$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8a993b3c-970a-3144-b74b-f3cc3a34ecc2.roa File: 8a993b3c-970a-3144-b74b-f3cc3a34ecc2.roa (raw, json) Hash identifier: FiP49KgZy26otUl+IqLyA/iE/cmhj1SDpKj4uwUvie8= Subject key identifier: EF:25:BF:9C:FC:43:21:07:F5:0C:86:0F:1C:3C:A4:C0:00:1D:40:B3 Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Certificate serial: 010D0C9F4328584FAB0CC6397CBC6DBAB71DDE80 Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8a993b3c-970a-3144-b74b-f3cc3a34ecc2.roa Signing time: Fri 30 Oct 2026 00:04:25 +0000 ROA not before: Fri 30 Oct 2026 00:04:25 +0000 ROA not after: Thu 28 Jan 2027 01:04:25 +0000 asID: 13860 IP address blocks: 148.159.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:0c:c6:39:7c:bc:6d:ba:b7:1d:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Validity Not Before: Oct 30 00:04:25 2026 GMT Not After : Jan 28 01:04:25 2027 GMT Subject: CN=4018b04e-90ce-480e-91fe-ff47cf393c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:2b:27:e4:cf:74:1f:99:06:7e:c5:5c:9b: b2:96:5e:b1:26:b7:bb:fa:1f:7f:94:8e:f7:e1:a3: 4d:c7:b5:a1:46:e8:9a:11:56:09:3f:52:83:81:46: 00:87:fd:0a:94:a9:a6:28:ce:58:2e:5f:0c:4a:9f: 9d:a7:81:2b:6c:05:39:80:b3:fa:c7:6f:e4:97:f8: 04:9f:11:b4:d6:53:93:f3:ec:47:87:ad:a5:a0:43: c7:1c:b4:3a:e3:18:88:9f:95:23:2d:6f:47:bf:77: 28:07:07:da:01:f3:f4:33:e7:8a:fa:3b:8a:07:c2: d0:b5:e5:18:a9:94:bf:e2:1a:ea:dd:35:96:8e:6d: bc:c6:8f:3c:8d:ad:d8:4b:d2:26:95:60:db:c6:8a: 52:b6:47:7a:cc:e5:37:b1:b8:35:b9:06:ec:a9:15: 80:fa:d7:d5:ae:23:1d:a2:15:ce:5a:fd:e3:87:3f: e2:ca:73:a2:39:60:83:d3:1e:41:b4:01:6d:a9:4f: 23:8b:82:6c:b8:0c:54:3b:f0:2c:9c:cf:09:e7:a2: c3:b7:8b:2d:f7:1c:ae:74:b6:25:cb:53:f0:d7:70: 18:d0:e5:fd:85:32:41:ec:84:f8:e2:7e:5d:24:57: 43:8d:60:a9:d7:8f:7b:ea:b5:cf:c7:e9:d3:03:9a: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:25:BF:9C:FC:43:21:07:F5:0C:86:0F:1C:3C:A4:C0:00:1D:40:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8a993b3c-970a-3144-b74b-f3cc3a34ecc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl X509v3 Authority Key Identifier: keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer sbgp-ipAddrBlock: critical IPv4: 148.159.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a1:8b:4e:b2:08:df:06:5b:51:74:25:14:e9:12:da:65:a5: 22:b0:8f:57:de:69:26:6d:22:9c:8d:4b:19:de:15:3c:26:48: a8:cc:7a:63:4c:11:9e:57:4d:16:af:81:de:e3:e8:e7:39:86: 14:d7:58:2d:9d:a7:a2:cc:4d:7b:19:70:12:3a:5b:a4:43:87: 2d:99:0f:b6:e7:99:2f:7b:15:e9:bb:66:24:24:4f:cb:f7:30: ed:c1:69:dd:f6:20:25:da:8b:1b:d5:a6:0a:f8:5c:69:cf:09: 78:12:17:ed:14:73:94:0f:5b:d2:1c:7d:17:14:74:4e:67:f8: 0e:41:2b:18:fa:23:9f:a2:50:72:57:77:4f:e3:2d:d2:af:e0: 0b:82:02:c3:44:94:3d:6a:87:6a:a8:79:68:94:e7:6a:20:8e: 73:30:ef:98:96:b3:54:c4:c0:91:2e:ac:42:e2:5d:d4:7b:7e: 2e:f4:c7:82:fc:fc:90:32:ec:f3:fa:06:4c:52:4e:8d:23:c0: 44:e1:fe:35:c1:b8:cc:34:ab:3f:ac:bd:49:6d:4e:bb:c1:08: b0:5d:7c:d7:75:18:4c:9d:4c:da:bc:84:6b:c5:e9:9e:8d:ba: 3e:72:e6:60:4b:32:9c:df:9b:55:77:6f:49:16:2a:10:23:d7: 37:e9:14:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rDMY5fLxturcd3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1Yjcx MWFhMB4XDTI2MTAzMDAwMDQyNVoXDTI3MDEyODAxMDQyNVowLzEtMCsGA1UEAxMk NDAxOGIwNGUtOTBjZS00ODBlLTkxZmUtZmY0N2NmMzkzYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx0rJ+TPdB+ZBn7FXJuyll6xJre7+h9/lI73 4aNNx7WhRuiaEVYJP1KDgUYAh/0KlKmmKM5YLl8MSp+dp4ErbAU5gLP6x2/kl/gE nxG01lOT8+xHh62loEPHHLQ64xiIn5UjLW9Hv3coBwfaAfP0M+eK+juKB8LQteUY qZS/4hrq3TWWjm28xo88ja3YS9ImlWDbxopStkd6zOU3sbg1uQbsqRWA+tfVriMd ohXOWv3jhz/iynOiOWCD0x5BtAFtqU8ji4JsuAxUO/AsnM8J56LDt4st9xyudLYl y1Pw13AY0OX9hTJB7IT44n5dJFdDjWCp14976rXPx+nTA5pKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8lv5z8QyEH9QyGDxw8pMAAHUCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZTQy Y2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvOGE5OTNiM2MtOTcwYS0z MTQ0LWI3NGItZjNjYzNhMzRlY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmU0MmNjN2ItMWZhNC00YmQ1LWFi ZjYtNTI1Zjk1YjcxMWFhL2JlNDJjYzdiLTFmYTQtNGJkNS1hYmY2LTUyNWY5NWI3 MTFhYS5jcmwwHwYDVR0jBBgwFoAU/a2C8vCI8NkxB6tCAi2hcAA4VDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVm OTViNzExYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJ9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKhi06yCN8GW1F0JRTpEtplpSKwj1feaSZtIpyNSxneFTwmSKjMemNM EZ5XTRavgd7j6Oc5hhTXWC2dp6LMTXsZcBI6W6RDhy2ZD7bnmS97Fem7ZiQkT8v3 MO3Bad32ICXaixvVpgr4XGnPCXgSF+0Uc5QPW9IcfRcUdE5n+A5BKxj6I5+iUHJX d0/jLdKv4AuCAsNElD1qh2qoeWiU52ogjnMw75iWs1TEwJEurELiXdR7fi70x4L8 /JAy7PP6BkxSTo0jwETh/jXBuMw0qz+svUltTrvBCLBdfNd1GEydTNq8hGvF6Z6N uj5y5mBLMpzfm1V3b0kWKhAj1zfpFMo= -----END CERTIFICATE-----Generated at Sun Nov 1 08:31:00 2026 by rpki-client