$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa File: bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa (raw, json) Hash identifier: 4XjsnK2Ma94oyz/GBwXbxzpnoWjY9NMShDM2nZSVuYM= Subject key identifier: ED:AD:F4:20:92:5B:59:FC:90:C3:A5:B4:7F:2E:66:E8:2E:15:D5:70 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584EA2DFD01A1512D6E080F92980 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 4540 IP address blocks: 135.136.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:d0:1a:15:12:d6:e0:80:f9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=d2b51fe6-1ddd-467c-897f-75173959faf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:ee:c1:20:f4:85:8a:4a:e9:6d:16:f2:1b: f6:de:85:5f:c3:06:75:f4:92:c5:f2:b7:25:dd:a7: 18:9d:c1:62:82:77:ee:8e:bd:43:3b:b8:be:86:fe: ae:39:bd:6b:c7:a3:96:a9:61:43:54:8e:05:e8:82: bd:d6:fe:ba:3b:bf:fd:63:5c:18:84:78:f5:8d:57: 3d:36:b7:ab:b2:1a:5c:cc:65:ad:e7:7d:9e:2e:27: bb:2c:63:5c:ac:19:ba:c5:c2:4f:3e:6f:c8:cb:ac: ae:5d:cd:dd:57:34:7b:14:48:be:17:be:f5:f3:b1: 62:65:48:22:7f:d2:36:2e:21:62:d2:a3:08:b0:bb: a1:ec:96:7b:ee:8e:99:b8:34:78:02:50:dc:4e:52: 2a:18:d6:13:0a:d6:db:9c:62:83:e5:5b:d8:3b:0e: bd:11:53:3e:6f:fe:1c:be:a2:a5:ad:33:c9:39:35: 6c:44:1b:e0:1c:4d:53:a8:5c:0a:3f:29:83:4e:b2: bd:0e:f1:03:c4:62:c7:89:ae:26:29:e2:3d:2d:b2: 97:21:e9:3b:1e:16:e0:d0:0f:f5:a0:34:0f:82:58: 7a:50:fa:f5:61:26:bf:98:db:02:df:c9:21:b4:33: 25:61:99:97:16:15:6a:c4:a5:f4:13:01:15:39:4c: d1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:AD:F4:20:92:5B:59:FC:90:C3:A5:B4:7F:2E:66:E8:2E:15:D5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:fc:6e:d2:98:72:1b:0b:52:4b:d3:ea:29:ba:93:95:2e:3c: 6a:06:fc:6e:9f:47:2e:8b:01:0b:f9:fe:b3:a9:82:20:77:fd: cb:6c:83:0d:14:57:bf:1c:ad:31:e7:1c:c1:be:2a:67:3a:1c: 3c:23:e1:c6:85:1b:b9:43:52:b4:24:15:f6:5c:53:63:3f:c0: f6:80:e8:ee:ca:13:c0:24:3a:2e:49:00:f1:a3:08:13:93:08: 5f:a8:88:9a:c5:f4:c5:1b:7b:fe:c3:bb:1f:bb:9f:08:b4:e3: 6e:73:c0:54:2c:c4:fc:f1:44:6f:f3:fb:61:6e:73:c6:39:6b: e5:ce:09:ae:ad:39:9e:96:98:48:61:fa:76:2a:1f:c2:48:de: 81:bb:96:b7:d3:2e:c4:bc:13:37:ee:2f:0a:d5:b1:14:de:32: 9b:7f:0f:29:78:40:58:7e:84:38:ee:ac:d6:ab:96:15:44:9c: f4:b4:ce:c1:f2:20:2c:74:e8:fb:8d:55:58:1c:31:57:6d:9e: a3:fd:1c:ef:8c:a2:8e:e2:fc:f8:ba:62:5c:c3:52:e9:c4:7b: 07:ea:f4:4a:b3:fb:9f:c0:40:6b:34:c9:86:1e:53:db:55:a1: 57:c5:7d:88:15:d1:6e:c9:2b:62:d8:d5:42:84:f8:d0:6a:39: 25:aa:84:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i39AaFRLW4ID5KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZDJiNTFmZTYtMWRkZC00NjdjLTg5N2YtNzUxNzM5NTlmYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN/uwSD0hYpK6W0W8hv23oVfwwZ19JLF8rcl 3acYncFignfujr1DO7i+hv6uOb1rx6OWqWFDVI4F6IK91v66O7/9Y1wYhHj1jVc9 NrershpczGWt532eLie7LGNcrBm6xcJPPm/Iy6yuXc3dVzR7FEi+F77187FiZUgi f9I2LiFi0qMIsLuh7JZ77o6ZuDR4AlDcTlIqGNYTCtbbnGKD5VvYOw69EVM+b/4c vqKlrTPJOTVsRBvgHE1TqFwKPymDTrK9DvEDxGLHia4mKeI9LbKXIek7Hhbg0A/1 oDQPglh6UPr1YSa/mNsC38khtDMlYZmXFhVqxKX0EwEVOUzRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2t9CCSW1n8kMOltH8uZuguFdVwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYmZhMDAzY2MtMTNkYy0z MGFjLTliNGYtMDI4MThiNjUxOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL8btKYchsLUkvT6im6k5UuPGoG/G6fRy6LAQv5/rOpgiB3/ctsgw0U V78crTHnHMG+Kmc6HDwj4caFG7lDUrQkFfZcU2M/wPaA6O7KE8AkOi5JAPGjCBOT CF+oiJrF9MUbe/7Dux+7nwi0425zwFQsxPzxRG/z+2Fuc8Y5a+XOCa6tOZ6WmEhh +nYqH8JI3oG7lrfTLsS8EzfuLwrVsRTeMpt/Dyl4QFh+hDjurNarlhVEnPS0zsHy ICx06PuNVVgcMVdtnqP9HO+Moo7i/Pi6YlzDUunEewfq9Eqz+5/AQGs0yYYeU9tV oVfFfYgV0W7JK2LY1UKE+NBqOSWqhDg= -----END CERTIFICATE-----Generated at Wed Jul 29 04:48:04 2026 by rpki-client