$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa File: d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (raw, json) Hash identifier: /UgFkULS2y3P+fEtnA6M3m1anCVjIiA3lzOuWedBaaQ= Subject key identifier: 54:82:A6:5D:65:7D:DA:2E:F7:AA:55:A1:D8:4C:D6:CF:C9:E8:D4:96 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584B8EACF3B17DA9D970EBA111D3 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 15404 IP address blocks: 148.188.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f3:b1:7d:a9:d9:70:eb:a1:11:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=76876eaa-b4ab-4c56-82e5-705baff4e70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:d3:96:05:3e:03:c7:4c:8d:57:ab:0e:e5: f5:fd:26:3b:b7:b8:c9:2a:5d:a4:f7:93:8f:bd:0f: f9:0c:f5:37:ac:3b:ba:74:80:93:ed:48:25:85:53: 4f:78:e5:0e:32:b8:0a:33:1c:ce:58:dc:57:e7:32: fd:3c:8d:08:12:3c:98:03:f3:56:68:83:12:34:0e: 4e:d8:fd:ca:98:74:2f:63:78:00:c6:b8:20:14:37: d9:2c:6a:67:9b:08:f6:bc:09:b6:75:0a:d6:a9:56: dc:3e:19:5d:19:ce:b9:ce:c6:7a:33:f4:b0:ed:38: 9a:64:3e:49:df:5f:93:b3:a3:bc:e6:bd:67:9d:23: ac:9a:84:f0:98:4b:04:09:a3:60:79:09:3c:3a:60: 32:6c:3b:3e:41:c9:8b:f9:3d:b4:53:44:bf:7b:57: 43:39:c6:8e:fa:5d:7b:3d:f5:a1:0d:41:bc:c5:d4: 8c:7a:4c:0f:b1:a1:45:bd:aa:f2:9c:d2:95:97:26: 74:3d:cb:bf:15:80:9d:9d:a4:f1:54:7e:4d:c0:76: 1c:d6:22:c6:95:34:2d:49:42:9b:3c:47:bd:44:65: 2f:15:f2:93:ef:b0:ec:bf:cf:5a:8b:78:92:54:38: 26:8d:bb:60:4d:fc:90:14:87:bc:21:fa:51:54:f3: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:82:A6:5D:65:7D:DA:2E:F7:AA:55:A1:D8:4C:D6:CF:C9:E8:D4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/d0812d54-f0d3-311e-83ad-e1bce560e63f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c9:a9:a8:63:a6:ee:62:20:60:e3:04:15:72:15:1d:ea:6e: 2b:be:fa:a3:61:37:0c:cb:8a:d5:70:6a:1b:3e:e0:d5:2e:c0: b3:cb:51:bc:91:21:e1:17:d5:f7:ae:0b:bb:78:3a:24:af:f8: 2e:b1:c5:70:66:3a:f0:e1:e8:a9:6d:c5:bb:7d:a3:f8:fe:ff: f8:6f:66:9d:9e:8a:27:76:7f:44:12:83:f8:02:21:81:5d:7e: af:32:7a:95:e8:ef:c2:cb:e2:77:f9:35:75:2f:a0:0a:53:b8: 2e:e3:79:5a:5f:69:3a:09:fc:44:b9:8d:2c:51:df:4e:1d:6c: 88:7b:52:e0:6d:8a:50:85:a4:72:3d:b9:c2:0c:fa:e3:ab:81: 37:3c:33:c6:54:a1:85:35:af:78:2f:15:c5:81:04:e6:f5:d8: e5:b0:22:eb:90:bc:f8:eb:c2:16:ce:fd:79:3f:ae:c3:72:04: da:31:e0:5c:6d:76:38:27:b8:46:55:95:b8:df:fb:fb:90:3e: c4:ab:0b:58:3e:0b:9b:06:c3:d8:c2:96:1f:70:21:80:66:13: 3f:39:bf:e8:b9:9b:4e:36:59:e2:e2:7c:0a:e3:66:6b:48:5f: e1:26:dc:17:da:43:40:49:c1:ed:47:ac:3c:cd:2b:7b:20:e9: b8:98:c6:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPOxfanZcOuhEdMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NzY4NzZlYWEtYjRhYi00YzU2LTgyZTUtNzA1YmFmZjRlNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb/TlgU+A8dMjVerDuX1/SY7t7jJKl2k95OP vQ/5DPU3rDu6dICT7UglhVNPeOUOMrgKMxzOWNxX5zL9PI0IEjyYA/NWaIMSNA5O 2P3KmHQvY3gAxrggFDfZLGpnmwj2vAm2dQrWqVbcPhldGc65zsZ6M/Sw7TiaZD5J 31+Ts6O85r1nnSOsmoTwmEsECaNgeQk8OmAybDs+QcmL+T20U0S/e1dDOcaO+l17 PfWhDUG8xdSMekwPsaFFvarynNKVlyZ0Pcu/FYCdnaTxVH5NwHYc1iLGlTQtSUKb PEe9RGUvFfKT77Dsv89ai3iSVDgmjbtgTfyQFIe8IfpRVPOpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSCpl1lfdou96pVodhM1s/J6NSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvZDA4MTJkNTQtZjBkMy0z MTFlLTgzYWQtZTFiY2U1NjBlNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlLzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbJqahjpu5iIGDjBBVyFR3qbiu++qNhNwzLitVwahs+4NUuwLPLUbyR IeEX1feuC7t4OiSv+C6xxXBmOvDh6Kltxbt9o/j+//hvZp2eiid2f0QSg/gCIYFd fq8yepXo78LL4nf5NXUvoApTuC7jeVpfaToJ/ES5jSxR304dbIh7UuBtilCFpHI9 ucIM+uOrgTc8M8ZUoYU1r3gvFcWBBOb12OWwIuuQvPjrwhbO/Xk/rsNyBNox4Fxt djgnuEZVlbjf+/uQPsSrC1g+C5sGw9jClh9wIYBmEz85v+i5m042WeLifArjZmtI X+Em3BfaQ0BJwe1HrDzNK3sg6biYxnU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:42 2025 by rpki-client