$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa File: 650397a0-2c64-34fa-8472-bf99c63feaf7.roa (raw, json) Hash identifier: riRTs20wYV20HrSUn686hO1lxBVp3MlzrF5znBZgyJM= Subject key identifier: C9:43:CF:C6:A8:4B:3B:47:C0:9E:73:15:EA:2E:00:F7:70:D5:0D:9D Certificate issuer: /CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Certificate serial: 010D0C9F4328584F15CCE3417C5FB3258D67D980 Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 7029 IP address blocks: 48.44.132.0/22 maxlen: 22 48.44.136.0/21 maxlen: 21 48.44.144.0/20 maxlen: 20 48.44.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e3:41:7c:5f:b3:25:8d:67:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=065471b6-f8ac-4b23-8813-38150e866fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:55:41:b9:1d:79:80:c8:91:71:9b:f1:db: dc:44:ae:0d:c2:e5:2a:7b:02:7c:d5:64:e3:2a:6e: 85:04:ef:f8:77:6d:04:25:14:30:e7:b5:1f:06:74: bb:92:59:56:2a:cf:11:7d:2b:31:2a:34:2b:e7:f0: ae:71:a9:3b:51:ca:f1:39:ad:54:41:16:8d:2e:ee: e9:28:19:67:ca:d5:d5:24:4c:06:7e:1f:7b:f3:10: 33:ff:cd:91:4f:a3:cc:da:46:85:d9:d3:6f:c6:9f: a1:4f:39:8a:c0:a6:75:91:3d:b8:1c:3f:73:55:2b: 87:90:07:70:15:f7:32:92:dd:88:a9:02:8a:21:b3: 49:4b:4c:db:14:a7:1b:38:d4:13:5c:c1:5e:bc:5f: 90:fc:d7:84:b6:aa:83:ba:df:b2:dc:d7:ea:48:35: 14:ca:37:8b:49:c8:3f:3d:09:31:0d:0f:be:93:8a: 6a:ee:f1:4b:a8:93:c8:3b:82:62:99:87:f5:5e:c4: ab:5d:b3:25:8f:60:b8:d1:65:90:01:af:e0:69:d8: 9e:f1:e1:dd:47:98:91:c1:5c:c8:a0:16:0b:2e:a1: a7:84:a6:c8:d1:9d:35:bb:f7:40:8d:8e:d9:43:cb: 16:77:0b:33:c4:ac:5b:d8:76:08:11:af:7f:86:16: 0b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:43:CF:C6:A8:4B:3B:47:C0:9E:73:15:EA:2E:00:F7:70:D5:0D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl X509v3 Authority Key Identifier: keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer sbgp-ipAddrBlock: critical IPv4: 48.44.132.0-48.44.159.255 48.44.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:57:f6:c0:8b:27:d4:75:32:69:f5:5c:9d:0d:c3:5d:ca:05: 39:62:00:42:92:28:f7:7a:1f:df:31:e5:7f:17:14:4b:d6:4a: 15:98:a5:3a:67:81:bf:67:f0:ce:3d:2e:d6:93:3e:90:2d:c9: cc:ac:06:49:0f:19:97:95:df:79:95:d5:40:52:1e:2a:be:cb: 93:d0:36:1e:b2:b6:5f:07:00:71:b1:3f:0c:3c:90:0b:13:c2: 00:ea:ba:a7:45:d6:39:4b:26:04:0f:f6:fc:86:64:48:f0:e8: 19:55:6a:ac:98:2a:a6:92:26:73:bb:81:fa:72:1b:e7:bc:b3: d7:1d:6a:f1:23:4b:af:2f:8e:39:66:fd:e6:36:70:c4:6d:b3: 08:de:56:34:99:96:35:1a:db:f3:5c:22:5e:01:29:b1:b3:0a: d2:e5:ae:a1:fa:4f:52:d3:77:61:04:d1:f5:a3:2b:0b:bc:e9: d9:68:c8:2d:93:86:91:4a:cc:41:f3:5a:19:ba:7c:63:93:74: 26:c2:60:a8:87:73:0d:7b:00:35:02:af:18:bf:00:9f:4e:c2: 63:2a:27:6b:6d:cb:bc:11:2c:2a:6d:5f:a8:48:46:36:24:57: a7:0f:d1:bb:14:cd:1a:21:28:df:38:c1:79:72:3a:0d:51:2c: 27:59:9c:3b -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE8VzONBfF+zJY1n2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm Y2Q5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MDY1NDcxYjYtZjhhYy00YjIzLTg4MTMtMzgxNTBlODY2ZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJxVQbkdeYDIkXGb8dvcRK4NwuUqewJ81WTj Km6FBO/4d20EJRQw57UfBnS7kllWKs8RfSsxKjQr5/Cucak7UcrxOa1UQRaNLu7p KBlnytXVJEwGfh978xAz/82RT6PM2kaF2dNvxp+hTzmKwKZ1kT24HD9zVSuHkAdw Ffcykt2IqQKKIbNJS0zbFKcbONQTXMFevF+Q/NeEtqqDut+y3NfqSDUUyjeLScg/ PQkxDQ++k4pq7vFLqJPIO4JimYf1XsSrXbMlj2C40WWQAa/gadie8eHdR5iRwVzI oBYLLqGnhKbI0Z01u/dAjY7ZQ8sWdwszxKxb2HYIEa9/hhYL1QIDAQABo4IDYzCC A18wHQYDVR0OBBYEFMlDz8aoSztHwJ5zFeouAPdw1Q2dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4 NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvNjUwMzk3YTAtMmM2NC0z NGZhLTg0NzItYmY5OWM2M2ZlYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0 NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3 ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0 NTA0N2ZjZDkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIwLIQD BAUwLIADBAQwLLAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAO1f2wIsn1HUyafVcnQ3DXcoFOWIAQpIo93of 3zHlfxcUS9ZKFZilOmeBv2fwzj0u1pM+kC3JzKwGSQ8Zl5XfeZXVQFIeKr7Lk9A2 HrK2XwcAcbE/DDyQCxPCAOq6p0XWOUsmBA/2/IZkSPDoGVVqrJgqppImc7uB+nIb 57yz1x1q8SNLry+OOWb95jZwxG2zCN5WNJmWNRrb81wiXgEpsbMK0uWuofpPUtN3 YQTR9aMrC7zp2WjILZOGkUrMQfNaGbp8Y5N0JsJgqIdzDXsANQKvGL8An07CYyon a23LvBEsKm1fqEhGNiRXpw/RuxTNGiEo3zjBeXI6DVEsJ1mcOw== -----END CERTIFICATE-----Generated at Tue Sep 22 10:42:38 2026 by rpki-client