$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: i7wiN1p2Y5QcHfRKI0AVc/B8/fwe4V0yQaEuTJkzz2w= Subject key identifier: D0:DB:0A:59:B1:25:ED:7A:EE:97:EB:1D:CA:7C:5A:76:10:CA:A8:F6 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584B8EACF38DB6D7DC3FE79BA248 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:8d:b6:d7:dc:3f:e7:9b:a2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ff59402d-a235-446c-bcb4-54bfe3ffbf31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2c:fa:0d:2a:30:4e:6a:6e:e6:f6:ac:0c:7a: 5a:1a:de:97:9f:76:dd:31:8e:71:b9:73:1b:e0:b1: e2:84:a3:b2:8e:e6:22:e7:9c:4a:d8:d9:1c:98:6e: 9c:48:81:0f:10:a5:57:8c:e7:6a:2f:0b:4c:28:e2: 89:9b:0f:6e:98:cb:4e:dc:be:70:63:ac:8a:be:30: 57:e6:ab:99:6b:d4:f6:1f:bb:b8:6d:19:ac:27:88: e4:07:bc:eb:eb:ab:d2:5b:b0:da:5e:73:9f:6e:0a: 56:1b:81:ad:1d:8d:8a:7b:d3:5d:84:54:12:bb:83: e5:0f:5e:ea:0b:5c:56:e5:57:a9:c4:98:11:d7:a2: ae:fe:2e:02:2d:95:6c:f7:b7:df:08:d5:e8:73:60: 39:b7:42:15:52:21:63:92:bd:3b:4a:e4:e6:04:d0: fe:cc:4f:7d:76:82:06:b6:f2:3a:ea:d5:a7:76:b6: 58:90:91:36:6c:a1:d4:de:6e:4d:4e:ce:05:8d:aa: b8:b1:14:53:e0:bc:57:b8:54:1f:df:80:b0:c2:f3: bc:b9:d9:33:e7:65:ee:b8:29:39:31:42:3a:cd:e2: a1:9b:5b:a6:0d:87:9d:36:af:c6:63:19:e4:ad:62: 2a:ba:68:94:1e:09:21:e3:60:f0:3e:a6:70:71:a5: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DB:0A:59:B1:25:ED:7A:EE:97:EB:1D:CA:7C:5A:76:10:CA:A8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8f:ad:2a:5c:68:ba:4e:a1:0b:cb:69:b8:0c:ce:90:63:54: fe:52:7e:86:f0:b1:38:a1:31:21:50:d9:b3:ee:79:0f:08:31: cc:11:1a:93:bc:49:13:ff:3d:fe:b7:d0:f3:e3:0a:92:66:a2: 9e:ff:03:1f:4e:95:5a:53:dd:57:85:53:b2:78:7f:b6:cc:36: b7:77:da:ce:8d:22:9d:c7:74:c0:18:f5:d2:99:e9:97:a8:b0: 0d:74:ef:47:54:29:e0:a8:6d:de:97:3a:83:4d:0c:22:e5:23: 1c:9e:d0:89:aa:39:3d:51:12:a5:c6:63:24:9d:0f:58:ca:62: 80:e3:d4:21:5f:5e:a1:6e:a3:43:09:b0:27:bb:b8:fd:5b:f8: 5d:03:e9:e1:b6:7b:48:e1:b3:56:dd:f1:59:16:e0:97:21:9d: fe:21:f6:6e:ae:c8:f9:5a:d4:96:8f:fe:2b:73:63:65:b3:dd: 31:6b:66:23:4a:7c:69:5c:65:84:7d:a9:75:d2:cd:d8:d9:3a: 6e:ed:47:a3:75:a6:83:84:a0:31:66:08:1a:11:3c:7e:c4:2f: 8c:e8:3c:15:ad:3f:73:70:2e:12:7e:d5:f6:fb:62:d2:07:62: 58:6a:ce:67:8f:b2:5b:f3:26:a2:1d:ca:15:4d:d5:cc:7a:03: f3:6c:b3:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPONttfcP+ebokgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmY1OTQwMmQtYTIzNS00NDZjLWJjYjQtNTRiZmUzZmZiZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCz6DSowTmpu5vasDHpaGt6Xn3bdMY5xuXMb 4LHihKOyjuYi55xK2NkcmG6cSIEPEKVXjOdqLwtMKOKJmw9umMtO3L5wY6yKvjBX 5quZa9T2H7u4bRmsJ4jkB7zr66vSW7DaXnOfbgpWG4GtHY2Ke9NdhFQSu4PlD17q C1xW5VepxJgR16Ku/i4CLZVs97ffCNXoc2A5t0IVUiFjkr07SuTmBND+zE99doIG tvI66tWndrZYkJE2bKHU3m5NTs4Fjaq4sRRT4LxXuFQf34CwwvO8udkz52XuuCk5 MUI6zeKhm1umDYedNq/GYxnkrWIqumiUHgkh42DwPqZwcaWHAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDbClmxJe167pfrHcp8WnYQyqj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaPrSpcaLpOoQvLabgMzpBjVP5SfobwsTihMSFQ2bPueQ8IMcwRGpO8 SRP/Pf630PPjCpJmop7/Ax9OlVpT3VeFU7J4f7bMNrd32s6NIp3HdMAY9dKZ6Zeo sA1070dUKeCobd6XOoNNDCLlIxye0ImqOT1REqXGYySdD1jKYoDj1CFfXqFuo0MJ sCe7uP1b+F0D6eG2e0jhs1bd8VkW4Jchnf4h9m6uyPla1JaP/itzY2Wz3TFrZiNK fGlcZYR9qXXSzdjZOm7tR6N1poOEoDFmCBoRPH7EL4zoPBWtP3NwLhJ+1fb7YtIH YlhqzmePslvzJqIdyhVN1cx6A/Nss2U= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:01 2025 by rpki-client