
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
File: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (raw, json)
Hash identifier: WZHD10pAjXjEqc5BkCD9NMgZLxgnOmfe3cRz5L1dHFQ=
Subject key identifier: 08:C9:8B:24:B9:D6:E2:78:03:59:65:30:0D:D1:A8:48:D6:85:A7:B2
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F4328584E2D9F2A5D01D392D9F7928480
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 1299
IP address blocks: 148.188.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:2a:5d:01:d3:92:d9:f7:92:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=3be48257-1951-4b9f-9442-b0a092909d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:c2:89:4d:c4:54:6b:c9:58:16:5b:9e:1d:
84:02:0a:da:06:a8:b1:11:2e:f6:44:7f:14:89:3c:
b5:a2:5e:c7:d7:8a:1d:4d:87:98:6d:34:bd:27:e5:
cd:9d:3f:82:07:a5:c0:94:47:31:79:6e:cc:a0:8d:
4b:07:20:a0:cb:98:cb:ee:cb:43:38:38:33:8b:fb:
46:fb:61:e8:43:41:9f:7c:1a:4b:00:ef:00:91:6e:
b8:aa:eb:fc:40:ff:86:4f:be:b3:2e:e2:a5:5a:de:
e4:ce:b5:15:16:e6:08:0b:82:58:6e:dc:ff:58:00:
46:88:71:2a:13:49:bd:75:a9:04:bb:5d:d1:9e:0f:
70:58:33:5d:12:b7:51:62:e9:58:8f:c9:12:8e:a0:
4c:cf:56:a6:8c:8a:48:9d:72:69:24:5c:83:35:8b:
0b:c5:27:c5:4f:23:41:23:2d:47:6a:86:e5:10:92:
c2:0a:b1:83:ac:8e:89:de:3c:ef:50:06:2e:f9:05:
f4:4b:5b:df:72:bd:a7:ea:c7:f2:26:f9:9a:de:55:
47:65:6a:34:ea:80:6e:7d:69:1a:0c:04:42:a0:2c:
f9:59:0a:03:6c:6f:ac:d5:07:ca:de:b6:bf:cb:60:
b2:eb:4f:1d:a9:fe:0c:25:68:35:d6:c7:71:a3:38:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C9:8B:24:B9:D6:E2:78:03:59:65:30:0D:D1:A8:48:D6:85:A7:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:a8:49:11:25:bb:f6:7a:ce:8f:4f:8c:fa:a7:0b:6e:19:02:
9e:53:c6:58:46:b6:2e:90:fa:d4:27:d4:d2:5d:69:19:b2:a7:
47:d9:7b:2d:4e:c3:3d:8d:f9:13:69:54:01:36:ae:b5:4e:f3:
b0:41:1d:43:49:7f:50:59:00:a3:aa:12:fd:cb:5b:b0:23:36:
eb:23:f7:26:2f:78:ee:4f:90:65:f5:35:c9:35:99:fd:14:84:
a5:84:c4:9b:f0:dc:cd:17:0e:24:04:22:98:a6:74:b9:db:3b:
63:fb:d5:a4:3e:ac:76:7b:6c:a7:28:99:6b:fe:ef:11:1c:86:
ef:1b:bd:d0:bb:e4:5c:05:99:f7:f7:a9:eb:15:fe:6a:21:5f:
1b:6a:c4:dd:07:74:f3:e1:c7:27:7d:28:6e:7a:2b:2b:4c:5d:
13:23:2a:43:98:d4:f5:e9:ec:a5:bc:c4:75:7f:77:ad:49:ff:
41:75:cd:2e:e2:08:77:c4:fc:c3:bf:7d:ab:76:e3:a2:f8:c0:
9e:a5:c8:b7:de:0e:36:03:b7:78:5d:25:11:f5:62:42:8e:8a:
90:a7:e2:7b:2b:ef:3b:3d:f1:f8:92:5d:ae:59:ca:8c:64:1c:
47:ad:2f:d9:92:d4:d4:07:22:d5:e6:aa:ee:c0:93:35:98:26:
54:c7:bb:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnypdAdOS2feShIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw
OTQ4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
M2JlNDgyNTctMTk1MS00YjlmLTk0NDItYjBhMDkyOTA5ZDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxjCiU3EVGvJWBZbnh2EAgraBqixES72RH8U
iTy1ol7H14odTYeYbTS9J+XNnT+CB6XAlEcxeW7MoI1LByCgy5jL7stDODgzi/tG
+2HoQ0GffBpLAO8AkW64quv8QP+GT76zLuKlWt7kzrUVFuYIC4JYbtz/WABGiHEq
E0m9dakEu13Rng9wWDNdErdRYulYj8kSjqBMz1amjIpInXJpJFyDNYsLxSfFTyNB
Iy1HaoblEJLCCrGDrI6J3jzvUAYu+QX0S1vfcr2n6sfyJvma3lVHZWo06oBufWka
DARCoCz5WQoDbG+s1QfK3ra/y2Cy608dqf4MJWg11sdxozh+CQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjJiyS51uJ4A1llMA3RqEjWhaeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl
M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNWIyYjZlNzUtOGE4ZS0z
ZDBkLThlNzMtZmIwZDc5NzIzNTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1
ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl
MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2
MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACoSRElu/Z6zo9PjPqnC24ZAp5TxlhGti6Q+tQn1NJdaRmyp0fZey1O
wz2N+RNpVAE2rrVO87BBHUNJf1BZAKOqEv3LW7AjNusj9yYveO5PkGX1Nck1mf0U
hKWExJvw3M0XDiQEIpimdLnbO2P71aQ+rHZ7bKcomWv+7xEchu8bvdC75FwFmff3
qesV/mohXxtqxN0HdPPhxyd9KG56KytMXRMjKkOY1PXp7KW8xHV/d61J/0F1zS7i
CHfE/MO/fat246L4wJ6lyLfeDjYDt3hdJRH1YkKOipCn4nsr7zs98fiSXa5Zyoxk
HEetL9mS1NQHItXmqu7AkzWYJlTHu2s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:03:42 2026 by rpki-client