$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa File: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (raw, json) Hash identifier: 4WRo+80q3EnFYzK+c5v4X5YEp9RY0+XLRTVddnHENxE= Subject key identifier: FD:D1:6C:CD:D6:86:DB:98:85:F5:E1:0A:73:55:54:14:9F:99:B1:49 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584D4D5A79DC1C59F17C2BBC7F00 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 1299 IP address blocks: 148.188.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:79:dc:1c:59:f1:7c:2b:bc:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=ca97e8fc-5157-492d-bf50-1838dd1b86c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:f4:66:02:ff:87:d9:6a:89:8c:e8:d7:81: 2a:f0:68:47:b0:35:02:e3:39:97:97:d6:34:b0:90: 16:0e:72:dc:63:de:26:11:e9:a3:92:1a:b3:51:08: e6:64:65:ae:f2:81:d2:27:c5:2d:da:b1:68:aa:9d: 50:ed:73:fb:43:45:57:e1:52:60:5a:4e:ca:f2:18: 04:4f:e9:af:51:31:91:40:8d:bb:32:97:ba:41:7d: b3:13:8b:b0:99:a5:6c:cf:15:0c:5f:e0:e5:03:c2: fa:07:1d:4d:dc:6a:c6:cf:08:b1:5d:9d:f7:40:cf: dd:e8:3e:cb:31:4a:f3:5c:ac:68:19:57:34:2c:a5: 60:4d:63:5b:fb:53:8d:cd:4c:0f:28:2d:b7:1a:e0: 2c:4d:9a:27:c1:30:66:a9:00:98:c9:6d:20:66:95: ac:6e:4e:78:27:12:d3:32:ff:c7:4b:4a:6f:78:9e: 9c:e2:9d:c4:41:a6:a9:d1:36:78:c5:af:a1:23:c2: 49:4c:64:e6:3f:ae:eb:d7:9c:13:88:10:43:89:3c: 4c:46:b4:17:79:52:a1:82:01:4d:e2:ec:2b:5f:57: 88:09:c3:f1:84:8e:00:b2:f0:87:dd:45:4e:f9:c1: 2e:11:18:21:11:28:9a:76:2b:9a:d0:9d:f0:9e:33: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D1:6C:CD:D6:86:DB:98:85:F5:E1:0A:73:55:54:14:9F:99:B1:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/408381c8-6830-38f5-9c88-6356ab563ec5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:9b:0c:27:a5:60:14:64:b4:b0:5e:01:b5:66:19:b2:6e:51: 9a:43:9c:80:0f:f9:56:c2:ed:8c:6a:6a:3d:f3:b5:84:8e:ed: 26:3a:55:d2:82:97:b6:04:fb:4f:8f:15:31:7a:4a:37:b1:86: f0:ff:99:00:d8:15:01:27:0f:c0:bc:88:57:c0:9c:b1:cf:79: 1f:c0:ea:52:80:c8:67:61:4e:64:a1:e2:8f:12:ba:3e:27:58: e0:95:5b:5a:9d:a3:a6:54:ca:1d:33:21:04:72:24:6e:2d:97: 5e:60:0c:3e:11:49:64:6b:38:f5:ea:3a:33:eb:ba:e4:99:71: 09:7b:5a:79:ec:df:7d:2f:e9:26:1a:24:a6:1a:28:b7:bf:2e: ec:d5:14:70:ca:c7:c0:82:a0:22:8f:b8:15:de:bc:d3:0d:68: 56:f7:8c:0e:34:82:84:91:69:4c:4b:a3:d8:cc:87:e7:06:11: bf:1d:1e:9e:f7:3c:26:32:ad:85:3f:ad:7d:ee:c4:b0:6f:6d: b2:3d:74:fa:56:2b:74:4d:7f:35:f7:e2:b6:0d:0b:39:cc:36: 1b:4b:28:24:ae:d5:7d:68:b9:2d:86:25:f6:67:ad:5f:87:0e: 50:99:32:21:d9:fe:80:0e:55:56:95:87:5b:d7:83:41:8a:be: ad:e8:8d:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnncHFnxfCu8fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk Y2E5N2U4ZmMtNTE1Ny00OTJkLWJmNTAtMTgzOGRkMWI4NmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6v0ZgL/h9lqiYzo14Eq8GhHsDUC4zmXl9Y0 sJAWDnLcY94mEemjkhqzUQjmZGWu8oHSJ8Ut2rFoqp1Q7XP7Q0VX4VJgWk7K8hgE T+mvUTGRQI27Mpe6QX2zE4uwmaVszxUMX+DlA8L6Bx1N3GrGzwixXZ33QM/d6D7L MUrzXKxoGVc0LKVgTWNb+1ONzUwPKC23GuAsTZonwTBmqQCYyW0gZpWsbk54JxLT Mv/HS0pveJ6c4p3EQaap0TZ4xa+hI8JJTGTmP67r15wTiBBDiTxMRrQXeVKhggFN 4uwrX1eICcPxhI4AsvCH3UVO+cEuERghESiadiua0J3wnjOARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3RbM3WhtuYhfXhCnNVVBSfmbFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNDA4MzgxYzgtNjgzMC0z OGY1LTljODgtNjM1NmFiNTYzZWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHybDCelYBRktLBeAbVmGbJuUZpDnIAP+VbC7Yxqaj3ztYSO7SY6VdKC l7YE+0+PFTF6SjexhvD/mQDYFQEnD8C8iFfAnLHPeR/A6lKAyGdhTmSh4o8Suj4n WOCVW1qdo6ZUyh0zIQRyJG4tl15gDD4RSWRrOPXqOjPruuSZcQl7Wnns330v6SYa JKYaKLe/LuzVFHDKx8CCoCKPuBXevNMNaFb3jA40goSRaUxLo9jMh+cGEb8dHp73 PCYyrYU/rX3uxLBvbbI9dPpWK3RNfzX34rYNCznMNhtLKCSu1X1ouS2GJfZnrV+H DlCZMiHZ/oAOVVaVh1vXg0GKvq3ojUU= -----END CERTIFICATE-----Generated at Fri Apr 17 16:57:04 2026 by rpki-client