$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/722de6b3-d1ce-3d7b-a0ad-a3e08a0f75da.roa File: 722de6b3-d1ce-3d7b-a0ad-a3e08a0f75da.roa (raw, json) Hash identifier: 97+OW0+t65gBiUVoLTlUi3IXiRRMl4NH6x9XMh7ZFA4= Subject key identifier: 48:9B:09:F0:61:92:9E:3B:26:9A:55:2A:F6:55:BA:62:2F:CE:DE:A2 Certificate issuer: /CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Certificate serial: 010D0C9F4328584D12235FA7090BAE68C4126540 Authority key identifier: 88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/722de6b3-d1ce-3d7b-a0ad-a3e08a0f75da.roa Signing time: Thu 05 Mar 2026 19:57:24 +0000 ROA not before: Thu 05 Mar 2026 19:57:24 +0000 ROA not after: Wed 03 Jun 2026 18:57:24 +0000 asID: 6079 IP address blocks: 48.46.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:23:5f:a7:09:0b:ae:68:c4:12:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=136870e3-c4bf-4b79-9466-6d145047fcd9 Validity Not Before: Mar 5 19:57:24 2026 GMT Not After : Jun 3 18:57:24 2026 GMT Subject: CN=dcd0a173-bc42-4cba-bc53-6bef260c6e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:a6:2a:b9:d1:13:68:7f:d6:f8:cb:91:bf: 71:e6:7c:26:bb:86:a5:c3:f2:8b:53:de:db:f3:71: 4c:31:09:4d:1b:45:dd:0d:fd:14:f1:69:52:2f:5e: c9:d7:49:e8:91:f7:65:db:06:7a:af:b2:d9:f8:2b: ac:08:d7:83:c6:1d:f1:52:6f:8c:3b:d4:09:af:b2: b9:c7:91:8e:a7:fb:c9:e2:7d:8f:6c:0a:49:0e:33: 1e:7c:09:d4:22:cd:5f:5f:b0:15:9e:37:b0:d1:09: 35:7f:e5:85:4b:98:65:d3:3d:30:aa:61:38:7b:74: 41:a9:eb:9d:15:fa:7b:bd:85:a7:b7:d2:b8:43:24: 40:63:6c:8b:53:bb:ee:d6:dd:0e:1e:37:c9:87:e4: 25:81:70:af:39:d1:37:9f:5d:16:88:e1:90:6c:97: 67:33:4a:e2:0c:f2:7b:58:6a:b9:69:83:c6:c9:0f: 82:f7:6e:06:6c:c2:90:11:c5:42:0d:d5:20:cf:6f: 9a:84:48:80:2b:e9:19:9e:3c:f7:95:6d:4d:76:37: 0d:03:37:20:9e:3a:d8:be:b3:57:9f:1c:b1:5b:d8: 66:36:43:bc:2b:cf:5f:b8:f3:87:ed:90:f5:e8:89: 14:24:c5:d8:59:03:87:f7:3b:f7:3d:33:90:d7:03: 82:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9B:09:F0:61:92:9E:3B:26:9A:55:2A:F6:55:BA:62:2F:CE:DE:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/722de6b3-d1ce-3d7b-a0ad-a3e08a0f75da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9/136870e3-c4bf-4b79-9466-6d145047fcd9.crl X509v3 Authority Key Identifier: keyid:88:D5:0A:C9:95:75:6C:7F:75:EC:C7:FB:E7:9B:82:AB:A9:7E:44:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/136870e3-c4bf-4b79-9466-6d145047fcd9.cer sbgp-ipAddrBlock: critical IPv4: 48.46.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:71:a3:ab:98:a5:1c:d1:af:f7:1d:53:48:de:42:fa:72:09: 3b:cc:8a:6d:0e:76:97:d7:94:5a:d3:07:2c:91:96:f6:d1:e4: 20:0a:eb:04:b2:56:d8:23:12:6d:82:14:da:ef:af:e0:f9:22: 8b:4d:50:41:47:b8:1a:c4:95:b7:27:3b:6a:90:a3:c7:4f:63: 1b:db:28:6e:3b:48:45:d3:be:e6:22:c2:e5:53:b8:c3:ac:c1: 2d:d3:d4:59:ab:4f:fe:53:cd:24:58:70:4a:1a:77:28:5c:48: 95:8c:32:7a:e1:01:f2:4d:b2:00:c1:d6:5d:c6:c4:79:13:f7: 18:50:c7:00:f4:dc:41:7b:5b:a2:f3:45:95:a1:89:f7:69:5d: 0d:aa:39:63:2c:18:0b:41:ea:27:4d:16:9d:9a:7b:97:12:80: 31:63:ff:25:8e:15:a8:72:59:e5:b4:3c:45:fa:7e:1d:c7:f8: c4:88:21:2e:11:0e:25:6c:8a:02:40:c8:60:01:d9:c0:6f:d3: 75:b1:ba:55:5c:5d:91:6b:97:34:7c:a2:f7:d9:c0:33:bb:9f: 7c:18:74:1e:52:d9:64:21:6b:7f:5c:7d:b8:35:75:e0:d9:3c: 3b:f2:22:7f:3b:ac:4e:2c:f0:e5:43:ae:a2:7b:fe:10:60:83: 42:8f:96:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0SI1+nCQuuaMQSZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM2ODcwZTMtYzRiZi00Yjc5LTk0NjYtNmQxNDUwNDdm Y2Q5MB4XDTI2MDMwNTE5NTcyNFoXDTI2MDYwMzE4NTcyNFowLzEtMCsGA1UEAxMk ZGNkMGExNzMtYmM0Mi00Y2JhLWJjNTMtNmJlZjI2MGM2ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgymKrnRE2h/1vjLkb9x5nwmu4alw/KLU97b 83FMMQlNG0XdDf0U8WlSL17J10nokfdl2wZ6r7LZ+CusCNeDxh3xUm+MO9QJr7K5 x5GOp/vJ4n2PbApJDjMefAnUIs1fX7AVnjew0Qk1f+WFS5hl0z0wqmE4e3RBqeud Ffp7vYWnt9K4QyRAY2yLU7vu1t0OHjfJh+QlgXCvOdE3n10WiOGQbJdnM0riDPJ7 WGq5aYPGyQ+C924GbMKQEcVCDdUgz2+ahEiAK+kZnjz3lW1NdjcNAzcgnjrYvrNX nxyxW9hmNkO8K89fuPOH7ZD16IkUJMXYWQOH9zv3PTOQ1wOCuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEibCfBhkp47JppVKvZVumIvzt6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4 NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0NTA0N2ZjZDkvNzIyZGU2YjMtZDFjZS0z ZDdiLWEwYWQtYTNlMDhhMGY3NWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM2ODcwZTMtYzRiZi00Yjc5LTk0 NjYtNmQxNDUwNDdmY2Q5LzEzNjg3MGUzLWM0YmYtNGI3OS05NDY2LTZkMTQ1MDQ3 ZmNkOS5jcmwwHwYDVR0jBBgwFoAUiNUKyZV1bH917Mf755uCq6l+ROwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzY4NzBlMy1jNGJmLTRiNzktOTQ2Ni02ZDE0 NTA0N2ZjZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDMC7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVxo6uYpRzRr/cdU0jeQvpyCTvMim0OdpfXlFrTByyRlvbR5CAK6wSy VtgjEm2CFNrvr+D5IotNUEFHuBrElbcnO2qQo8dPYxvbKG47SEXTvuYiwuVTuMOs wS3T1FmrT/5TzSRYcEoadyhcSJWMMnrhAfJNsgDB1l3GxHkT9xhQxwD03EF7W6Lz RZWhifdpXQ2qOWMsGAtB6idNFp2ae5cSgDFj/yWOFahyWeW0PEX6fh3H+MSIIS4R DiVsigJAyGAB2cBv03WxulVcXZFrlzR8ovfZwDO7n3wYdB5S2WQha39cfbg1deDZ PDvyIn87rE4s8OVDrqJ7/hBgg0KPlj8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:26:14 2026 by rpki-client