$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa File: b8400ae4-c32e-32eb-863d-6abffbace522.roa (raw, json) Hash identifier: Uy8Q2k1Gg1NW1uVAnPsxdkqMvtGXjzhzcn40D/Dp0Yc= Subject key identifier: 25:F9:43:14:C2:0D:34:F4:AC:CE:81:77:1A:88:37:F0:3D:65:BD:F7 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584E2D9F235C4B75D03763CE0200 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 15404 IP address blocks: 148.188.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:23:5c:4b:75:d0:37:63:ce:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=d1b6496f-8415-42f6-a39c-ba136376945e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:6d:2e:70:2a:59:54:ab:8f:23:a8:33:ac: 21:5e:1e:40:ba:7a:85:1c:d4:4f:9a:32:0b:ab:6f: bc:58:4e:c1:97:42:f8:9d:3d:fd:8e:b1:bf:6e:7b: 11:91:52:35:31:c3:89:a4:c0:af:1c:14:25:55:65: 44:de:ef:70:75:e2:06:be:cf:cf:84:c5:4f:a2:b8: c6:a4:3f:c1:a4:68:d6:22:7d:9a:e2:ec:ad:62:87: 98:b7:e9:d1:0b:20:6b:21:78:48:36:21:1b:d5:64: cb:e1:1b:d6:9f:23:c5:00:0a:da:89:08:55:d8:e9: 4d:1b:31:a1:6a:74:62:0c:fe:3f:96:0e:38:2c:8e: a7:21:76:a0:9b:12:d8:f7:9a:01:b1:3b:ee:cd:95: 4a:06:10:d8:37:e4:b0:1c:f0:83:23:a4:fc:9c:a0: c3:25:0b:6f:8d:ea:ca:6c:65:7a:53:4e:f5:44:47: 0d:f5:f5:82:e3:65:98:59:44:00:49:44:d4:a3:b9: b8:ef:12:6a:03:c2:e1:09:2a:c3:95:25:00:9f:a2: 39:fe:c2:46:57:29:65:2c:90:1e:84:62:9f:07:b0: 57:7f:36:1c:d4:cf:9e:b1:ae:be:85:ff:b1:5c:94: 49:84:dd:90:e4:bd:e9:20:d8:2a:4c:c6:00:f2:ea: 69:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F9:43:14:C2:0D:34:F4:AC:CE:81:77:1A:88:37:F0:3D:65:BD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:9b:d6:19:b1:fa:40:56:e6:a0:34:cc:52:f4:0c:e8:2c:90: c6:45:ec:8b:4e:bf:47:35:15:a3:d5:81:c0:09:44:c8:14:17: ac:20:6c:49:57:f0:2a:9f:1d:fb:81:43:52:18:c5:69:93:58: 0b:3f:b1:a5:8e:c1:81:7d:10:46:da:7c:46:25:2e:56:aa:72: b6:a0:29:7f:6d:8d:10:2f:14:b1:e5:c9:42:9f:c3:34:d0:e9: ea:67:bc:03:14:70:e7:ae:db:9b:81:b5:c0:39:ae:ee:a6:ac: 31:a9:e3:2e:d7:37:04:1f:1a:4f:3b:51:1e:1e:79:46:5f:cf: 54:42:18:45:97:6d:47:91:88:5c:27:70:47:6b:ea:dc:9d:b1: 37:a0:46:6d:8c:36:57:c6:14:19:aa:39:44:71:59:e1:2d:ee: 0b:9d:b4:6c:03:89:39:c5:f8:7e:5d:cf:49:2c:a1:46:7d:a1: 6e:e6:71:81:dc:a9:35:5f:76:14:f9:9f:61:ef:75:d5:08:89: ca:b8:c0:5d:6b:2f:b2:f4:da:16:a0:74:a6:8a:d5:47:80:e7: 62:30:0b:49:9b:0e:06:92:1f:da:97:01:31:8a:fe:36:f8:93: 64:09:5f:de:d8:c3:bc:ce:39:9b:03:9a:6c:43:72:6a:67:fd: 83:08:0c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnyNcS3XQN2POAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZDFiNjQ5NmYtODQxNS00MmY2LWEzOWMtYmExMzYzNzY5NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPltLnAqWVSrjyOoM6whXh5AunqFHNRPmjIL q2+8WE7Bl0L4nT39jrG/bnsRkVI1McOJpMCvHBQlVWVE3u9wdeIGvs/PhMVPorjG pD/BpGjWIn2a4uytYoeYt+nRCyBrIXhINiEb1WTL4RvWnyPFAAraiQhV2OlNGzGh anRiDP4/lg44LI6nIXagmxLY95oBsTvuzZVKBhDYN+SwHPCDI6T8nKDDJQtvjerK bGV6U071REcN9fWC42WYWUQASUTUo7m47xJqA8LhCSrDlSUAn6I5/sJGVyllLJAe hGKfB7BXfzYc1M+esa6+hf+xXJRJhN2Q5L3pINgqTMYA8uppUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX5QxTCDTT0rM6BdxqIN/A9Zb33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvYjg0MDBhZTQtYzMyZS0z MmViLTg2M2QtNmFiZmZiYWNlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGib1hmx+kBW5qA0zFL0DOgskMZF7ItOv0c1FaPVgcAJRMgUF6wgbElX 8CqfHfuBQ1IYxWmTWAs/saWOwYF9EEbafEYlLlaqcragKX9tjRAvFLHlyUKfwzTQ 6epnvAMUcOeu25uBtcA5ru6mrDGp4y7XNwQfGk87UR4eeUZfz1RCGEWXbUeRiFwn cEdr6tydsTegRm2MNlfGFBmqOURxWeEt7gudtGwDiTnF+H5dz0ksoUZ9oW7mcYHc qTVfdhT5n2HvddUIicq4wF1rL7L02hagdKaK1UeA52IwC0mbDgaSH9qXATGK/jb4 k2QJX97Yw7zOOZsDmmxDcmpn/YMIDE0= -----END CERTIFICATE-----Generated at Tue Jul 21 20:34:25 2026 by rpki-client