
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json)
Hash identifier: oG1e4gDRFhWqJg7y/ae4zYvzcXipCym7ADYupXydOM0=
Subject key identifier: C0:1F:53:7F:13:CE:BE:F8:ED:9E:6D:F6:36:3C:14:0A:B5:0F:EE:89
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F4328584E3B947E0626FE11F162AF3CC0
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
Signing time: Sat 20 Jun 2026 09:00:13 +0000
ROA not before: Sat 20 Jun 2026 09:00:13 +0000
ROA not after: Fri 18 Sep 2026 09:00:13 +0000
asID: 15404
IP address blocks: 148.188.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3b:94:7e:06:26:fe:11:f1:62:af:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Jun 20 09:00:13 2026 GMT
Not After : Sep 18 09:00:13 2026 GMT
Subject: CN=a9efb085-be72-47fd-98a6-396c238deebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:b9:f2:c1:d5:a4:19:df:02:64:f3:48:bd:
d9:01:e6:cf:19:13:cf:82:47:5d:7f:5b:5d:84:8f:
47:31:f9:0c:9a:cf:e2:ab:96:f5:d9:1e:05:49:be:
d8:04:37:59:3c:29:68:1a:d9:43:1b:73:ba:55:12:
78:62:c8:ed:72:b0:58:35:3e:0b:df:f4:d1:9f:56:
7f:92:76:61:b0:74:9e:2b:c2:bc:84:b3:98:4e:d8:
d8:ff:0d:4e:59:e8:cc:b6:44:e3:c9:cd:3c:49:11:
46:07:f5:d6:44:b5:2c:48:1c:76:f8:29:06:66:94:
37:6a:b0:63:a2:4b:70:50:c7:8b:d7:2b:90:47:42:
d2:f2:e1:d9:f6:3e:d4:d4:41:0f:b1:99:8f:23:48:
c6:91:6b:4e:bb:5c:f0:4c:b2:a9:cc:27:d1:a3:5b:
9b:5a:3b:b3:6e:68:61:1e:6a:86:9a:e1:a2:ed:42:
02:96:c6:41:c5:5d:0e:02:cb:a3:96:c5:bc:5f:90:
35:2e:7e:be:aa:ec:25:21:3e:38:c5:40:b4:97:8d:
41:e6:ee:6f:1e:46:77:9f:ef:5a:15:b8:d5:35:59:
56:10:d8:bb:c5:a0:64:6d:2f:aa:08:a5:e2:f1:1c:
0b:09:fa:e8:19:07:d1:db:4f:41:b4:1a:3d:f4:53:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:53:7F:13:CE:BE:F8:ED:9E:6D:F6:36:3C:14:0A:B5:0F:EE:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9f:77:45:a5:c5:1a:12:a1:d7:4f:3c:5f:fb:8e:25:46:ab:
51:e7:09:83:25:0c:36:bd:0e:42:50:d8:36:cf:af:d3:72:14:
ee:f9:0a:25:6e:37:1d:a4:9f:ff:01:71:a2:47:bc:19:84:d0:
63:5c:a1:57:9b:03:bc:2a:84:47:4b:f1:56:35:59:50:ab:34:
e5:d2:99:40:eb:b1:0f:6c:1b:82:f0:45:42:81:09:dc:40:2a:
8d:3d:0e:5f:15:83:b3:44:92:b4:80:c9:5c:c0:7b:5a:6d:28:
2b:a4:2c:3a:50:41:e2:38:35:76:73:31:5f:d9:78:f4:1d:c9:
b1:70:79:d0:8f:7a:a8:66:fb:53:36:3d:47:bd:76:cc:f6:1f:
30:08:57:75:06:d6:ea:2b:84:2e:7d:bd:75:e2:be:b0:d8:a0:
dc:81:0a:69:98:7d:34:8e:02:a7:91:bc:1b:c5:61:00:da:a6:
e1:26:98:ac:89:35:af:00:43:e4:bc:77:0c:b4:57:34:b9:56:
02:05:0e:6f:15:85:aa:8b:9a:86:cf:86:bd:4f:65:0b:90:da:
da:a1:50:6e:fb:68:af:6f:9d:0b:9a:84:95:32:a6:3d:4e:7b:
a7:eb:fa:cc:ad:6d:12:70:7d:f7:e8:44:21:51:6f:64:93:78:
29:36:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:08:26 2026 by rpki-client