$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa File: 688b41be-4635-3543-940d-180df78be3b0.roa (raw, json) Hash identifier: U3jDLbaoHTBwok3u40FKqXQFXv8Hq1K0V6W0Q2T+OnM= Subject key identifier: 35:68:1D:37:5F:2E:B6:1C:1B:0F:0F:37:B1:B1:C4:6C:48:32:C3:95 Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Certificate serial: 010D0C9F4328584ABA80C4AAF4B3B1D93D00B2A8 Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa Signing time: Sun 03 Aug 2025 01:00:32 +0000 ROA not before: Sun 03 Aug 2025 01:00:32 +0000 ROA not after: Sat 01 Nov 2025 01:00:32 +0000 asID: 15404 IP address blocks: 148.188.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:80:c4:aa:f4:b3:b1:d9:3d:00:b2:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948 Validity Not Before: Aug 3 01:00:32 2025 GMT Not After : Nov 1 01:00:32 2025 GMT Subject: CN=62b20617-8f16-44e6-b5f3-69f27cc6d018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:be:16:88:9f:cd:03:9f:5a:69:54:20:41: ad:38:f1:a1:1d:c4:d4:66:80:f5:f6:8a:45:57:6c: 8a:bd:a2:1d:ec:26:64:49:39:1c:f9:55:5a:95:d7: cb:5b:a6:ba:08:55:0c:a0:47:92:39:c5:47:25:e4: f5:38:de:a7:d9:68:2c:5c:07:00:33:f1:0f:e0:aa: e8:a4:6a:40:fc:21:05:33:8e:23:6f:a2:e6:00:33: 07:05:9a:a1:44:6a:aa:11:ee:bb:b1:58:a9:47:9c: 9a:5d:8b:01:80:76:6b:5b:67:0b:de:bb:75:46:e7: 3b:66:ca:9d:28:7f:2e:82:88:51:32:bc:63:4d:d7: 6a:e2:4f:50:c5:6e:ad:da:89:3c:ce:ee:ec:1d:89: cd:38:4b:fe:50:4a:cf:35:8f:76:24:6f:af:69:13: 69:3d:c8:98:a0:42:11:87:aa:4d:1a:b5:f9:70:1c: b6:0c:97:28:a0:9d:55:6c:70:18:9a:88:32:90:f3: 6f:17:ed:40:82:a4:5a:a9:af:74:76:58:a5:33:54: ef:a4:44:3d:75:7f:59:bb:90:1c:45:11:a9:f8:93: 38:65:d9:22:4a:58:cd:6f:9b:3f:35:d7:c5:f5:3e: c6:4b:41:b5:af:23:8f:aa:df:36:c4:81:1e:1a:2e: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:68:1D:37:5F:2E:B6:1C:1B:0F:0F:37:B1:B1:C4:6C:48:32:C3:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/688b41be-4635-3543-940d-180df78be3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl X509v3 Authority Key Identifier: keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer sbgp-ipAddrBlock: critical IPv4: 148.188.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:41:e3:da:b1:ce:f9:fb:26:55:7d:b7:32:31:70:5b:ab:fd: 0a:ad:2d:6a:ef:f4:0c:09:ca:6b:cf:f3:72:d4:7e:bb:76:5b: af:c7:5b:15:e3:9a:d1:a8:a4:63:87:37:f3:e6:93:fb:8b:4a: ab:1f:f3:3f:11:ad:17:b7:56:73:89:f8:0a:78:92:3a:95:73: b4:09:96:5f:07:ee:a4:3a:44:9d:a3:6a:19:88:2f:d7:6a:9a: 27:1a:4c:09:6b:78:00:e1:9d:64:2c:b2:e4:cd:8c:9c:8b:2b: 94:32:62:c2:88:a6:0d:a4:3d:9d:a7:74:c8:6d:41:ca:49:50: fc:3f:d2:e7:39:c2:a2:ae:ed:97:51:56:c6:eb:79:15:b1:44: 62:81:7e:2f:8b:b4:b7:5f:ca:bd:5a:eb:31:e7:8e:5e:e3:11: 38:a9:cf:15:68:95:ae:60:7c:a4:95:e0:40:ca:0a:65:9a:25: 72:a3:46:72:04:c7:95:84:24:83:43:76:b8:c6:1b:8a:e0:66: f1:07:b2:55:e3:e3:c1:6d:7d:9a:b7:01:6e:8a:66:43:86:07: 55:eb:b4:d7:94:84:71:93:af:be:3f:85:3d:ef:b1:48:8d:f4: 70:15:00:bd:fc:26:a6:4a:40:c3:80:09:e0:04:72:0c:4c:45: 31:35:f1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6gMSq9LOx2T0AsqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQwZTNlNGYtOTRhNy00YTNmLTk1ODQtZTdlNjIyMmUw OTQ4MB4XDTI1MDgwMzAxMDAzMloXDTI1MTEwMTAxMDAzMlowLzEtMCsGA1UEAxMk NjJiMjA2MTctOGYxNi00NGU2LWI1ZjMtNjlmMjdjYzZkMDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/K+FoifzQOfWmlUIEGtOPGhHcTUZoD19opF V2yKvaId7CZkSTkc+VValdfLW6a6CFUMoEeSOcVHJeT1ON6n2WgsXAcAM/EP4Kro pGpA/CEFM44jb6LmADMHBZqhRGqqEe67sVipR5yaXYsBgHZrW2cL3rt1Ruc7Zsqd KH8ugohRMrxjTddq4k9QxW6t2ok8zu7sHYnNOEv+UErPNY92JG+vaRNpPciYoEIR h6pNGrX5cBy2DJcooJ1VbHAYmogykPNvF+1AgqRaqa90dlilM1TvpEQ9dX9Zu5Ac RRGp+JM4ZdkiSljNb5s/NdfF9T7GS0G1ryOPqt82xIEeGi5lLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVoHTdfLrYcGw8PN7GxxGxIMsOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBl M2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2MjIyZTA5NDgvNjg4YjQxYmUtNDYzNS0z NTQzLTk0MGQtMTgwZGY3OGJlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzQwZTNlNGYtOTRhNy00YTNmLTk1 ODQtZTdlNjIyMmUwOTQ4L2M0MGUzZTRmLTk0YTctNGEzZi05NTg0LWU3ZTYyMjJl MDk0OC5jcmwwHwYDVR0jBBgwFoAU69NrHx24NIK/P6csdwy64XeuZy8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jNDBlM2U0Zi05NGE3LTRhM2YtOTU4NC1lN2U2 MjIyZTA5NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElLwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRB49qxzvn7JlV9tzIxcFur/QqtLWrv9AwJymvP83LUfrt2W6/HWxXj mtGopGOHN/Pmk/uLSqsf8z8RrRe3VnOJ+Ap4kjqVc7QJll8H7qQ6RJ2jahmIL9dq micaTAlreADhnWQssuTNjJyLK5QyYsKIpg2kPZ2ndMhtQcpJUPw/0uc5wqKu7ZdR VsbreRWxRGKBfi+LtLdfyr1a6zHnjl7jETipzxVola5gfKSV4EDKCmWaJXKjRnIE x5WEJINDdrjGG4rgZvEHslXj48FtfZq3AW6KZkOGB1XrtNeUhHGTr74/hT3vsUiN 9HAVAL38JqZKQMOACeAEcgxMRTE18T0= -----END CERTIFICATE-----Generated at Fri Aug 8 19:25:54 2025 by rpki-client