$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa File: 650397a0-2c64-34fa-8472-bf99c63feaf7.roa (raw, json) Hash identifier: 9ZL+N3tjLEt1O7vdsX7GF7SN+pTIf1dKnZpZ36yZY3k= Subject key identifier: 67:6C:63:32:42:4D:DD:35:E4:A5:DD:AE:2B:1D:5B:8D:73:31:EC:D3 Certificate issuer: /CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Certificate serial: 010D0C9F4328584D932567E7B369D68ABACC5300 Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 7029 IP address blocks: 48.44.132.0/22 maxlen: 22 48.44.136.0/21 maxlen: 21 48.44.144.0/20 maxlen: 20 48.44.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:67:e7:b3:69:d6:8a:ba:cc:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=60c8eba7-305b-4a5a-8cc0-048b21cf2a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b0:d8:b2:d6:cb:8b:64:39:28:2e:b4:dc:42: 5a:b2:4e:07:d1:f5:a3:f7:a7:84:e6:e3:e7:06:ca: ef:28:37:4c:82:d9:4b:2c:66:00:1c:d5:ea:59:de: ca:cf:f9:95:06:b0:90:3b:7f:5c:f8:15:75:3a:dc: c4:11:b5:ca:b6:03:34:67:a1:db:3b:83:3e:67:90: 2a:de:54:15:45:af:44:94:25:a2:cc:72:d9:87:7a: 2e:a4:e3:85:3b:70:c3:93:30:55:db:a9:42:3a:9c: c6:c2:3f:77:1c:24:f5:2b:85:9c:8e:46:5c:9a:d0: 8f:a7:50:12:53:07:8d:08:dd:6c:6f:65:1a:10:66: 94:ee:0c:e5:ef:8d:c9:fd:9a:6a:a7:27:19:ca:34: c0:d5:a7:ba:b4:87:21:6c:8d:46:4b:c6:3c:44:ff: dc:a7:bf:cf:51:e7:59:5a:14:f5:05:54:a9:53:5a: 04:56:7d:a0:55:5e:6e:c3:3a:e5:bc:aa:6d:44:27: c1:9e:7a:5b:e3:60:7a:d9:74:71:8d:42:3a:d8:8b: 92:8f:de:88:f7:e4:23:f6:09:17:4a:79:fb:fe:62: e4:9b:c0:57:df:33:d1:25:47:df:f5:c7:15:ab:d2: c8:90:72:5f:a9:c0:c0:c0:55:5a:f4:b6:4b:ff:da: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6C:63:32:42:4D:DD:35:E4:A5:DD:AE:2B:1D:5B:8D:73:31:EC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/650397a0-2c64-34fa-8472-bf99c63feaf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl X509v3 Authority Key Identifier: keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer sbgp-ipAddrBlock: critical IPv4: 48.44.132.0-48.44.159.255 48.44.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:40:2c:50:bc:88:a2:2b:4e:7b:65:ec:f2:53:30:ce:1c:2a: 0e:71:6d:90:f1:ba:ea:ef:7f:13:89:63:08:b8:3a:c3:e6:f1: 4c:61:44:c3:ec:e8:b2:54:fb:dd:a3:58:a5:a0:34:e7:9d:7a: 08:a2:d7:82:1e:49:36:a0:b8:06:f5:82:99:3c:5f:7b:f8:c0: c7:19:39:db:2f:dd:db:31:2e:56:ea:e2:5c:74:50:45:4d:e4: ca:8d:2c:90:b0:46:b2:ba:32:a2:dc:a1:8d:8a:2c:1e:f8:b0: f6:6b:d3:67:d5:99:fd:7c:d1:9b:e6:c1:b7:22:bb:a4:49:2c: ce:ab:8b:66:37:62:8f:f9:56:10:07:5a:39:4d:96:41:00:41: 33:2e:f0:0e:68:5a:4f:4c:cd:fa:5d:e7:fb:49:6c:d1:44:b2: e3:89:8e:d0:5a:26:51:57:24:27:9c:57:10:b4:2e:b4:bd:7d: f0:a5:7c:c2:2b:bd:90:3d:0a:37:a1:3b:54:ad:38:98:2b:a4: af:b0:cf:88:a4:9a:ff:f4:1c:c0:ad:17:a8:f9:c8:60:6e:5f: 89:69:8a:ae:0e:94:a1:1d:b8:0c:6e:d6:d9:41:be:31:57:d0: 07:76:25:03:f5:b9:37:08:b3:e6:44:61:75:78:82:ff:e6:be: 54:19:2f:a6 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE2TJWfns2nWirrMUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm Y2Q5MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk NjBjOGViYTctMzA1Yi00YTVhLThjYzAtMDQ4YjIxY2YyYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLDYstbLi2Q5KC603EJask4H0fWj96eE5uPn BsrvKDdMgtlLLGYAHNXqWd7Kz/mVBrCQO39c+BV1OtzEEbXKtgM0Z6HbO4M+Z5Aq 3lQVRa9ElCWizHLZh3oupOOFO3DDkzBV26lCOpzGwj93HCT1K4WcjkZcmtCPp1AS UweNCN1sb2UaEGaU7gzl743J/ZpqpycZyjTA1ae6tIchbI1GS8Y8RP/cp7/PUedZ WhT1BVSpU1oEVn2gVV5uwzrlvKptRCfBnnpb42B62XRxjUI62IuSj96I9+Qj9gkX Snn7/mLkm8BX3zPRJUff9ccVq9LIkHJfqcDAwFVa9LZL/9onXQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFGdsYzJCTd015KXdrisdW41zMezTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4 NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvNjUwMzk3YTAtMmM2NC0z NGZhLTg0NzItYmY5OWM2M2ZlYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0 NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3 ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0 NTA0N2ZjZDkuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAIwLIQD BAUwLIADBAQwLLAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAKUAsULyIoitOe2Xs8lMwzhwqDnFtkPG66u9/ E4ljCLg6w+bxTGFEw+zoslT73aNYpaA05516CKLXgh5JNqC4BvWCmTxfe/jAxxk5 2y/d2zEuVuriXHRQRU3kyo0skLBGsroyotyhjYosHviw9mvTZ9WZ/XzRm+bBtyK7 pEkszquLZjdij/lWEAdaOU2WQQBBMy7wDmhaT0zN+l3n+0ls0USy44mO0FomUVck J5xXELQutL198KV8wiu9kD0KN6E7VK04mCukr7DPiKSa//QcwK0XqPnIYG5fiWmK rg6UoR24DG7W2UG+MVfQB3YlA/W5Nwiz5kRhdXiC/+a+VBkvpg== -----END CERTIFICATE-----Generated at Wed May 13 06:23:36 2026 by rpki-client