
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa
File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json)
Hash identifier: Gtc0WnDK9Kxygdk6CEkSYH5wFXHJC+owKad0pCRgcrY=
Subject key identifier: 7D:22:BD:02:B8:C3:40:47:F7:46:76:BC:E6:36:AD:01:E4:8B:BF:F5
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F4328584E2D9F2A5229E14BDE29545A00
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 1299
IP address blocks: 148.188.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:2a:52:29:e1:4b:de:29:54:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=4a354ae1-8d80-435c-9bfd-13165f80dd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:32:06:08:e4:35:f4:66:26:29:46:2f:b8:
06:51:9a:a1:d9:79:c6:bf:b6:d4:86:26:e1:6f:33:
f8:60:89:ab:6e:f0:1c:d1:0e:b2:51:c7:e8:a2:d1:
17:67:70:85:45:fe:90:15:e6:8b:ad:fb:d3:c0:aa:
7a:bc:b1:b8:71:15:f0:4f:6f:ca:b1:b7:05:50:5f:
89:ff:34:e7:8c:54:23:3f:cc:4c:81:56:e7:bf:d1:
42:d0:8b:fc:2c:45:4a:82:e2:66:0b:f4:ee:97:df:
25:8b:e5:67:89:a8:11:e9:41:10:d7:9d:90:6c:3f:
7f:a1:8d:da:3a:62:eb:70:91:d9:d5:33:bc:01:86:
ef:9f:82:48:fa:92:d6:6d:69:1d:ab:1b:39:2a:0d:
b2:29:54:14:7b:3f:e7:8d:47:57:90:68:2a:13:99:
9e:7d:96:ea:5b:d4:9e:5e:5b:d2:ea:7d:47:9a:87:
6a:03:96:01:4f:83:01:60:55:c1:60:a8:30:31:7b:
e9:51:7c:f6:5f:ca:c5:1d:3d:dd:63:7c:fe:00:6d:
c8:eb:36:2d:de:ad:25:9f:a5:46:6b:07:d4:12:c5:
ae:24:83:78:99:f4:42:89:bb:e8:69:80:a8:46:74:
22:6b:9b:eb:24:cf:6b:ef:cf:08:1f:81:ff:f7:6b:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:BD:02:B8:C3:40:47:F7:46:76:BC:E6:36:AD:01:E4:8B:BF:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:cf:80:aa:1c:17:5e:af:3a:df:ad:f4:d2:c4:49:77:7f:a5:
53:3a:00:a4:b6:cf:b9:5f:1d:16:f8:6e:de:0d:67:05:7f:8b:
f1:40:4e:7a:5f:3e:b5:22:73:06:6d:ce:69:10:a8:82:e8:88:
98:ef:ac:f7:86:d3:dd:07:c8:04:fa:cb:4d:0e:85:85:8b:21:
b1:2f:92:29:6e:ce:21:09:3c:1e:d8:a4:88:5d:44:ef:e9:7f:
15:00:f9:f6:a1:14:8b:fd:6f:bd:b4:2d:56:c5:d6:1b:c6:9c:
03:22:3f:a6:53:4b:40:8f:3c:24:0d:8a:3e:15:e1:5a:a3:01:
70:45:00:3b:e5:4b:a8:ec:14:8a:91:e4:e8:a6:03:89:ef:de:
09:40:f1:75:ae:3a:86:16:dc:11:98:29:5d:5b:8c:8e:1b:b0:
d7:a4:fc:53:75:dd:ad:55:fb:5e:73:1f:e6:16:f3:12:1e:c1:
dc:8d:68:ef:15:75:7d:e8:7f:4c:50:73:16:0e:15:38:45:62:
0f:ca:01:e8:05:35:a7:06:72:35:75:ed:eb:d3:d6:a8:8a:18:
aa:5f:9f:5d:f8:48:ec:43:94:38:0a:39:cc:d5:e5:00:39:09:
e7:36:4c:b0:3b:a5:5a:2d:a0:f8:27:c1:bf:21:d0:66:99:7f:
ce:1f:79:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnypSKeFL3ilUWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw
OTQ4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
NGEzNTRhZTEtOGQ4MC00MzVjLTliZmQtMTMxNjVmODBkZDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMgyBgjkNfRmJilGL7gGUZqh2XnGv7bUhibh
bzP4YImrbvAc0Q6yUcfootEXZ3CFRf6QFeaLrfvTwKp6vLG4cRXwT2/KsbcFUF+J
/zTnjFQjP8xMgVbnv9FC0Iv8LEVKguJmC/Tul98li+VniagR6UEQ152QbD9/oY3a
OmLrcJHZ1TO8AYbvn4JI+pLWbWkdqxs5Kg2yKVQUez/njUdXkGgqE5mefZbqW9Se
XlvS6n1HmodqA5YBT4MBYFXBYKgwMXvpUXz2X8rFHT3dY3z+AG3I6zYt3q0ln6VG
awfUEsWuJIN4mfRCibvoaYCoRnQia5vrJM9r788IH4H/92uiHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH0ivQK4w0BH90Z2vOY2rQHki7/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl
M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z
OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1
ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl
MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2
MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjPgKocF16vOt+t9NLESXd/pVM6AKS2z7lfHRb4bt4NZwV/i/FATnpf
PrUicwZtzmkQqILoiJjvrPeG090HyAT6y00OhYWLIbEvkiluziEJPB7YpIhdRO/p
fxUA+fahFIv9b720LVbF1hvGnAMiP6ZTS0CPPCQNij4V4VqjAXBFADvlS6jsFIqR
5OimA4nv3glA8XWuOoYW3BGYKV1bjI4bsNek/FN13a1V+15zH+YW8xIewdyNaO8V
dX3of0xQcxYOFThFYg/KAegFNacGcjV17evT1qiKGKpfn134SOxDlDgKOczV5QA5
Cec2TLA7pVotoPgnwb8h0GaZf84fed8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:04:35 2026 by rpki-client