$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa File: b8400ae4-c32e-32eb-863d-6abffbace522.roa (raw, json) Hash identifier: pS6KWbyTqdPpgXdLojPgVCQPU5bA1pgHTmZzbVq7v2E= Subject key identifier: EB:D4:D6:62:F3:8F:99:C8:2B:C0:FB:36:AD:6C:EA:D2:3C:53:0F:83 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584F71ED9F6E3309FE185176C380 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 15404 IP address blocks: 148.188.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:6e:33:09:fe:18:51:76:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=ddd126a7-8ff6-466c-a866-58c274f2efae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:46:8e:2b:2e:e5:4e:68:e5:17:d7:eb:86:8d: 16:b8:1e:66:17:9b:c7:b2:5a:96:8d:81:b3:c6:ce: a3:d6:f4:3e:6c:3a:ee:36:be:c3:c6:b9:1d:f7:86: 90:81:69:83:2f:e2:6d:09:b2:a8:02:05:a1:f7:fa: 25:3a:dd:35:34:c3:45:33:ee:29:39:e4:93:83:40: 7e:a7:b7:88:1f:ed:df:1c:0b:6c:14:37:07:57:14: 13:1a:ad:d5:f9:f5:fe:a8:2e:c3:10:b8:07:1f:b2: 23:cd:71:34:5d:ff:10:d2:2d:43:fd:44:dc:21:71: d6:08:7d:ef:aa:b2:3a:17:b6:63:70:af:55:61:c2: 2f:fb:c2:a8:47:af:b7:52:74:50:95:ab:64:83:c3: da:1a:91:3a:39:fe:83:46:dd:52:f5:38:18:2a:3b: ae:72:b3:eb:ad:ec:a2:dd:ef:5d:20:f5:df:c3:37: f1:9e:1a:77:0e:5c:0d:55:dc:96:2d:de:c0:60:58: 7e:c8:25:a6:9a:71:99:77:3e:e2:4c:00:b0:36:1c: 4f:28:eb:a4:99:97:21:e8:50:09:6c:d7:97:fc:63: fd:84:46:07:cd:89:40:b0:4c:92:f4:21:69:95:01: 7a:a8:5a:2f:a9:9a:fa:23:67:db:e7:44:88:d1:45: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D4:D6:62:F3:8F:99:C8:2B:C0:FB:36:AD:6C:EA:D2:3C:53:0F:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:17:b2:6f:b0:70:95:ef:f3:54:b7:e1:18:5a:33:89:c7:91: cf:ef:85:de:b1:23:12:24:a7:32:9f:d2:79:46:6f:d4:a4:8f: f8:ee:32:7d:ab:5b:db:22:8e:08:cf:9c:51:89:6a:3f:70:0b: 9f:37:3a:2a:fd:d0:cd:93:70:f3:84:a9:82:35:ae:6c:67:59: a4:1e:2f:90:ba:ac:f3:20:bb:4d:af:b9:01:a2:82:f0:3c:fe: 97:ff:ef:3a:17:2d:8d:0c:55:62:06:f2:39:9d:5b:5b:c5:9e: 4e:25:d8:d6:dd:41:c0:15:1a:9f:17:2a:32:2d:a0:94:43:32: 50:ff:50:8c:9a:df:9b:95:b4:b5:d7:3f:6f:50:c1:fa:93:ff: c3:42:65:c1:5d:0e:2c:09:7d:f7:b2:2c:10:2f:fe:a1:56:70: 6b:c5:a1:9a:1a:d8:21:1e:64:b0:e4:12:f8:87:be:45:4e:c3: ab:2f:64:61:f6:78:e3:75:69:ae:48:34:d8:f3:94:dd:3e:dd: 03:3e:3c:c0:bc:16:a7:f0:c8:dd:8f:9c:db:70:5e:04:e2:49: c4:3d:49:61:05:69:52:81:3f:1b:d0:60:ca:1c:cb:ed:c8:85: 5f:c4:3f:b4:88:3c:6d:5f:a8:6e:1e:32:0d:e5:fd:e9:58:17: 37:6b:51:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z9uMwn+GFF2w4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZGRkMTI2YTctOGZmNi00NjZjLWE4NjYtNThjMjc0ZjJlZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkaOKy7lTmjlF9frho0WuB5mF5vHslqWjYGz xs6j1vQ+bDruNr7Dxrkd94aQgWmDL+JtCbKoAgWh9/olOt01NMNFM+4pOeSTg0B+ p7eIH+3fHAtsFDcHVxQTGq3V+fX+qC7DELgHH7IjzXE0Xf8Q0i1D/UTcIXHWCH3v qrI6F7ZjcK9VYcIv+8KoR6+3UnRQlatkg8PaGpE6Of6DRt1S9TgYKjuucrPrreyi 3e9dIPXfwzfxnhp3DlwNVdyWLd7AYFh+yCWmmnGZdz7iTACwNhxPKOukmZch6FAJ bNeX/GP9hEYHzYlAsEyS9CFplQF6qFovqZr6I2fb50SI0UUivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvU1mLzj5nIK8D7Nq1s6tI8Uw+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvYjg0MDBhZTQtYzMyZS0z MmViLTg2M2QtNmFiZmZiYWNlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwXsm+wcJXv81S34RhaM4nHkc/vhd6xIxIkpzKf0nlGb9Skj/juMn2r W9sijgjPnFGJaj9wC583Oir90M2TcPOEqYI1rmxnWaQeL5C6rPMgu02vuQGigvA8 /pf/7zoXLY0MVWIG8jmdW1vFnk4l2NbdQcAVGp8XKjItoJRDMlD/UIya35uVtLXX P29QwfqT/8NCZcFdDiwJffeyLBAv/qFWcGvFoZoa2CEeZLDkEviHvkVOw6svZGH2 eON1aa5INNjzlN0+3QM+PMC8FqfwyN2PnNtwXgTiScQ9SWEFaVKBPxvQYMocy+3I hV/EP7SIPG1fqG4eMg3l/elYFzdrUeU= -----END CERTIFICATE-----Generated at Tue Oct 20 22:04:15 2026 by rpki-client