$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: 822/I0kx//9eQpKPc0XkxmLeSdQZDgxILH95DyaSBbI= Subject key identifier: C7:95:97:0A:3D:B9:33:72:EC:84:F0:83:69:D7:08:50:79:59:A4:72 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584ED001F7BE429BC809E72A1200 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f7:be:42:9b:c8:09:e7:2a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=464a2c2f-fd78-44be-80e1-c424b866f60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:37:43:11:d8:9d:f9:67:e9:5c:48:2d:07: bc:a3:e7:b8:52:5e:71:00:f9:13:e9:09:6e:e4:0b: 64:c3:fb:ab:83:e9:cd:09:b4:c4:c6:fc:c7:6e:19: 6e:76:e8:f3:fb:06:5f:f9:f9:98:ea:27:c7:94:1d: 20:81:f5:f6:87:11:9c:e7:04:6d:58:f1:e3:9c:98: 58:7d:f0:1b:fe:2b:d9:b5:9e:f3:ef:7b:2f:d5:ad: 30:f2:02:c2:87:84:9a:71:0c:06:52:0a:25:94:0f: af:e4:9f:b7:a9:e6:95:21:af:c0:e9:e2:ce:68:00: 84:c1:66:0e:e9:68:89:84:88:37:f3:85:7f:bf:a2: 37:b9:a7:b8:9e:d7:05:99:c7:a6:8d:8b:26:3e:ff: 84:7c:30:15:d0:b1:6e:80:dd:55:c9:1c:4a:e2:92: c7:e5:b3:52:fa:6d:19:53:a1:b1:3a:c9:3d:b1:4d: 2f:36:6d:26:c5:a7:af:a6:8e:69:02:02:6e:19:d6: 12:ea:01:5f:ab:8e:8d:09:3a:75:a2:3a:20:b7:45: 0f:a4:f3:f4:d5:2d:94:63:12:de:9c:da:fe:11:d6: 2b:a8:ca:1e:c5:d1:77:75:1f:3a:64:f0:b3:0d:a2: ca:ee:a6:2a:81:fc:9c:2d:7d:04:29:90:e2:e4:a1: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:97:0A:3D:B9:33:72:EC:84:F0:83:69:D7:08:50:79:59:A4:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:05:dd:5e:83:c4:11:3c:f6:16:f9:4d:99:6d:ed:70:d5:7a: 84:0b:b4:60:fd:b4:da:22:45:31:57:99:12:a9:f9:e2:c9:fc: 5d:0b:f0:81:de:76:f5:ed:fa:51:35:fc:21:b4:d2:92:a4:07: 0c:5d:bd:73:d3:ff:07:80:a3:44:9d:92:07:ff:97:14:de:4e: f4:d1:35:a0:39:0e:fb:1a:0d:c0:26:1d:71:66:2b:c2:db:cf: 1a:79:14:9a:d5:88:c2:8b:f3:37:13:fb:3e:89:2b:06:17:b7: 98:bf:89:6e:68:d0:a2:ca:c5:d3:80:db:95:fe:5c:e1:95:2f: e3:3b:2d:8f:69:93:ee:d6:dc:8b:0f:95:e5:22:16:8a:84:13: e1:83:6e:cb:70:4e:d6:29:25:db:7a:34:17:1a:57:f1:f3:b0: 03:43:11:be:67:26:da:42:2f:f2:e1:35:cb:d7:68:52:0c:4b: ad:d0:26:44:03:d0:88:ef:7c:0c:e6:0b:4e:bb:6b:ca:6a:53: d7:25:53:91:8a:97:c1:98:5e:43:4f:b5:51:c7:bc:39:f5:bb: 07:b5:32:48:a4:ea:d4:d3:63:54:36:41:87:ed:c2:10:20:2f: 29:01:4f:74:fd:14:24:28:72:c9:63:5e:b2:36:01:58:76:55: 4b:9a:70:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfe+QpvICecqEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NDY0YTJjMmYtZmQ3OC00NGJlLTgwZTEtYzQyNGI4NjZmNjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppE3QxHYnfln6VxILQe8o+e4Ul5xAPkT6Qlu 5Atkw/urg+nNCbTExvzHbhludujz+wZf+fmY6ifHlB0ggfX2hxGc5wRtWPHjnJhY ffAb/ivZtZ7z73sv1a0w8gLCh4SacQwGUgollA+v5J+3qeaVIa/A6eLOaACEwWYO 6WiJhIg384V/v6I3uae4ntcFmcemjYsmPv+EfDAV0LFugN1VyRxK4pLH5bNS+m0Z U6GxOsk9sU0vNm0mxaevpo5pAgJuGdYS6gFfq46NCTp1ojogt0UPpPP01S2UYxLe nNr+EdYrqMoexdF3dR86ZPCzDaLK7qYqgfycLX0EKZDi5KE4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeVlwo9uTNy7ITwg2nXCFB5WaRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAF3V6DxBE89hb5TZlt7XDVeoQLtGD9tNoiRTFXmRKp+eLJ/F0L8IHe dvXt+lE1/CG00pKkBwxdvXPT/weAo0Sdkgf/lxTeTvTRNaA5DvsaDcAmHXFmK8Lb zxp5FJrViMKL8zcT+z6JKwYXt5i/iW5o0KLKxdOA25X+XOGVL+M7LY9pk+7W3IsP leUiFoqEE+GDbstwTtYpJdt6NBcaV/HzsANDEb5nJtpCL/LhNcvXaFIMS63QJkQD 0IjvfAzmC067a8pqU9clU5GKl8GYXkNPtVHHvDn1uwe1Mkik6tTTY1Q2QYftwhAg LykBT3T9FCQocsljXrI2AVh2VUuacCY= -----END CERTIFICATE-----Generated at Sat Sep 5 00:31:14 2026 by rpki-client