$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8b9cf532-ef7c-3406-ac4b-510e90abc22f.roa File: 8b9cf532-ef7c-3406-ac4b-510e90abc22f.roa (raw, json) Hash identifier: 3vsN7CNlKztd5qgN/Tr5Oqd2oImonkJpklmKb5JBs6c= Subject key identifier: 25:F7:79:19:8C:98:4C:AF:4F:2A:07:56:11:BF:DD:13:00:41:47:BF Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Certificate serial: 010D0C9F4328584FAB0E9ECC005ECECDF5992920 Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8b9cf532-ef7c-3406-ac4b-510e90abc22f.roa Signing time: Fri 30 Oct 2026 00:08:08 +0000 ROA not before: Fri 30 Oct 2026 00:08:08 +0000 ROA not after: Thu 28 Jan 2027 01:08:08 +0000 asID: 13860 IP address blocks: 148.159.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:0e:9e:cc:00:5e:ce:cd:f5:99:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Validity Not Before: Oct 30 00:08:08 2026 GMT Not After : Jan 28 01:08:08 2027 GMT Subject: CN=2cce3d1d-2a2b-4708-ae50-ff343f665f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:c5:d5:32:fa:f7:8d:82:8d:60:2f:c5:b9: 74:ee:81:55:aa:b2:52:f7:e9:00:aa:69:35:42:83: f8:e3:a4:05:9e:d3:70:e0:66:9f:29:29:c9:c1:d1: c4:1f:0f:d7:42:01:d3:a8:e0:4b:4e:33:e0:09:91: 65:6e:c1:25:7d:48:c4:9b:f2:8c:d8:c4:61:24:ff: c5:d4:45:c0:83:ff:9f:0f:8b:6b:26:e3:ea:35:97: 14:da:b8:0b:d7:48:c4:9a:f0:44:64:a5:63:61:c1: 61:43:ef:03:d4:4b:69:6d:86:30:d0:30:75:4c:c7: 8a:b7:cc:c1:50:01:b6:6a:7d:d5:0e:af:2d:2d:c9: f0:8e:fa:6c:d3:89:36:41:a2:d7:9a:ba:f6:fd:23: 4c:08:14:43:16:9a:6c:28:5c:11:5a:9e:32:b9:ae: f6:39:23:98:17:b4:ff:a8:38:52:fe:3e:77:3e:4e: 14:92:b0:c3:d7:9e:bb:e8:b2:63:c6:6c:9e:76:66: d9:61:f0:d0:63:43:02:d8:63:a4:cd:63:9b:34:4a: 3d:3c:97:2c:e1:48:59:ba:d6:7e:b1:f0:b5:d3:07: 47:7b:18:4e:41:59:1e:33:a2:e5:7b:6f:b8:a7:86: 6b:ee:5f:bf:5b:a2:0a:f7:2b:7e:fa:5c:a3:91:a6: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F7:79:19:8C:98:4C:AF:4F:2A:07:56:11:BF:DD:13:00:41:47:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/8b9cf532-ef7c-3406-ac4b-510e90abc22f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl X509v3 Authority Key Identifier: keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer sbgp-ipAddrBlock: critical IPv4: 148.159.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:05:d9:5a:b0:cb:39:07:6a:1b:ad:f1:ac:94:8a:5a:56:84: 51:2a:13:6b:58:5f:c1:41:a1:08:91:0f:2d:1a:05:eb:36:ab: 6e:34:89:48:5f:d7:a4:6f:da:86:3e:07:a6:9d:43:59:67:11: 89:20:bb:88:98:48:14:d5:a8:a4:c9:af:d6:2e:2f:a5:64:61: 0d:b6:56:73:49:4b:8c:b8:3d:16:26:53:7b:22:9c:4e:10:5a: 42:8c:d3:5d:bf:36:6a:db:43:a6:f2:84:fb:73:3e:0c:8a:2a: c1:57:3b:9c:42:03:88:dc:2c:e7:99:fa:e1:57:8a:c7:dc:54: d1:05:b5:02:d4:39:f4:79:2e:31:a5:cc:24:6b:8d:33:a4:5d: 46:93:d3:c4:e6:4a:16:87:72:2b:4e:b8:2c:b0:4b:b3:cd:e0: a3:1d:5d:1e:9d:4e:09:5a:0f:97:2f:7a:bd:7f:00:69:57:ed: d2:b8:e1:9d:02:9b:82:b7:8f:da:ee:2a:2e:9e:55:ba:50:63: 9e:54:53:66:c3:23:fc:80:48:e0:8d:be:97:d2:6e:f5:ac:69: 01:6e:04:14:45:19:7f:45:1b:54:19:a7:5d:f7:62:22:50:65: a2:87:c7:68:a7:24:42:07:e1:4f:21:72:e1:be:86:54:c7:3d: e0:49:13:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rDp7MAF7OzfWZKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1Yjcx MWFhMB4XDTI2MTAzMDAwMDgwOFoXDTI3MDEyODAxMDgwOFowLzEtMCsGA1UEAxMk MmNjZTNkMWQtMmEyYi00NzA4LWFlNTAtZmYzNDNmNjY1ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1fF1TL6942CjWAvxbl07oFVqrJS9+kAqmk1 QoP446QFntNw4GafKSnJwdHEHw/XQgHTqOBLTjPgCZFlbsElfUjEm/KM2MRhJP/F 1EXAg/+fD4trJuPqNZcU2rgL10jEmvBEZKVjYcFhQ+8D1EtpbYYw0DB1TMeKt8zB UAG2an3VDq8tLcnwjvps04k2QaLXmrr2/SNMCBRDFppsKFwRWp4yua72OSOYF7T/ qDhS/j53Pk4UkrDD15676LJjxmyedmbZYfDQY0MC2GOkzWObNEo9PJcs4UhZutZ+ sfC10wdHexhOQVkeM6Lle2+4p4Zr7l+/W6IK9yt++lyjkaZL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCX3eRmMmEyvTyoHVhG/3RMAQUe/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZTQy Y2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvOGI5Y2Y1MzItZWY3Yy0z NDA2LWFjNGItNTEwZTkwYWJjMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmU0MmNjN2ItMWZhNC00YmQ1LWFi ZjYtNTI1Zjk1YjcxMWFhL2JlNDJjYzdiLTFmYTQtNGJkNS1hYmY2LTUyNWY5NWI3 MTFhYS5jcmwwHwYDVR0jBBgwFoAU/a2C8vCI8NkxB6tCAi2hcAA4VDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVm OTViNzExYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJ+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQF2VqwyzkHahut8ayUilpWhFEqE2tYX8FBoQiRDy0aBes2q240iUhf 16Rv2oY+B6adQ1lnEYkgu4iYSBTVqKTJr9YuL6VkYQ22VnNJS4y4PRYmU3sinE4Q WkKM012/NmrbQ6byhPtzPgyKKsFXO5xCA4jcLOeZ+uFXisfcVNEFtQLUOfR5LjGl zCRrjTOkXUaT08TmShaHcitOuCywS7PN4KMdXR6dTglaD5cver1/AGlX7dK44Z0C m4K3j9ruKi6eVbpQY55UU2bDI/yASOCNvpfSbvWsaQFuBBRFGX9FG1QZp133YiJQ ZaKHx2inJEIH4U8hcuG+hlTHPeBJE4g= -----END CERTIFICATE-----Generated at Sun Nov 1 08:30:46 2026 by rpki-client