$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/6e802deb-734a-3573-9909-5c1279901d81.roa File: 6e802deb-734a-3573-9909-5c1279901d81.roa (raw, json) Hash identifier: DumDs+LwNNkbqNqzx4vJ6dfx4Eibb7Ij8ud+F8Uv40E= Subject key identifier: F5:D3:80:57:36:F4:8A:66:54:F8:04:36:21:05:24:C5:16:60:06:3F Certificate issuer: /CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Certificate serial: 010D0C9F4328584F2527A7E4EAFDC5BA51B1AC80 Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/6e802deb-734a-3573-9909-5c1279901d81.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 4593 IP address blocks: 48.45.192.0/21 maxlen: 24 48.45.200.0/22 maxlen: 24 48.45.220.0/22 maxlen: 24 48.45.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a7:e4:ea:fd:c5:ba:51:b1:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=4f0c8eaa-dfce-4180-87a7-ef74831f3328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:00:6b:eb:8b:c8:f0:c7:98:e5:07:03:4c: c1:97:c4:de:da:40:67:b1:d9:f4:86:79:45:b9:2f: 44:78:03:c6:3e:c3:38:7c:89:9d:2b:03:09:62:be: 98:bc:67:68:4e:cb:de:8a:e1:5c:ee:d6:05:96:f8: 97:6a:a6:f8:fe:03:ef:1e:e5:07:68:76:df:52:98: 86:72:c7:51:f9:21:34:d8:29:a5:78:99:b8:25:26: d9:81:bc:f7:03:70:99:8a:f3:ae:ec:c2:84:3d:0d: 99:7c:13:bc:b9:c5:34:c5:3f:ef:82:72:88:b2:cd: a7:34:54:d8:0f:ff:be:41:9a:2e:a9:fc:04:5e:ae: fa:f5:63:fa:d9:fa:9d:66:97:89:3f:9f:4a:5c:10: d1:05:4a:b5:bd:84:08:55:cc:bb:ed:f0:bb:e3:ea: 21:7a:1c:07:dc:b7:95:57:8e:f7:94:1e:57:4d:ea: 99:7d:bd:69:d8:b0:8d:1d:06:38:f9:1b:00:f8:41: 45:49:8f:d5:11:75:97:aa:7c:04:10:25:da:fa:c2: bb:70:7d:ef:5c:2e:87:ba:a9:25:2d:50:17:a6:98: 64:f8:14:b7:8c:c6:51:60:70:b5:44:2f:15:04:57: 74:88:d0:78:d0:43:c2:3c:8e:90:80:4a:fb:73:f3: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D3:80:57:36:F4:8A:66:54:F8:04:36:21:05:24:C5:16:60:06:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/6e802deb-734a-3573-9909-5c1279901d81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl X509v3 Authority Key Identifier: keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer sbgp-ipAddrBlock: critical IPv4: 48.45.192.0-48.45.203.255 48.45.220.0-48.45.225.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:aa:d9:f2:13:b3:b7:2d:21:53:2e:8c:0b:b5:be:fa:a8:d0: f8:4c:1e:29:79:6b:f4:b3:a5:00:c5:1f:73:99:58:46:50:a8: 2a:e6:be:f6:b6:b6:bb:14:0b:e9:d4:10:f9:bf:12:ac:b3:a0: 3a:b7:8d:6c:17:ec:29:23:88:ee:10:08:de:8c:79:48:f7:1c: 82:08:44:c3:87:c2:f2:4e:41:57:3e:66:d6:9a:24:c3:43:63: 2f:7d:10:ca:e6:2d:5a:6f:92:05:ac:f6:14:b0:b0:db:3e:aa: 13:fb:42:b3:ff:0a:54:9c:ac:ff:03:8f:d2:9e:fc:da:db:67: 7b:7f:24:3e:cf:1e:a7:4b:e0:18:97:28:84:21:b3:48:7f:a5: 81:bd:30:cb:dc:66:64:37:f6:3a:1e:9c:65:18:c7:2d:f7:2f: ec:91:0c:3a:f4:b8:55:4c:f8:f2:1a:94:69:ee:b2:78:85:6a: 60:dc:6d:ad:8b:4d:f5:16:17:6d:ae:20:57:00:c3:fc:52:25: ea:81:0d:43:76:f0:a4:17:66:00:74:84:19:f4:6e:e1:0e:8a: 0a:c2:31:1e:a7:a6:d8:f5:33:f8:c8:89:d7:12:4b:b0:9f:ab: d1:e2:6e:1f:ab:b2:47:cd:d4:d5:09:dd:11:80:77:20:08:db: 56:4f:f4:26 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8lJ6fk6v3FulGxrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm Y2Q5MB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk NGYwYzhlYWEtZGZjZS00MTgwLTg3YTctZWY3NDgzMWYzMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAAAa+uLyPDHmOUHA0zBl8Te2kBnsdn0hnlF uS9EeAPGPsM4fImdKwMJYr6YvGdoTsveiuFc7tYFlviXaqb4/gPvHuUHaHbfUpiG csdR+SE02CmleJm4JSbZgbz3A3CZivOu7MKEPQ2ZfBO8ucU0xT/vgnKIss2nNFTY D/++QZouqfwEXq769WP62fqdZpeJP59KXBDRBUq1vYQIVcy77fC74+ohehwH3LeV V473lB5XTeqZfb1p2LCNHQY4+RsA+EFFSY/VEXWXqnwEECXa+sK7cH3vXC6Huqkl LVAXpphk+BS3jMZRYHC1RC8VBFd0iNB40EPCPI6QgEr7c/OmPQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPXTgFc29IpmVPgENiEFJMUWYAY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4 NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvNmU4MDJkZWItNzM0YS0z NTczLTk5MDktNWMxMjc5OTAxZDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0 NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3 ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0 NTA0N2ZjZDkuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAYwLcAD BAIwLcgwDAMEAjAt3AMEATAt4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5qtnyE7O3LSFTLowLtb76qND4 TB4peWv0s6UAxR9zmVhGUKgq5r72tra7FAvp1BD5vxKss6A6t41sF+wpI4juEAje jHlI9xyCCETDh8LyTkFXPmbWmiTDQ2MvfRDK5i1ab5IFrPYUsLDbPqoT+0Kz/wpU nKz/A4/Snvza22d7fyQ+zx6nS+AYlyiEIbNIf6WBvTDL3GZkN/Y6HpxlGMct9y/s kQw69LhVTPjyGpRp7rJ4hWpg3G2ti031FhdtriBXAMP8UiXqgQ1DdvCkF2YAdIQZ 9G7hDooKwjEep6bY9TP4yInXEkuwn6vR4m4fq7JHzdTVCd0RgHcgCNtWT/Qm -----END CERTIFICATE-----Generated at Sat Sep 26 14:59:59 2026 by rpki-client