$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: 3G1xKexipVAi3htEpiFIf7hG+ZKFvxV7BwMcJ2NWxZA= Subject key identifier: 47:0B:55:D6:7F:6D:67:58:E0:EC:42:AE:0A:70:EC:02:D8:CB:88:A8 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584AADF126FD0F22F08578531700 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:26:fd:0f:22:f0:85:78:53:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=1c328e3c-f4ea-4a2a-b295-08b27184e77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:73:2a:02:07:1a:58:25:3d:fc:f6:e5:1f: a1:86:ea:0b:75:ac:e1:8c:40:4b:87:59:73:ea:63: 84:92:51:13:57:f8:5e:d1:a7:a1:aa:1e:c7:b5:c6: ee:16:4c:3a:c1:41:13:1e:6d:fe:ee:30:2e:65:c7: 5c:08:c2:a1:92:24:df:15:bc:99:5e:0e:82:6d:26: 59:28:74:b8:0f:49:5e:61:64:ca:d3:af:6f:9a:a8: 2a:e6:12:a4:13:00:bb:71:d4:1a:11:2b:5a:c0:ae: 4f:99:e0:94:92:25:85:e2:66:ca:2a:ee:56:63:d1: 32:c9:09:74:cb:98:32:49:3b:08:fb:48:2b:ee:40: 6a:9a:31:08:42:21:a3:36:4b:c5:c5:dc:4e:99:2d: 20:d4:f0:a9:ed:98:14:13:06:94:77:43:05:48:f4: ba:0e:6a:98:cb:fb:2f:d9:0b:6a:53:3e:8c:3f:7a: f8:c5:00:d5:44:d8:ed:2a:dd:db:ad:e7:54:f4:1a: e5:83:27:81:8e:ce:1b:95:38:3a:b4:8a:19:7f:a6: 53:e1:cc:c0:2a:4d:3a:19:2c:0e:ab:f0:42:f2:23: 6a:36:2d:80:d4:75:04:c5:26:16:68:5a:bf:62:28: 8e:0c:59:60:51:30:c0:84:92:04:36:29:94:35:1b: c8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:55:D6:7F:6D:67:58:E0:EC:42:AE:0A:70:EC:02:D8:CB:88:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8e:9f:1e:16:ae:9b:02:bf:74:a0:58:b6:37:ad:45:dd:a2: 73:d7:91:3f:a7:ad:15:3b:74:15:db:eb:6e:64:70:c6:f5:98: 39:be:fe:e6:1b:d5:2e:b1:cb:b3:05:40:08:ff:84:43:56:60: 1c:4c:fa:3a:2a:9d:b3:40:bb:56:bd:16:25:17:95:13:58:9d: 0d:9a:6b:87:e6:a9:98:9b:cf:34:fd:e7:b4:c2:77:2c:2c:e3: 80:c5:d1:2b:91:f4:6f:ea:44:86:b2:aa:1f:91:ee:05:81:32: 0c:21:da:4b:94:6f:3a:a3:71:54:42:34:e7:b7:d2:8b:17:58: 49:28:0a:9e:86:97:31:28:42:37:da:1b:9b:7d:e7:61:30:e0: 1f:48:1b:79:86:3b:c8:26:5e:89:1c:d8:47:81:08:58:68:07: 2b:b3:82:0b:f1:c7:74:4a:1f:b8:e7:80:ae:67:3f:8c:49:b1: eb:f6:1c:a7:af:b4:7d:8f:cf:ec:a7:ea:d2:a3:35:f6:a9:2e: c6:8a:f9:2b:19:2c:15:07:d2:aa:5f:af:7b:a6:12:43:03:98: 48:33:55:15:7e:8c:f8:39:a5:c9:27:25:a9:a8:46:ae:65:13: 63:1b:d8:66:bd:91:08:48:32:a4:a2:82:77:44:53:3e:3a:b1: 3b:3b:fb:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Sb9DyLwhXhTFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MWMzMjhlM2MtZjRlYS00YTJhLWIyOTUtMDhiMjcxODRlNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWtzKgIHGlglPfz25R+hhuoLdazhjEBLh1lz 6mOEklETV/he0aehqh7HtcbuFkw6wUETHm3+7jAuZcdcCMKhkiTfFbyZXg6CbSZZ KHS4D0leYWTK069vmqgq5hKkEwC7cdQaEStawK5PmeCUkiWF4mbKKu5WY9EyyQl0 y5gySTsI+0gr7kBqmjEIQiGjNkvFxdxOmS0g1PCp7ZgUEwaUd0MFSPS6DmqYy/sv 2QtqUz6MP3r4xQDVRNjtKt3bredU9BrlgyeBjs4blTg6tIoZf6ZT4czAKk06GSwO q/BC8iNqNi2A1HUExSYWaFq/YiiODFlgUTDAhJIENimUNRvIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcLVdZ/bWdY4OxCrgpw7ALYy4ioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKOnx4WrpsCv3SgWLY3rUXdonPXkT+nrRU7dBXb625kcMb1mDm+/uYb 1S6xy7MFQAj/hENWYBxM+joqnbNAu1a9FiUXlRNYnQ2aa4fmqZibzzT957TCdyws 44DF0SuR9G/qRIayqh+R7gWBMgwh2kuUbzqjcVRCNOe30osXWEkoCp6GlzEoQjfa G5t952Ew4B9IG3mGO8gmXokc2EeBCFhoByuzggvxx3RKH7jngK5nP4xJsev2HKev tH2Pz+yn6tKjNfapLsaK+SsZLBUH0qpfr3umEkMDmEgzVRV+jPg5pcknJamoRq5l E2Mb2Ga9kQhIMqSigndEUz46sTs7+7M= -----END CERTIFICATE-----Generated at Sun Aug 24 06:30:28 2025 by rpki-client