$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa File: 0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa (raw, json) Hash identifier: tDkjpXJ7us+7HmWdiV0c3y5V0tYm97LJFDzneY7zGbE= Subject key identifier: 87:A5:1B:13:3A:A8:D6:B0:1D:59:E7:AE:5E:41:CC:8B:31:B6:3B:39 Certificate issuer: /CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Certificate serial: 010D0C9F4328584CA4D33DEF7CC7F9A7761646A0 Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa Signing time: Sun 25 Jan 2026 16:12:50 +0000 ROA not before: Sun 25 Jan 2026 16:12:50 +0000 ROA not after: Sat 25 Apr 2026 15:12:50 +0000 asID: 6079 IP address blocks: 48.44.0.0/17 maxlen: 17 48.44.132.0/22 maxlen: 22 48.44.136.0/21 maxlen: 21 48.44.144.0/20 maxlen: 20 48.44.176.0/20 maxlen: 20 48.44.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:d3:3d:ef:7c:c7:f9:a7:76:16:46:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Validity Not Before: Jan 25 16:12:50 2026 GMT Not After : Apr 25 15:12:50 2026 GMT Subject: CN=bdf6f2f3-71b8-4e7c-b6a5-05d1f1eae891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9a:61:83:f2:ce:e7:70:ac:d0:93:5e:01:8f: 81:55:49:d2:99:42:e0:1c:b8:2e:0f:be:96:03:c6: 96:40:79:8d:1b:84:ef:f8:26:86:75:29:fc:c2:26: dd:51:21:73:36:8d:5f:e2:ec:ba:6a:0a:1a:65:c0: 72:41:ee:c8:43:46:3c:fb:03:5a:ca:9e:db:53:96: 06:95:5d:15:70:35:5a:03:5b:d9:78:8b:bc:84:4a: b9:49:c0:85:ca:a4:72:26:8c:6c:8b:30:51:44:30: f8:37:43:af:b4:b0:a2:91:eb:0a:fc:15:e2:8c:bc: 0a:66:23:48:96:69:de:9b:3b:1e:0b:24:1e:20:6f: 5d:35:fd:0f:68:c9:a5:f8:75:f4:45:44:95:93:c0: 43:30:a2:29:2e:91:8f:88:b6:73:c3:03:a3:5a:b2: ce:1f:f5:41:d0:e4:5a:12:e6:ae:95:a8:0f:17:24: e9:ff:cb:b0:4a:d0:71:d7:ee:ac:7d:f0:fd:b3:5a: ce:21:b7:93:6b:46:f8:a0:6e:8d:9e:33:86:e6:b4: 64:0a:d8:f1:5a:43:6b:23:ce:37:27:8b:c5:82:40: bf:2d:d4:97:9e:30:52:ad:d9:53:51:37:70:b0:ce: 43:3f:66:78:86:6a:a7:b4:fd:8e:c0:82:fb:b3:19: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:1B:13:3A:A8:D6:B0:1D:59:E7:AE:5E:41:CC:8B:31:B6:3B:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/0a99490f-f3d5-3f66-bb15-2d0381c8b061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl X509v3 Authority Key Identifier: keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer sbgp-ipAddrBlock: critical IPv4: 48.44.0.0/17 48.44.132.0-48.44.159.255 48.44.176.0-48.44.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e3:38:c7:5a:a4:82:cf:b3:18:44:6d:50:33:ee:f0:fa:06: d6:c1:a5:14:be:fb:df:95:1d:16:05:34:61:10:6f:2d:e2:af: 6b:f0:9e:d0:9e:0d:10:93:d9:18:b0:31:b9:2f:62:07:dd:a8: 99:c4:5d:b5:f4:93:43:70:47:b6:61:47:5e:b8:24:2c:be:43: 5e:fe:ff:a6:b7:02:8e:98:d7:9a:4c:46:b1:d8:09:69:78:77: b9:6e:c1:42:d3:f9:b1:bd:e8:d8:be:70:9f:9a:66:68:2d:6f: b3:fe:c5:c7:ae:63:80:4e:b3:8b:47:e7:dc:74:62:7b:26:ce: a2:7b:ab:07:5e:57:e3:0d:41:5f:cb:c4:79:8d:80:85:a1:5d: dd:8a:df:20:c1:1d:e8:db:a1:fc:ea:e1:73:b1:10:a1:0d:bb: 2a:4c:69:1d:19:5f:5b:1a:6d:c3:54:a7:9d:68:8f:d1:4f:78: b1:b3:7a:ff:da:6b:6f:ca:35:f7:88:3a:9a:ae:5b:4e:29:d7: bc:fc:0c:ab:61:8a:bd:eb:19:8c:cb:f1:82:c4:e2:2d:1f:f7: c3:10:e2:10:d2:ae:61:ad:24:1a:db:b2:62:06:e7:d7:e6:7d: 42:f1:bf:6c:ee:36:6c:8f:ee:72:bb:e1:4d:2f:69:18:0f:bf: 63:02:a9:03 -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEyk0z3vfMf5p3YWRqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm Y2Q5MB4XDTI2MDEyNTE2MTI1MFoXDTI2MDQyNTE1MTI1MFowLzEtMCsGA1UEAxMk YmRmNmYyZjMtNzFiOC00ZTdjLWI2YTUtMDVkMWYxZWFlODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Jphg/LO53Cs0JNeAY+BVUnSmULgHLguD76W A8aWQHmNG4Tv+CaGdSn8wibdUSFzNo1f4uy6agoaZcByQe7IQ0Y8+wNayp7bU5YG lV0VcDVaA1vZeIu8hEq5ScCFyqRyJoxsizBRRDD4N0OvtLCikesK/BXijLwKZiNI lmnemzseCyQeIG9dNf0PaMml+HX0RUSVk8BDMKIpLpGPiLZzwwOjWrLOH/VB0ORa EuaulagPFyTp/8uwStBx1+6sffD9s1rOIbeTa0b4oG6NnjOG5rRkCtjxWkNrI843 J4vFgkC/LdSXnjBSrdlTUTdwsM5DP2Z4hmqntP2OwIL7sxl3lwIDAQABo4IDcTCC A20wHQYDVR0OBBYEFIelGxM6qNawHVnnrl5BzIsxtjs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4 NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvMGE5OTQ5MGYtZjNkNS0z ZjY2LWJiMTUtMmQwMzgxYzhiMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0 NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3 ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0 NTA0N2ZjZDkuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQHMCwAMAwD BAIwLIQDBAUwLIAwDAMEBDAssAMEBTAswDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA44zjHWqSCz7MYRG1Q M+7w+gbWwaUUvvvflR0WBTRhEG8t4q9r8J7Qng0Qk9kYsDG5L2IH3aiZxF219JND cEe2YUdeuCQsvkNe/v+mtwKOmNeaTEax2AlpeHe5bsFC0/mxvejYvnCfmmZoLW+z /sXHrmOATrOLR+fcdGJ7Js6ie6sHXlfjDUFfy8R5jYCFoV3dit8gwR3o26H86uFz sRChDbsqTGkdGV9bGm3DVKedaI/RT3ixs3r/2mtvyjX3iDqarltOKde8/AyrYYq9 6xmMy/GCxOItH/fDEOIQ0q5hrSQa27JiBufX5n1C8b9s7jZsj+5yu+FNL2kYD79j AqkD -----END CERTIFICATE-----Generated at Sun Mar 1 23:18:30 2026 by rpki-client