
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
File: b8400ae4-c32e-32eb-863d-6abffbace522.roa (raw, json)
Hash identifier: lcU8laf8J4DHF+uQHysUT3ljz2zR2Tw59G1ulANY7xU=
Subject key identifier: B9:5E:56:5A:3B:C3:65:0A:FF:8E:6B:82:CE:6A:8E:6C:51:51:DB:E6
Certificate issuer: /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial: 010D0C9F4328584D4D5A704093E22A2B23CA1888
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 15404
IP address blocks: 148.188.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:70:40:93:e2:2a:2b:23:ca:18:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=3c8e6ec8-6e1b-40d0-b3f2-58a7bf008004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:35:02:e1:12:2f:01:0f:5a:61:88:17:7f:16:
d2:f3:f3:7b:85:04:64:fe:bc:9f:1e:e5:d4:35:05:
d3:2f:4b:32:c2:cd:e1:c6:b7:f3:56:2e:48:18:2d:
a0:6a:79:72:1e:c6:eb:53:77:8b:32:61:52:fa:f0:
7b:1b:fa:ee:b7:2c:99:2d:92:09:59:36:1c:7b:58:
09:4e:d6:74:d7:97:4e:84:d1:d5:c8:a8:97:3c:9f:
d5:5a:67:de:4a:a0:03:de:04:4f:36:05:96:e5:b1:
30:89:22:7b:92:5f:16:6f:2f:a2:12:2a:28:c3:71:
66:3a:bc:c2:1d:56:1f:c3:00:10:6d:9d:d3:32:82:
ee:1b:db:61:08:c9:d4:62:62:6a:4e:10:bd:40:f8:
32:c5:82:7a:8c:ac:ea:f8:5b:7c:ea:15:2e:2d:82:
9f:83:71:20:af:e3:34:74:94:9d:98:3d:e5:8d:27:
42:f0:5f:20:be:bb:7b:5b:1e:17:8b:4d:f8:2b:47:
83:4e:90:35:e2:33:a6:f7:69:df:3a:35:7b:b2:cf:
e3:8e:05:83:08:aa:37:8c:3a:70:d3:2e:61:76:ec:
75:f9:5f:cd:70:e5:3b:61:61:3d:86:27:d4:1f:7d:
d1:d3:64:7a:75:e5:8b:e6:ec:b7:16:ee:d9:7c:68:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5E:56:5A:3B:C3:65:0A:FF:8E:6B:82:CE:6A:8E:6C:51:51:DB:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/b8400ae4-c32e-32eb-863d-6abffbace522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl
X509v3 Authority Key Identifier:
keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
sbgp-ipAddrBlock: critical
IPv4:
148.188.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:26:b3:5d:53:0c:36:0f:01:a3:5b:cd:4d:dd:56:5b:a8:63:
a8:d6:4f:b0:c6:18:da:60:ec:57:fd:94:a5:68:fc:6f:da:a6:
23:b5:36:51:bc:41:be:7f:06:5d:79:c1:d5:1d:f3:e2:cb:bd:
de:e3:6c:b1:c4:7d:e0:65:2c:15:09:c7:70:dc:ae:c4:04:d5:
d9:ba:fb:35:6a:35:a3:79:24:ba:41:f3:59:f2:ff:4d:cc:ed:
ae:ed:9b:62:a1:8c:9e:1d:cc:68:db:e5:a4:6b:2f:58:e0:1c:
8e:ec:bb:58:83:e8:6c:b4:bc:fc:2b:96:2c:67:96:6a:d9:42:
f8:82:ac:f5:1e:b7:1a:59:04:3d:c0:f0:9d:12:91:d2:89:62:
3c:14:3a:b2:d4:1c:48:11:43:32:0e:4c:7a:89:06:f4:4c:27:
8e:ff:71:5f:08:5d:d4:e9:a6:f0:eb:10:43:31:41:39:36:5a:
aa:19:1e:06:32:b2:39:8e:08:3a:ef:35:38:d6:e1:1e:6b:5a:
f0:37:29:01:ed:9d:3e:ee:42:d7:2f:ae:b5:dc:5e:3d:b2:f4:
e9:26:f0:29:98:66:25:dc:fe:ce:bc:12:5a:ac:6d:66:18:d8:
e2:f9:e0:cb:24:7d:f3:2a:43:95:14:32:20:7f:06:7b:5c:ba:
44:53:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:13 2026 by rpki-client