71:51:8d:e1:aa:3b:ee:c6:8d:a8:dc:88:a1:af:ff:d0: b5:55:e8:fd:d4:29:b0:d3:30:a2:e8:47:4f:e3:bd:30:71:00: 17:a2:82:5f:de:32:f0:9f:2f:a5:87:86:bd:31:9f:d0:ee:a5: e4:bf:51:ff:19:b0:23:d0:b8:9a:b6:2b:73:80:f2:81:01:02: 3d:c7:6b:b7:46:fa:d5:1c:2d:4a:29:b2:89:1f:8b:a9:90:44: e0:8f:64:fd:35:08:da:47:c1:2a:ae:89:33:7b:b2:04:c3:63: 04:62:1c:3f:ae:61:53:8c:87:1d:c6:c0:3c:4e:e1:f8:1f:6d: 6a:1b:38:02:9f:3d:40:df:e7:4e:d7:5f:a2:da:69:62:ff:56: 6b:4d:d6:4a:44:17:74:88:64:f6:6c:90:7f:5f:c1:37:af:8e: b8:7d:e1:c4:9f:9a:cc:e4:2f:12:a6:de:40:81:34:d1:03:9d: 75:21:45:f9:f7:f4:44:a8:99:92:de:ea:f4:7d:37:c3:4a:53: d4:2d:a7:57:c2:c6:4d:c1:16:2f:4d:c2:44:81:68:de:45:cf: f3:5a:f6:39:ea:3f:f7:f5:5c:60:1e:54:23:65:3d:c8:52:4b: 28:d9:70:fb:93:d2:96:c2:d9:05:ee:11:75:d0:69:f0:d0:37: e9:41:cd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQoHdP6bwaLM+bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk MTRlYTkwZjgtMGNlMy00YjM5LTg3OGMtMDIyN2M0ZGEzNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV2pOemmkuG12XLDwlavyC0Ag8lSzWELy8uc wgJJp+IYR7uSd7bPC74PGxK6nwuFVd2UFM5BbsXaKJpBSyMOt7WBoPRuFKVWAWfD YJU8bQqtHzV/Ps6NfuWSXS/JLc4ShZOGB9Z6xEA98vfmntBFzTEhItQJzI/UUytZ iUJbDSGSQFMDwEUMgsClBbPs7tERJ63JsCV6m6pCZxcXpHKAHMBHrYC4yIIRy8Z8 QMmUuUBVynkZFrePiBpq0k0OYt88krSpyntUCCBQgkqIpUXkykvG00iMZYcVhLiE 4mfw949quOZWi+Pixqq+2Hglq2tQmO4Z0MnK17wILk/OG6RGGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxEzfixNlI3K2EfTstPfDoE+mcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvNWQyMTgwNTctNzUwNi0z NmMxLTkyOTYtODA4Nzg1OWU2OWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPGcVGN4ao77saNqNyIoa//0LVV6P3UKbDTMKLoR0/jvTBxABeigl/e MvCfL6WHhr0xn9DupeS/Uf8ZsCPQuJq2K3OA8oEBAj3Ha7dG+tUcLUopsokfi6mQ ROCPZP01CNpHwSquiTN7sgTDYwRiHD+uYVOMhx3GwDxO4fgfbWobOAKfPUDf507X X6LaaWL/VmtN1kpEF3SIZPZskH9fwTevjrh94cSfmszkLxKm3kCBNNEDnXUhRfn3 9ESomZLe6vR9N8NKU9Qtp1fCxk3BFi9NwkSBaN5Fz/Na9jnqP/f1XGAeVCNlPchS SyjZcPuT0pbC2QXuEXXQafDQN+lBzfw= -----END CERTIFICATE-----Generated at Sat Oct 3 11:04:00 2026 by rpki-client