$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa File: d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (raw, json) Hash identifier: JlUcEaH8pWkLbbhpcspsasf0ghDcvxrxHwFyQ+Ja71k= Subject key identifier: 1E:22:D1:D8:60:33:7D:EC:68:93:C7:38:48:99:47:4E:13:BD:60:36 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584F71EDA692258D7DD1FDB29E40 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 15404 IP address blocks: 148.188.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a6:92:25:8d:7d:d1:fd:b2:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=193fe1e3-eb30-4449-87ab-e878f417c2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:da:e4:a6:e1:3c:66:2c:e5:78:4d:9a:03:ef: 7b:b9:32:2c:bc:d9:04:af:7e:9f:15:e2:aa:78:8d: 0a:d3:70:d2:6b:8d:57:db:27:38:b7:02:66:50:b1: 83:4e:f6:1d:f8:73:77:26:81:a8:71:6f:9a:5a:78: 32:ea:71:78:2a:fc:a2:46:c1:9c:4e:8a:a8:5f:fd: f0:70:b3:95:60:b7:bb:a5:d0:d4:68:aa:99:94:18: c3:4b:dc:27:f5:43:6f:98:81:0e:90:6c:a5:b7:d2: e6:c1:7e:43:39:db:54:85:26:74:51:3a:ab:d0:d3: 2d:77:a2:7d:d5:6d:42:32:86:bf:17:12:83:f0:33: a0:f3:09:b0:78:9b:44:72:ad:a7:96:0d:4a:53:ba: 82:ba:13:5f:5b:93:1f:1a:8a:76:4a:bf:f8:3f:0c: c3:5c:9b:ad:f9:bf:d4:da:92:4e:3b:3b:bf:ad:95: c4:13:6a:e1:13:32:50:37:62:51:d5:71:00:3c:e1: d5:0c:b3:98:51:c3:7e:31:32:e1:95:5f:9e:35:00: 7e:64:91:4f:87:a7:98:e6:fe:b7:c2:55:11:fe:ec: 56:98:ae:b0:86:84:9b:f7:c8:da:ea:a6:a7:2e:99: 52:59:92:62:79:01:30:1a:67:1a:3f:c5:14:f0:cd: 9a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:22:D1:D8:60:33:7D:EC:68:93:C7:38:48:99:47:4E:13:BD:60:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a9:cf:ba:58:d0:87:01:4f:55:3b:71:95:d1:b1:a9:54:ce: 8f:64:3a:67:5a:e7:cd:49:80:cb:ad:ca:b5:d2:8f:c5:47:64: b1:d3:f2:88:45:b3:b8:a4:a3:b9:79:95:fb:35:e0:76:89:c3: 51:1c:0e:03:50:6e:66:83:0a:a8:64:b4:24:85:80:18:0a:22: 90:0e:d0:9e:43:92:e2:b6:25:b8:98:55:2f:0c:95:72:53:e9: a8:9a:79:8b:f2:99:c6:41:3b:8e:3d:0f:70:5c:9b:f9:dc:2a: c9:62:95:95:22:19:2d:02:66:ae:b2:7e:df:5c:79:3f:1b:91: c8:b4:60:c1:2c:6f:74:37:74:72:30:cf:96:b2:c9:43:aa:2a: 9b:17:6c:8f:f1:ed:cf:ad:d3:c3:9c:be:a8:30:4c:44:c2:8b: b3:cd:a6:85:83:cb:51:dc:00:ff:5a:fe:a2:d3:0e:78:8c:ae: d7:b9:54:f3:c1:39:62:e1:68:a5:df:34:3c:dc:2c:2f:11:22: b8:25:ce:93:2e:22:ac:50:83:25:28:3f:41:b3:3e:d7:42:3f: ec:1b:50:40:b4:9b:a7:80:88:2e:3f:bb:4e:f8:93:f2:5e:c5: 7f:4c:06:2d:56:a1:2f:7e:c0:67:38:e0:01:67:72:59:93:db: 70:4e:98:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aaSJY190f2ynkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MTkzZmUxZTMtZWIzMC00NDQ5LTg3YWItZTg3OGY0MTdjMmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodrkpuE8ZizleE2aA+97uTIsvNkEr36fFeKq eI0K03DSa41X2yc4twJmULGDTvYd+HN3JoGocW+aWngy6nF4KvyiRsGcToqoX/3w cLOVYLe7pdDUaKqZlBjDS9wn9UNvmIEOkGylt9LmwX5DOdtUhSZ0UTqr0NMtd6J9 1W1CMoa/FxKD8DOg8wmweJtEcq2nlg1KU7qCuhNfW5MfGop2Sr/4PwzDXJut+b/U 2pJOOzu/rZXEE2rhEzJQN2JR1XEAPOHVDLOYUcN+MTLhlV+eNQB+ZJFPh6eY5v63 wlUR/uxWmK6whoSb98ja6qanLplSWZJieQEwGmcaP8UU8M2aIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4i0dhgM33saJPHOEiZR04TvWA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvZDA4MTJkNTQtZjBkMy0z MTFlLTgzYWQtZTFiY2U1NjBlNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlLzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGpz7pY0IcBT1U7cZXRsalUzo9kOmda581JgMutyrXSj8VHZLHT8ohF s7iko7l5lfs14HaJw1EcDgNQbmaDCqhktCSFgBgKIpAO0J5DkuK2JbiYVS8MlXJT 6aiaeYvymcZBO449D3Bcm/ncKslilZUiGS0CZq6yft9ceT8bkci0YMEsb3Q3dHIw z5ayyUOqKpsXbI/x7c+t08OcvqgwTETCi7PNpoWDy1HcAP9a/qLTDniMrte5VPPB OWLhaKXfNDzcLC8RIrglzpMuIqxQgyUoP0GzPtdCP+wbUEC0m6eAiC4/u074k/Je xX9MBi1WoS9+wGc44AFnclmT23BOmCk= -----END CERTIFICATE-----Generated at Sat Oct 24 07:03:42 2026 by rpki-client