$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/49b4e43c-28b6-316a-b6ea-89a913c030b4.roa File: 49b4e43c-28b6-316a-b6ea-89a913c030b4.roa (raw, json) Hash identifier: oOKlpFcXaBFvOOIobGdfiT6TFzx6WW++41SZP+X+55M= Subject key identifier: E5:06:40:08:9B:71:70:CC:63:DB:BB:FD:1A:B2:22:1D:50:3B:CD:52 Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Certificate serial: 010D0C9F4328584FAB106681427DD40A77520B80 Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/49b4e43c-28b6-316a-b6ea-89a913c030b4.roa Signing time: Fri 30 Oct 2026 00:11:43 +0000 ROA not before: Fri 30 Oct 2026 00:11:43 +0000 ROA not after: Thu 28 Jan 2027 01:11:43 +0000 asID: 13860 IP address blocks: 148.159.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:10:66:81:42:7d:d4:0a:77:52:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Validity Not Before: Oct 30 00:11:43 2026 GMT Not After : Jan 28 01:11:43 2027 GMT Subject: CN=181e64b9-9104-40d6-a6e4-d2e72db6107d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b6:0c:73:38:5c:34:f4:05:e8:ef:5f:20:0a: 7a:04:96:39:82:ac:b7:04:d5:8d:6b:09:d0:6c:55: 20:8b:e8:61:83:63:3b:7b:0e:48:2a:e6:e9:4f:f1: 6a:39:5b:53:5e:03:d3:38:1d:a9:e9:ac:12:e0:fc: 9a:45:18:42:ce:8d:f4:97:73:f9:58:29:e4:a2:d4: 2c:55:80:e9:c8:21:5a:f7:c6:4e:4b:0b:5f:15:23: cc:61:e7:3b:0e:8f:32:25:25:1a:b7:34:e8:b6:3f: d5:a8:d1:4b:23:68:16:09:9a:74:80:da:76:84:9d: 07:b8:71:3f:75:98:f2:3b:4a:ee:dd:16:0e:44:9b: 33:eb:b1:b9:3a:83:d5:5e:28:1d:6c:29:09:93:76: 65:04:cb:c0:3c:46:13:8c:6f:46:e8:cb:1f:db:c8: 54:3b:ee:57:be:ec:00:94:f5:b1:d7:51:07:f1:09: 65:ba:05:1e:97:9d:1e:5d:2f:f9:dd:9d:37:58:39: 65:74:05:0f:2d:12:92:c1:70:6c:fb:d8:79:e3:34: 43:fd:36:78:42:20:ce:18:6f:1b:3a:75:22:9c:06: 07:6f:1c:e7:68:5d:d2:9c:e3:ef:0f:8e:5d:de:e3: 19:ca:b7:db:67:f8:ae:3f:64:8a:f4:6b:b1:17:df: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:06:40:08:9B:71:70:CC:63:DB:BB:FD:1A:B2:22:1D:50:3B:CD:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/49b4e43c-28b6-316a-b6ea-89a913c030b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl X509v3 Authority Key Identifier: keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer sbgp-ipAddrBlock: critical IPv4: 148.159.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:60:20:c4:1f:6f:ca:9d:e4:71:8a:d7:bf:d6:cd:2e:b0:8a: 73:66:db:05:c3:da:59:4b:d4:49:0b:79:12:fe:20:75:6d:c2: 75:6e:79:82:98:64:25:dc:42:17:c7:11:d0:b4:57:58:c9:2b: 8a:56:9b:cc:41:df:c7:93:29:59:e4:bd:7d:b0:fe:68:03:c2: b8:a7:bc:6a:53:b2:ab:82:b6:e2:05:74:07:51:76:99:97:a7: 51:70:c9:55:b7:e4:5e:a4:46:75:dc:db:ee:1a:c6:80:0b:5e: f4:4a:9c:2e:8f:24:78:96:e0:8b:7e:39:1c:f0:b4:36:29:37: 86:dc:12:9a:af:a4:5a:81:53:74:b5:8d:b7:f7:bd:17:2e:b6: 2b:8b:9c:35:e5:70:51:ac:45:32:a3:1d:43:52:da:40:19:2d: 92:ca:3f:9b:58:2c:a5:05:33:2c:cb:da:70:9b:f1:d5:2e:6b: c6:7e:f6:a2:0c:52:08:65:54:43:4f:ff:a0:2e:7b:68:74:05: 37:72:7d:e8:2f:82:b4:4f:93:f1:28:7f:73:1e:75:f7:f8:c4: d3:51:c0:89:c8:f6:d1:5b:13:fb:82:8f:7f:2b:c7:c1:39:35: 69:80:27:96:0c:47:c8:83:1d:ee:73:f9:70:d1:f1:cf:40:be: 30:1d:45:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rEGaBQn3UCndSC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1Yjcx MWFhMB4XDTI2MTAzMDAwMTE0M1oXDTI3MDEyODAxMTE0M1owLzEtMCsGA1UEAxMk MTgxZTY0YjktOTEwNC00MGQ2LWE2ZTQtZDJlNzJkYjYxMDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrYMczhcNPQF6O9fIAp6BJY5gqy3BNWNawnQ bFUgi+hhg2M7ew5IKubpT/FqOVtTXgPTOB2p6awS4PyaRRhCzo30l3P5WCnkotQs VYDpyCFa98ZOSwtfFSPMYec7Do8yJSUatzTotj/VqNFLI2gWCZp0gNp2hJ0HuHE/ dZjyO0ru3RYORJsz67G5OoPVXigdbCkJk3ZlBMvAPEYTjG9G6Msf28hUO+5XvuwA lPWx11EH8QllugUel50eXS/53Z03WDlldAUPLRKSwXBs+9h54zRD/TZ4QiDOGG8b OnUinAYHbxznaF3SnOPvD45d3uMZyrfbZ/iuP2SK9GuxF9/PLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUGQAibcXDMY9u7/RqyIh1QO81SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZTQy Y2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvNDliNGU0M2MtMjhiNi0z MTZhLWI2ZWEtODlhOTEzYzAzMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmU0MmNjN2ItMWZhNC00YmQ1LWFi ZjYtNTI1Zjk1YjcxMWFhL2JlNDJjYzdiLTFmYTQtNGJkNS1hYmY2LTUyNWY5NWI3 MTFhYS5jcmwwHwYDVR0jBBgwFoAU/a2C8vCI8NkxB6tCAi2hcAA4VDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVm OTViNzExYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJ9mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBgIMQfb8qd5HGK17/WzS6winNm2wXD2llL1EkLeRL+IHVtwnVueYKY ZCXcQhfHEdC0V1jJK4pWm8xB38eTKVnkvX2w/mgDwrinvGpTsquCtuIFdAdRdpmX p1FwyVW35F6kRnXc2+4axoALXvRKnC6PJHiW4It+ORzwtDYpN4bcEpqvpFqBU3S1 jbf3vRcutiuLnDXlcFGsRTKjHUNS2kAZLZLKP5tYLKUFMyzL2nCb8dUua8Z+9qIM UghlVENP/6Aue2h0BTdyfegvgrRPk/Eof3Medff4xNNRwInI9tFbE/uCj38rx8E5 NWmAJ5YMR8iDHe5z+XDR8c9AvjAdRec= -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:46 2026 by rpki-client