$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/840057d0-818a-3105-bf17-a3e3e00a0edd.roa File: 840057d0-818a-3105-bf17-a3e3e00a0edd.roa (raw, json) Hash identifier: nbv2/a3OQKejAsFy1HeBRDEHMBqDAfTkK3W9m5vPFRg= Subject key identifier: 5A:74:AC:90:31:68:9A:79:DE:1D:15:A0:9A:49:42:7D:4C:94:86:24 Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Certificate serial: 010D0C9F4328584FAB14081FA1041EF7615E3300 Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/840057d0-818a-3105-bf17-a3e3e00a0edd.roa Signing time: Fri 30 Oct 2026 00:19:02 +0000 ROA not before: Fri 30 Oct 2026 00:19:02 +0000 ROA not after: Thu 28 Jan 2027 01:11:22 +0000 asID: 13860 IP address blocks: 148.159.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:14:08:1f:a1:04:1e:f7:61:5e:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Validity Not Before: Oct 30 00:19:02 2026 GMT Not After : Jan 28 01:11:22 2027 GMT Subject: CN=f910c76b-b072-4be8-8c10-c9494661a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bb:24:e1:83:99:8c:90:0e:3d:1e:87:6d:93: 05:de:fd:a5:6d:f1:f7:a8:9f:dd:e3:1e:ff:6e:c9: bc:4d:e1:fe:94:03:67:fb:ef:4b:95:19:c8:4a:b4: 7a:f9:cb:4a:9b:a3:cc:de:a0:f0:f5:b4:00:06:08: 03:7d:aa:fb:18:67:44:60:d0:93:da:87:c3:16:f8: 22:63:6f:25:5d:c5:fd:10:73:cd:00:a6:fd:79:2e: 1b:46:9e:fc:e9:41:57:2f:b8:a0:09:07:f2:a4:ae: 7d:0f:0c:ec:3a:4b:ae:42:3e:6f:30:2d:0c:d8:2f: 68:1e:1f:cc:44:f5:4d:0c:bf:94:72:4d:67:a2:d5: ca:a1:b2:b2:f5:df:8a:8a:e0:09:87:dc:3b:90:32: d6:b1:32:fd:e9:65:c6:96:f3:47:b9:ff:f4:35:99: 07:5d:e6:6b:87:00:0f:b6:b8:2b:eb:5e:d0:6d:6c: 13:24:d8:08:8c:7e:26:c0:e5:42:0f:57:8e:12:82: 6a:73:74:a9:50:15:23:7e:ab:f9:c4:a9:e9:1d:c3: 07:19:e7:7b:dd:54:76:09:f4:44:0b:63:58:fb:80: ab:08:af:d0:4e:63:c8:98:e4:a0:17:5e:0c:74:2b: 56:01:68:18:23:27:6d:c6:47:6e:3e:26:1d:12:ad: d4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:AC:90:31:68:9A:79:DE:1D:15:A0:9A:49:42:7D:4C:94:86:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/840057d0-818a-3105-bf17-a3e3e00a0edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl X509v3 Authority Key Identifier: keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer sbgp-ipAddrBlock: critical IPv4: 148.159.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:28:1c:47:3a:58:29:b7:5d:da:4b:28:e8:4a:24:59:eb:36: e9:64:25:1a:ee:d4:b7:13:b6:39:aa:09:2e:25:42:b3:75:32: e2:64:a6:10:87:31:bf:db:c3:6c:b4:8a:8e:7c:e8:43:d0:11: 46:84:34:5f:7f:03:1d:2b:58:c8:e7:f9:bf:13:fc:22:10:ad: 24:2a:15:02:64:87:f9:92:03:3e:b3:6b:3c:85:fb:b3:0f:86: 85:bd:02:6d:39:8f:e3:b1:44:84:a1:9a:c2:0e:6a:5f:8a:3b: ba:0f:e0:1a:58:20:ef:9e:bb:65:44:16:eb:4e:b3:30:08:d3: fb:38:c3:03:75:3c:90:71:fc:41:4a:a4:bb:7e:30:2e:63:33: 82:e8:d4:96:95:a3:c6:aa:78:4c:88:9f:2d:9e:3a:06:05:70: 22:e6:f1:53:e5:d5:5b:32:17:c9:57:6c:13:3a:a2:c6:c1:3e: f2:a2:63:d4:21:01:4b:2e:1e:19:6b:77:ef:04:76:c4:8e:09: 01:f0:87:6d:79:c8:24:a6:23:ea:98:fa:49:78:02:96:04:21: 61:13:c6:57:10:dc:b2:60:af:2f:e3:52:97:5d:25:e3:7b:88: 37:bd:7e:48:09:d2:77:ea:70:f7:b5:ad:aa:98:3b:d8:26:4a: 95:53:94:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rFAgfoQQe92FeMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1Yjcx MWFhMB4XDTI2MTAzMDAwMTkwMloXDTI3MDEyODAxMTEyMlowLzEtMCsGA1UEAxMk ZjkxMGM3NmItYjA3Mi00YmU4LThjMTAtYzk0OTQ2NjFhNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbsk4YOZjJAOPR6HbZMF3v2lbfH3qJ/d4x7/ bsm8TeH+lANn++9LlRnISrR6+ctKm6PM3qDw9bQABggDfar7GGdEYNCT2ofDFvgi Y28lXcX9EHPNAKb9eS4bRp786UFXL7igCQfypK59DwzsOkuuQj5vMC0M2C9oHh/M RPVNDL+Uck1notXKobKy9d+KiuAJh9w7kDLWsTL96WXGlvNHuf/0NZkHXeZrhwAP trgr617QbWwTJNgIjH4mwOVCD1eOEoJqc3SpUBUjfqv5xKnpHcMHGed73VR2CfRE C2NY+4CrCK/QTmPImOSgF14MdCtWAWgYIydtxkduPiYdEq3UNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp0rJAxaJp53h0VoJpJQn1MlIYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZTQy Y2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvODQwMDU3ZDAtODE4YS0z MTA1LWJmMTctYTNlM2UwMGEwZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmU0MmNjN2ItMWZhNC00YmQ1LWFi ZjYtNTI1Zjk1YjcxMWFhL2JlNDJjYzdiLTFmYTQtNGJkNS1hYmY2LTUyNWY5NWI3 MTFhYS5jcmwwHwYDVR0jBBgwFoAU/a2C8vCI8NkxB6tCAi2hcAA4VDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVm OTViNzExYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlJ9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMoHEc6WCm3XdpLKOhKJFnrNulkJRru1LcTtjmqCS4lQrN1MuJkphCH Mb/bw2y0io586EPQEUaENF9/Ax0rWMjn+b8T/CIQrSQqFQJkh/mSAz6zazyF+7MP hoW9Am05j+OxRIShmsIOal+KO7oP4BpYIO+eu2VEFutOszAI0/s4wwN1PJBx/EFK pLt+MC5jM4Lo1JaVo8aqeEyIny2eOgYFcCLm8VPl1VsyF8lXbBM6osbBPvKiY9Qh AUsuHhlrd+8EdsSOCQHwh215yCSmI+qY+kl4ApYEIWETxlcQ3LJgry/jUpddJeN7 iDe9fkgJ0nfqcPe1raqYO9gmSpVTlAs= -----END CERTIFICATE-----Generated at Sun Nov 1 14:35:06 2026 by rpki-client