$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa File: bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa (raw, json) Hash identifier: c+0VlQvHDYMadR4CizAmpzNBzPRW/bOiEdvsuvO1Xfw= Subject key identifier: B7:AA:BD:79:98:58:9B:2D:94:B6:F1:E5:5F:55:5E:E7:44:6B:C0:DA Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F4328584CE245355FAA03E4F753081D80 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa Signing time: Mon 16 Feb 2026 16:26:46 +0000 ROA not before: Mon 16 Feb 2026 16:26:46 +0000 ROA not after: Sun 17 May 2026 15:26:46 +0000 asID: 4540 IP address blocks: 135.136.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e2:45:35:5f:aa:03:e4:f7:53:08:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Feb 16 16:26:46 2026 GMT Not After : May 17 15:26:46 2026 GMT Subject: CN=dd9a4e26-63ff-4f4f-b2f2-13efef82ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4c:b3:0c:41:a6:18:67:d0:1d:48:0f:51:9a: cd:41:a6:2a:a1:fd:97:21:2a:f9:58:95:16:a8:ce: cc:08:c3:f5:a8:26:1d:bd:1c:96:81:cd:74:4b:9e: e4:22:36:af:ae:67:bb:3f:34:5b:8c:b9:6f:59:37: c9:e4:66:01:b6:82:96:71:9c:5e:e3:db:58:ac:97: 7f:e6:a6:a3:2b:ba:d6:58:b4:be:e0:9e:49:50:2d: 56:0b:a7:8c:2d:a8:6a:d6:c8:14:2d:b7:60:e1:39: 29:c2:6b:bc:50:11:4c:f9:df:b8:c7:37:47:41:ca: b6:e7:bf:08:9f:b0:7e:21:79:c2:1f:26:2a:28:c5: 66:bd:80:58:a5:11:83:7b:93:89:bf:e4:74:36:f7: 65:99:6d:7b:aa:0f:1d:50:b3:fa:4c:75:4a:7e:3f: 78:a3:7f:80:65:ef:ff:c1:47:52:1c:93:e3:53:ec: 77:70:29:21:56:a4:d1:a6:c9:a3:fd:82:5a:47:2f: a3:fe:55:40:76:fb:7c:cb:80:a5:a0:c1:1d:27:b1: f0:31:0b:a9:f1:89:8b:07:43:4f:58:14:7d:71:cf: b6:05:0e:a1:6d:6d:d4:e0:0c:92:65:48:07:f4:83: 0b:1f:aa:19:af:b2:d6:60:b5:f6:69:09:7b:ff:c3: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:BD:79:98:58:9B:2D:94:B6:F1:E5:5F:55:5E:E7:44:6B:C0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/bfa003cc-13dc-30ac-9b4f-02818b6519f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 135.136.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c5:8c:90:d2:a9:62:12:22:67:17:b0:c2:e1:90:44:8d:80: 2b:19:6e:b8:71:93:74:93:c4:16:36:38:d5:13:ff:03:cb:21: a9:66:88:eb:67:87:8d:8f:ce:ed:c1:7e:fc:b1:65:3e:04:cc: d9:f9:7c:34:72:f9:76:55:ab:2e:a5:92:36:98:23:ec:8a:bf: d7:30:54:f9:f2:11:8f:f9:5d:85:32:4c:65:a5:48:c1:db:f5: 3c:a6:87:73:33:7c:e9:e5:93:5f:e7:12:b9:9b:2c:18:a8:f4: 95:3f:d3:e3:8f:16:d9:fa:68:64:0f:e6:9c:66:de:75:a9:bf: 34:4a:8c:c2:f7:19:d1:ed:de:9d:c2:43:6f:c4:81:45:45:f1: a7:ff:7c:95:f8:f6:24:a0:72:ec:3a:b1:32:9d:70:31:a2:db: 0d:b4:eb:7f:5e:2d:e3:5f:3b:7c:80:c3:8e:02:0c:74:0a:1b: b4:cf:d0:c5:d5:ab:7b:f7:58:b3:00:db:06:e6:bd:99:f6:d1: 9c:cb:b6:c8:c3:83:32:30:3c:94:b4:23:03:47:53:b5:c5:fd: ed:5b:3f:a2:0b:7f:59:a1:fb:f3:86:7b:64:f5:98:7f:f0:1f: 3e:17:fa:cb:19:02:08:10:35:df:b6:1e:27:28:ed:0a:99:64: db:c9:0e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEziRTVfqgPk91MIHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI2MDIxNjE2MjY0NloXDTI2MDUxNzE1MjY0NlowLzEtMCsGA1UEAxMk ZGQ5YTRlMjYtNjNmZi00ZjRmLWIyZjItMTNlZmVmODJhZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkyzDEGmGGfQHUgPUZrNQaYqof2XISr5WJUW qM7MCMP1qCYdvRyWgc10S57kIjavrme7PzRbjLlvWTfJ5GYBtoKWcZxe49tYrJd/ 5qajK7rWWLS+4J5JUC1WC6eMLahq1sgULbdg4Tkpwmu8UBFM+d+4xzdHQcq2578I n7B+IXnCHyYqKMVmvYBYpRGDe5OJv+R0NvdlmW17qg8dULP6THVKfj94o3+AZe// wUdSHJPjU+x3cCkhVqTRpsmj/YJaRy+j/lVAdvt8y4CloMEdJ7HwMQup8YmLB0NP WBR9cc+2BQ6hbW3U4AySZUgH9IMLH6oZr7LWYLX2aQl7/8MhfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeqvXmYWJstlLbx5V9VXudEa8DaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvYmZhMDAzY2MtMTNkYy0z MGFjLTliNGYtMDI4MThiNjUxOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh4jwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzFjJDSqWISImcXsMLhkESNgCsZbrhxk3STxBY2ONUT/wPLIalmiOtn h42Pzu3BfvyxZT4EzNn5fDRy+XZVqy6lkjaYI+yKv9cwVPnyEY/5XYUyTGWlSMHb 9Tymh3MzfOnlk1/nErmbLBio9JU/0+OPFtn6aGQP5pxm3nWpvzRKjML3GdHt3p3C Q2/EgUVF8af/fJX49iSgcuw6sTKdcDGi2w20639eLeNfO3yAw44CDHQKG7TP0MXV q3v3WLMA2wbmvZn20ZzLtsjDgzIwPJS0IwNHU7XF/e1bP6ILf1mh+/OGe2T1mH/w Hz4X+ssZAggQNd+2Hico7QqZZNvJDow= -----END CERTIFICATE-----Generated at Fri Feb 27 07:28:15 2026 by rpki-client