$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa File: de70bde6-180d-3658-82a5-a8d67698d4d2.roa (raw, json) Hash identifier: r7VPTCpBQhZ14kzgVqME+Jnso2YdYyJZDV3ezDwL6Rc= Subject key identifier: 9D:EF:88:DA:A7:A3:AC:21:0C:C4:37:9A:1C:51:BB:C9:2F:02:62:C5 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584EA2DFD15CA9FE7F4D7EE4D700 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 4540 IP address blocks: 135.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:d1:5c:a9:fe:7f:4d:7e:e4:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=b46f4327-ecde-44ca-b065-2b181bc23abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:9c:3b:37:24:bd:6a:6f:d7:4e:b4:11:f4: 41:23:ed:cc:77:23:59:98:12:ee:0d:1e:81:56:b0: 28:bc:5a:7b:25:33:20:fc:5e:bf:26:b5:8a:99:b9: 12:64:c0:2e:86:ec:1c:b9:e4:a7:03:c3:67:dc:78: c7:c6:0e:05:06:fc:3c:ad:3d:7e:99:e1:bf:33:66: e1:e9:0a:94:fd:6b:b2:76:7e:f7:94:84:24:a8:2c: eb:bc:f3:5f:d1:e9:85:a5:95:73:fc:0c:5b:b9:3e: 5a:43:6e:dc:6c:2e:af:2c:ce:04:d4:3b:6f:23:19: d0:45:cc:76:e8:5a:4b:33:3f:b3:ca:03:6f:48:97: fb:49:0a:17:27:71:71:2a:d3:7c:ee:cc:28:4d:5e: 8d:06:bf:6b:57:2f:12:57:96:32:f0:40:79:e9:13: 6d:02:fe:13:c8:9b:63:e7:7a:9d:9e:29:3a:fd:6b: c3:da:a5:84:6b:e5:0e:ea:8a:64:b0:40:d5:68:fe: 97:cd:36:b5:b4:f7:b9:da:da:fc:75:53:03:b9:1a: 9f:d6:db:aa:c5:83:3a:de:02:e7:d5:65:cb:d2:a9: 44:7a:92:2b:c6:5d:a2:85:e5:14:2c:38:9f:bd:a3: 2c:1d:4c:9a:6d:6d:36:f0:60:94:15:1f:5a:59:2b: a3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EF:88:DA:A7:A3:AC:21:0C:C4:37:9A:1C:51:BB:C9:2F:02:62:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/de70bde6-180d-3658-82a5-a8d67698d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7f:ee:be:d0:36:00:72:8d:13:08:d0:b8:3e:72:23:a4:91: dc:ac:90:72:d7:dd:b1:5c:18:a3:31:29:ab:a4:82:69:39:7a: 1b:3e:af:bb:88:63:06:ac:5e:22:7b:be:2d:57:93:ab:4d:14: 57:ec:5c:12:80:e0:eb:6a:a2:dd:45:db:b5:1a:d2:6f:60:57: 5b:a7:7d:43:cf:06:fe:d7:a0:98:95:9b:e8:c0:81:4e:e3:65: 0e:6c:b2:b2:ad:bb:84:74:f9:09:91:76:52:30:8f:b6:d9:0c: 38:29:32:6e:9a:06:d5:b6:48:75:f0:db:c5:9a:78:8b:ec:a1: 9a:9b:55:51:ce:61:c0:6d:3b:ab:30:12:0c:ed:23:66:dc:31: 4a:ab:8b:76:4e:5f:92:5d:99:15:cc:cf:90:c5:25:10:9f:e5: c2:9c:44:5d:b1:91:32:4e:0c:ce:d5:79:d7:66:db:ca:0f:c6: b6:68:39:88:cf:24:16:23:db:e1:37:72:13:a3:71:ca:30:0e: 2e:1e:eb:a6:ab:d3:8f:50:e1:e4:00:d5:03:0f:d4:33:44:0c: 1a:a4:c5:1b:94:d7:3a:48:b8:d3:52:0a:ef:13:af:84:17:e6: 8e:60:c6:c9:a8:2b:32:91:0b:dc:4d:b3:d8:f6:32:44:f5:2e: 33:f6:fc:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i39Fcqf5/TX7k1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk YjQ2ZjQzMjctZWNkZS00NGNhLWIwNjUtMmIxODFiYzIzYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGucOzckvWpv1060EfRBI+3MdyNZmBLuDR6B VrAovFp7JTMg/F6/JrWKmbkSZMAuhuwcueSnA8Nn3HjHxg4FBvw8rT1+meG/M2bh 6QqU/Wuydn73lIQkqCzrvPNf0emFpZVz/AxbuT5aQ27cbC6vLM4E1DtvIxnQRcx2 6FpLMz+zygNvSJf7SQoXJ3FxKtN87swoTV6NBr9rVy8SV5Yy8EB56RNtAv4TyJtj 53qdnik6/WvD2qWEa+UO6opksEDVaP6XzTa1tPe52tr8dVMDuRqf1tuqxYM63gLn 1WXL0qlEepIrxl2iheUULDifvaMsHUyabW028GCUFR9aWSuj9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3viNqno6whDMQ3mhxRu8kvAmLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvZGU3MGJkZTYtMTgwZC0z NjU4LTgyYTUtYThkNjc2OThkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl/7r7QNgByjRMI0Lg+ciOkkdyskHLX3bFcGKMxKaukgmk5ehs+r7uI YwasXiJ7vi1Xk6tNFFfsXBKA4Otqot1F27Ua0m9gV1unfUPPBv7XoJiVm+jAgU7j ZQ5ssrKtu4R0+QmRdlIwj7bZDDgpMm6aBtW2SHXw28WaeIvsoZqbVVHOYcBtO6sw EgztI2bcMUqri3ZOX5JdmRXMz5DFJRCf5cKcRF2xkTJODM7Veddm28oPxrZoOYjP JBYj2+E3chOjccowDi4e66ar049Q4eQA1QMP1DNEDBqkxRuU1zpIuNNSCu8Tr4QX 5o5gxsmoKzKRC9xNs9j2MkT1LjP2/Bo= -----END CERTIFICATE-----Generated at Wed Jul 29 02:27:43 2026 by rpki-client