$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa File: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (raw, json) Hash identifier: jE69LOX7QT1lCIHASshra7DmXleMy6r/I7bohj+OxvM= Subject key identifier: 2A:84:F1:AA:95:10:B6:FB:41:29:75:E0:68:01:66:9B:EA:2B:C4:88 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584F71EDA6849D3D88B8B92B9580 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 1299 IP address blocks: 148.188.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a6:84:9d:3d:88:b8:b9:2b:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=08eaa4c2-42a9-4c60-8d82-00a1e1bdf7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:48:5b:ef:5c:6b:a6:0f:b6:3a:77:2e:15: 63:e3:fa:1e:90:9c:1b:c1:5c:29:e5:60:73:bb:45: 06:6b:06:44:61:52:07:4b:74:c9:a7:c5:74:fc:59: 77:bf:95:78:64:6d:91:23:e9:4c:c9:26:63:d5:22: 9a:92:3d:f7:fa:c1:40:4a:82:f5:3a:1f:be:0d:85: e1:5c:72:8d:f9:49:25:f1:41:0f:a8:14:d5:00:d1: ea:ca:8b:24:b3:0a:17:64:51:47:31:80:91:51:22: c9:91:30:f6:18:fe:44:eb:46:9f:6c:2a:c9:94:ca: 52:0a:46:3a:96:96:7f:15:cd:ba:7f:db:ac:f9:3c: a2:e1:47:a8:5e:a8:25:48:0e:83:31:c0:b1:46:eb: cd:5f:58:1e:62:ff:11:a5:55:a0:cb:56:92:ad:d9: d5:c5:0c:d1:6e:41:2a:de:21:b4:61:a3:69:09:a4: a4:c8:a9:be:53:8d:2f:d8:22:f3:01:95:ff:0d:6d: 79:ef:f3:1b:99:cd:1a:90:fc:69:c1:cd:99:1a:88: 1d:4a:05:e9:ba:59:a1:6c:65:82:7e:fd:68:af:5e: d1:e0:b0:22:5b:d6:3c:88:15:62:fc:d1:92:66:90: b6:98:b3:24:31:da:56:f7:06:f9:a1:3d:05:3c:a4: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:F1:AA:95:10:B6:FB:41:29:75:E0:68:01:66:9B:EA:2B:C4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6e:be:0d:60:3f:9d:b4:57:a1:8b:1d:95:52:71:e2:db:14: c2:64:cd:6c:f9:42:a5:82:7c:64:c5:29:b5:19:0f:a9:c1:7f: 8b:cd:91:99:5e:d5:92:6c:0d:d9:ce:a4:e9:88:0b:4c:30:fa: e8:3a:20:11:3b:b8:af:99:76:e7:d3:f9:1a:ad:3c:37:1a:51: 22:d1:72:c0:98:d3:8a:22:d9:b3:99:55:d9:81:3e:c6:6a:cf: f9:ad:7a:ee:2c:cd:29:c3:cb:f4:c9:ce:aa:da:75:53:18:b6: 10:11:67:f0:40:28:c9:38:78:c2:42:95:33:b2:6e:b3:7b:3f: c1:2c:ef:03:b3:6e:80:85:ed:21:a3:77:41:ac:33:71:0c:01: aa:5d:9f:a3:68:89:01:1e:32:9e:4e:63:b5:a7:e0:1d:b1:fe: aa:0a:38:a4:be:a8:72:81:29:02:18:42:62:bd:c8:26:ae:d6: 94:cc:94:f2:b8:de:6a:c2:6c:86:81:63:af:be:ca:e3:9d:da: 41:09:67:d3:5c:ae:e6:73:9f:df:43:a4:9b:aa:85:87:15:ab: a3:b9:3c:24:d5:47:27:b2:75:46:0e:16:ca:86:b5:84:81:3e: ac:fb:b9:4c:50:ca:36:22:39:31:8c:b3:ed:ce:c1:23:06:e2: 1a:aa:6f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aaEnT2IuLkrlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MDhlYWE0YzItNDJhOS00YzYwLThkODItMDBhMWUxYmRmN2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGFIW+9ca6YPtjp3LhVj4/oekJwbwVwp5WBz u0UGawZEYVIHS3TJp8V0/Fl3v5V4ZG2RI+lMySZj1SKakj33+sFASoL1Oh++DYXh XHKN+Ukl8UEPqBTVANHqyoskswoXZFFHMYCRUSLJkTD2GP5E60afbCrJlMpSCkY6 lpZ/Fc26f9us+Tyi4UeoXqglSA6DMcCxRuvNX1geYv8RpVWgy1aSrdnVxQzRbkEq 3iG0YaNpCaSkyKm+U40v2CLzAZX/DW157/Mbmc0akPxpwc2ZGogdSgXpulmhbGWC fv1or17R4LAiW9Y8iBVi/NGSZpC2mLMkMdpW9wb5oT0FPKTSfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqE8aqVELb7QSl14GgBZpvqK8SIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNWIyYjZlNzUtOGE4ZS0z ZDBkLThlNzMtZmIwZDc5NzIzNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpuvg1gP520V6GLHZVSceLbFMJkzWz5QqWCfGTFKbUZD6nBf4vNkZle 1ZJsDdnOpOmIC0ww+ug6IBE7uK+ZdufT+RqtPDcaUSLRcsCY04oi2bOZVdmBPsZq z/mteu4szSnDy/TJzqradVMYthARZ/BAKMk4eMJClTOybrN7P8Es7wOzboCF7SGj d0GsM3EMAapdn6NoiQEeMp5OY7Wn4B2x/qoKOKS+qHKBKQIYQmK9yCau1pTMlPK4 3mrCbIaBY6++yuOd2kEJZ9NcruZzn99DpJuqhYcVq6O5PCTVRyeydUYOFsqGtYSB Pqz7uUxQyjYiOTGMs+3OwSMG4hqqb4s= -----END CERTIFICATE-----Generated at Tue Oct 20 18:20:58 2026 by rpki-client