$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: xbANqekTzRy4dG+DeyPCEpu/H1IPcKMfpEoHnEuirG8= Subject key identifier: 96:3A:F5:0E:0C:1C:CA:8A:75:E2:9D:CE:48:83:3C:5F:CB:B0:5E:80 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584EDDF7433B7056029DE0E14D80 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:43:3b:70:56:02:9d:e0:e1:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=d0bc1da7-6f5d-4db0-8911-d8b9fb158802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:1e:dc:c8:a0:2d:a7:18:d6:99:41:95:8b: c0:e5:bb:7e:83:4b:e3:dc:ec:b7:4c:b3:e6:d8:83: ca:5e:a9:c4:20:17:b0:df:f2:d0:62:8c:4c:72:56: f8:62:d4:1a:82:a6:14:3e:37:9c:ed:39:da:d8:85: bc:4f:98:8e:23:91:a3:60:a1:4d:7e:92:cd:11:97: 4a:06:ba:51:90:86:c3:a5:39:27:f8:5d:70:21:63: 64:91:a6:e1:87:5f:3c:47:c3:36:6d:ed:9b:d0:05: 62:f7:9e:50:05:65:bb:ce:6c:03:d0:da:84:0e:28: 5d:a3:95:fa:d3:d1:5e:9f:c0:39:bf:0b:fe:b5:d9: ad:dc:ce:24:5b:b1:94:dd:c0:59:55:57:48:e6:d3: 0c:d7:1d:e6:07:66:0c:aa:ed:56:37:c2:d5:12:9b: 13:5a:4d:3a:ac:4e:f9:d3:88:12:d7:bc:04:0f:71: ba:d6:99:a9:08:c7:d5:44:7e:58:28:3a:25:5f:d8: bf:ad:39:e0:de:03:89:1a:bc:12:f0:d5:c2:2f:70: f7:d7:79:4a:c7:d7:29:af:8d:21:2b:43:55:01:91: 28:89:55:f2:44:d4:0a:f5:a2:6c:e5:3d:92:42:97: 08:14:f8:1e:03:15:87:b2:5e:9d:6c:bf:ba:0f:00: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:F5:0E:0C:1C:CA:8A:75:E2:9D:CE:48:83:3C:5F:CB:B0:5E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:c5:83:9c:41:16:a5:d8:cb:33:41:ad:da:a4:d5:ee:05:30: d5:90:db:c6:f1:bf:54:e4:9b:a7:aa:41:95:ad:d9:6a:7c:aa: 86:e6:15:1b:bb:6b:ce:f9:ea:be:26:cc:ce:67:a7:29:83:40: df:fd:b2:71:17:69:d2:40:77:37:a8:fb:49:23:66:07:c0:6e: 30:09:e5:de:af:5d:19:d4:2d:d6:4d:9f:94:80:99:08:c5:1c: c7:fa:b4:82:fc:40:11:4d:96:f2:cd:84:85:84:ab:0b:b0:48: 88:c4:93:53:61:7d:2d:47:5c:94:5b:a8:4c:6a:4d:81:72:47: 68:26:6d:c7:b0:18:88:78:b2:69:d8:e2:24:3e:56:08:a5:41: 7a:52:de:8f:09:66:11:e5:3a:09:4d:13:29:c2:37:98:35:fe: 1b:62:5f:0a:e9:43:85:c2:14:ac:15:42:94:7b:2e:d6:bc:d2: 6f:7a:2a:4e:34:a5:20:a4:de:71:9e:80:bf:c8:ea:32:0c:fc: 21:38:aa:37:b9:c4:5d:9b:fb:54:b8:97:7f:48:a2:83:d1:6b: 47:50:29:8b:61:00:30:1a:97:50:16:b8:57:f0:50:98:2e:e2: 85:bb:86:84:b8:dd:bc:1e:d1:18:69:c2:95:b9:cc:3e:9f:21: 03:b3:4b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90M7cFYCneDhTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk ZDBiYzFkYTctNmY1ZC00ZGIwLTg5MTEtZDhiOWZiMTU4ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVge3MigLacY1plBlYvA5bt+g0vj3Oy3TLPm 2IPKXqnEIBew3/LQYoxMclb4YtQagqYUPjec7Tna2IW8T5iOI5GjYKFNfpLNEZdK BrpRkIbDpTkn+F1wIWNkkabhh188R8M2be2b0AVi955QBWW7zmwD0NqEDihdo5X6 09Fen8A5vwv+tdmt3M4kW7GU3cBZVVdI5tMM1x3mB2YMqu1WN8LVEpsTWk06rE75 04gS17wED3G61pmpCMfVRH5YKDolX9i/rTng3gOJGrwS8NXCL3D313lKx9cpr40h K0NVAZEoiVXyRNQK9aJs5T2SQpcIFPgeAxWHsl6dbL+6DwC0FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY69Q4MHMqKdeKdzkiDPF/LsF6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnFg5xBFqXYyzNBrdqk1e4FMNWQ28bxv1Tkm6eqQZWt2Wp8qobmFRu7 a8756r4mzM5npymDQN/9snEXadJAdzeo+0kjZgfAbjAJ5d6vXRnULdZNn5SAmQjF HMf6tIL8QBFNlvLNhIWEqwuwSIjEk1NhfS1HXJRbqExqTYFyR2gmbcewGIh4smnY 4iQ+VgilQXpS3o8JZhHlOglNEynCN5g1/htiXwrpQ4XCFKwVQpR7Lta80m96Kk40 pSCk3nGegL/I6jIM/CE4qje5xF2b+1S4l39IooPRa0dQKYthADAal1AWuFfwUJgu 4oW7hoS43bwe0RhpwpW5zD6fIQOzS8E= -----END CERTIFICATE-----Generated at Sat Sep 5 04:09:08 2026 by rpki-client