$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: OFn1OSmvykG05QQ21ow3gWfY09LIir2m617YTfiC2SI= Subject key identifier: DA:18:9B:8A:E8:CD:3E:42:8B:79:6C:B4:CB:C5:A9:E2:72:B1:A4:BB Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584B9B3CE4F6511D3DC72B0A2DB6 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e4:f6:51:1d:3d:c7:2b:0a:2d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d81c35fd-7282-4ea5-a897-2b1c19010257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:1e:ce:62:56:45:90:5e:4a:7a:39:5b:ee: d4:3c:02:b6:04:c7:64:dc:73:e7:33:ef:26:5b:02: e1:94:9a:f5:a0:3f:ae:38:6e:09:ac:5f:13:93:37: de:a4:14:d8:9b:c7:88:09:5d:00:11:ab:59:8b:6d: ca:e4:10:ce:96:e4:7d:0b:eb:5d:68:14:ca:31:01: 02:e8:df:dd:7b:0c:c1:81:6e:de:37:06:da:f0:89: 7b:8d:99:24:ac:ff:b6:80:70:59:aa:43:a8:06:be: db:c8:a3:20:ec:89:d4:a3:f0:da:62:44:92:8e:94: 17:64:1e:89:1a:31:8f:22:27:8a:18:04:df:27:f8: 95:94:d7:bf:cf:9f:9f:37:37:e5:89:56:79:1e:b8: 09:76:c0:78:22:fe:1c:29:71:e3:09:5c:63:ff:ea: 42:ef:80:5e:28:4d:fb:4a:93:74:53:f3:a3:a5:1c: 9d:1d:0c:ab:95:2e:b9:8d:66:69:2a:35:6d:82:9b: 01:7c:ae:c7:82:d0:43:8c:4a:82:a6:80:ab:39:41: d9:97:e3:57:e0:93:c3:92:2e:7c:df:e3:d9:3b:ac: 5f:11:91:ca:13:fe:77:b2:86:ac:a5:c1:0e:9a:bc: d1:87:07:e3:11:9d:6e:24:1f:5b:1a:39:6b:20:55: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:18:9B:8A:E8:CD:3E:42:8B:79:6C:B4:CB:C5:A9:E2:72:B1:A4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a4:57:e9:a4:7a:c4:5f:20:4c:1f:d7:35:b7:73:74:28:21: 78:1d:10:a4:07:96:65:f7:61:2a:5d:fb:fd:c5:3d:88:da:e3: fc:bc:c4:3b:85:c1:20:a7:6c:b2:e6:0a:40:ce:36:9b:ea:76: 3d:1c:1f:7c:16:72:92:be:35:fe:53:72:b8:96:39:45:24:d0: 55:8f:c3:17:24:88:48:27:a0:c6:09:a3:25:e2:8d:8d:de:0c: fa:95:7a:9c:0e:4d:c2:ba:57:b4:40:57:32:af:2a:75:6c:f0: f9:f1:6d:a2:92:54:f6:90:a2:7a:9e:42:e1:37:9c:50:34:c8: 86:6c:5d:49:81:0c:47:a3:13:20:c6:94:52:bd:d2:df:5d:b0: 70:2f:2f:6c:95:40:58:08:07:9d:3c:13:30:77:33:54:be:94: 1f:41:30:89:71:05:ee:9b:fc:6b:87:b2:e2:63:09:4b:dc:8f: 4e:ae:29:92:c5:d5:ef:ca:94:8a:7b:c5:a4:e2:80:61:0b:dc: 0f:70:23:3e:44:2c:02:ee:1f:64:4b:a0:e2:fc:ce:0c:a8:4a: be:4d:c0:61:8b:a9:56:57:a8:2d:4e:f1:3c:32:12:2c:d9:17: 2a:69:1d:e5:58:4b:e2:2a:b0:7d:35:02:c3:7f:a9:b3:6f:46: 6b:36:34:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOT2UR09xysKLbYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDgxYzM1ZmQtNzI4Mi00ZWE1LWE4OTctMmIxYzE5MDEwMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUMezmJWRZBeSno5W+7UPAK2BMdk3HPnM+8m WwLhlJr1oD+uOG4JrF8TkzfepBTYm8eICV0AEatZi23K5BDOluR9C+tdaBTKMQEC 6N/dewzBgW7eNwba8Il7jZkkrP+2gHBZqkOoBr7byKMg7InUo/DaYkSSjpQXZB6J GjGPIieKGATfJ/iVlNe/z5+fNzfliVZ5HrgJdsB4Iv4cKXHjCVxj/+pC74BeKE37 SpN0U/OjpRydHQyrlS65jWZpKjVtgpsBfK7HgtBDjEqCpoCrOUHZl+NX4JPDki58 3+PZO6xfEZHKE/53soaspcEOmrzRhwfjEZ1uJB9bGjlrIFUykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoYm4rozT5Ci3lstMvFqeJysaS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6kV+mkesRfIEwf1zW3c3QoIXgdEKQHlmX3YSpd+/3FPYja4/y8xDuF wSCnbLLmCkDONpvqdj0cH3wWcpK+Nf5TcriWOUUk0FWPwxckiEgnoMYJoyXijY3e DPqVepwOTcK6V7RAVzKvKnVs8PnxbaKSVPaQonqeQuE3nFA0yIZsXUmBDEejEyDG lFK90t9dsHAvL2yVQFgIB508EzB3M1S+lB9BMIlxBe6b/GuHsuJjCUvcj06uKZLF 1e/KlIp7xaTigGEL3A9wIz5ELALuH2RLoOL8zgyoSr5NwGGLqVZXqC1O8TwyEizZ FyppHeVYS+IqsH01AsN/qbNvRms2NLA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:00:18 2025 by rpki-client