$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/c498a631-fb68-3688-b03b-b6c469fc67d9.roa File: c498a631-fb68-3688-b03b-b6c469fc67d9.roa (raw, json) Hash identifier: xTeYrEZtmJJE4LWGfT+edQGDoGEGgR9JMabBDXT2uCw= Subject key identifier: A4:C8:87:8E:E1:02:85:AD:7A:FB:66:6C:18:E5:B6:88:5E:87:D6:6D Certificate issuer: /CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Certificate serial: 010D0C9F4328584FAB1091B64B325D1FEB85D380 Authority key identifier: FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/c498a631-fb68-3688-b03b-b6c469fc67d9.roa Signing time: Fri 30 Oct 2026 00:12:04 +0000 ROA not before: Fri 30 Oct 2026 00:12:04 +0000 ROA not after: Thu 28 Jan 2027 01:12:04 +0000 asID: 13860 IP address blocks: 148.159.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:10:91:b6:4b:32:5d:1f:eb:85:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be42cc7b-1fa4-4bd5-abf6-525f95b711aa Validity Not Before: Oct 30 00:12:04 2026 GMT Not After : Jan 28 01:12:04 2027 GMT Subject: CN=cb7f8fb7-e673-4684-acf6-756130e19ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:00:f0:65:37:9f:ce:a4:a2:9c:e0:9c:e9:4d: 8b:62:95:61:d4:5f:07:a9:e3:51:53:95:df:f0:1a: 23:31:e2:7a:d3:fa:6e:18:30:18:1a:e2:f8:71:ce: 0f:9f:73:b3:4d:a5:fc:b9:22:b3:8f:2b:7e:81:84: 35:f0:c9:e6:78:9d:11:25:5b:d4:92:80:66:96:f8: 75:4d:d8:02:c7:49:e6:ea:df:81:5d:bb:fd:8c:ca: 9c:04:a6:91:cc:3a:8f:dc:2b:81:c2:1b:b2:7a:7e: 44:6e:9c:16:9a:72:87:55:f9:ee:e9:21:73:99:b6: 8f:d4:fc:08:d8:f9:2f:bb:c2:41:d2:f7:33:3f:8a: f4:0c:ee:d9:82:04:6a:07:3a:38:d1:b4:3d:8c:a5: b6:97:4b:50:a1:0a:ae:05:fe:f8:9d:85:2d:62:2c: c9:be:df:8a:c6:20:6b:76:b6:fd:db:2d:22:1e:b4: 0e:a0:c3:c8:03:48:23:11:5e:9e:bc:84:0a:b8:eb: 15:47:11:4e:ff:b0:6f:0b:70:9a:e9:47:9f:7b:48: 83:b6:fe:77:37:35:f0:d0:28:6f:db:f3:c3:f1:be: fd:a0:28:6a:c7:5d:29:8f:65:38:58:fa:46:f6:2b: cb:da:b4:fc:6b:df:b2:78:5b:86:83:87:84:80:6e: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:87:8E:E1:02:85:AD:7A:FB:66:6C:18:E5:B6:88:5E:87:D6:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/c498a631-fb68-3688-b03b-b6c469fc67d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.crl X509v3 Authority Key Identifier: keyid:FD:AD:82:F2:F0:88:F0:D9:31:07:AB:42:02:2D:A1:70:00:38:54:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/be42cc7b-1fa4-4bd5-abf6-525f95b711aa.cer sbgp-ipAddrBlock: critical IPv4: 148.159.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b9:12:28:5b:9e:4f:76:1e:03:57:c9:0f:6e:bd:68:f2:13: 1a:2f:ec:8d:b0:bb:92:12:18:e5:28:52:2b:b6:69:b8:52:a0: 59:b1:59:b6:1e:4b:51:db:28:bb:0c:b4:f9:a1:65:49:08:d3: 77:a2:17:4d:0a:f0:72:75:3d:d6:30:bd:28:1f:53:d1:5d:62: 1d:21:fd:11:ac:cd:fb:c8:7d:d6:7e:99:76:7b:65:34:89:69: 4a:a8:fc:da:95:74:05:2d:e4:78:aa:ed:2a:c3:e2:cd:80:25: f7:8b:ca:6d:8a:a7:cb:5a:50:60:87:20:0b:03:53:61:1e:5f: 3f:d0:a8:e2:a2:73:c7:34:7f:43:02:d9:4e:31:97:5f:f6:8d: 5a:c3:42:b0:b1:4c:02:72:86:5f:fb:58:9e:be:99:f1:83:97: 7a:3f:24:8d:bc:05:27:c2:5a:65:e0:e9:e9:1d:e4:7e:e5:e8: a2:da:e7:2d:c6:f6:26:4b:cd:45:fa:64:fc:9d:fa:38:6f:4b: d1:b0:3d:40:e7:71:3e:f4:48:dc:55:76:40:c1:80:06:7f:cb: 5a:e0:34:0a:84:53:a9:0b:dc:d3:f6:e5:24:45:52:f6:a2:c4: 75:71:39:7a:e2:bc:fa:00:df:39:bc:8d:41:49:25:0e:48:c7: a8:e5:bd:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rEJG2SzJdH+uF04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU0MmNjN2ItMWZhNC00YmQ1LWFiZjYtNTI1Zjk1Yjcx MWFhMB4XDTI2MTAzMDAwMTIwNFoXDTI3MDEyODAxMTIwNFowLzEtMCsGA1UEAxMk Y2I3ZjhmYjctZTY3My00Njg0LWFjZjYtNzU2MTMwZTE5YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwDwZTefzqSinOCc6U2LYpVh1F8HqeNRU5Xf 8BojMeJ60/puGDAYGuL4cc4Pn3OzTaX8uSKzjyt+gYQ18MnmeJ0RJVvUkoBmlvh1 TdgCx0nm6t+BXbv9jMqcBKaRzDqP3CuBwhuyen5EbpwWmnKHVfnu6SFzmbaP1PwI 2Pkvu8JB0vczP4r0DO7ZggRqBzo40bQ9jKW2l0tQoQquBf74nYUtYizJvt+KxiBr drb92y0iHrQOoMPIA0gjEV6evIQKuOsVRxFO/7BvC3Ca6Uefe0iDtv53NzXw0Chv 2/PD8b79oChqx10pj2U4WPpG9ivL2rT8a9+yeFuGg4eEgG4r8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTIh47hAoWtevtmbBjltoheh9ZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZTQy Y2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVmOTViNzExYWEvYzQ5OGE2MzEtZmI2OC0z Njg4LWIwM2ItYjZjNDY5ZmM2N2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmU0MmNjN2ItMWZhNC00YmQ1LWFi ZjYtNTI1Zjk1YjcxMWFhL2JlNDJjYzdiLTFmYTQtNGJkNS1hYmY2LTUyNWY5NWI3 MTFhYS5jcmwwHwYDVR0jBBgwFoAU/a2C8vCI8NkxB6tCAi2hcAA4VDQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZTQyY2M3Yi0xZmE0LTRiZDUtYWJmNi01MjVm OTViNzExYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJ9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACi5Eihbnk92HgNXyQ9uvWjyExov7I2wu5ISGOUoUiu2abhSoFmxWbYe S1HbKLsMtPmhZUkI03eiF00K8HJ1PdYwvSgfU9FdYh0h/RGszfvIfdZ+mXZ7ZTSJ aUqo/NqVdAUt5Hiq7SrD4s2AJfeLym2Kp8taUGCHIAsDU2EeXz/QqOKic8c0f0MC 2U4xl1/2jVrDQrCxTAJyhl/7WJ6+mfGDl3o/JI28BSfCWmXg6ekd5H7l6KLa5y3G 9iZLzUX6ZPyd+jhvS9GwPUDncT70SNxVdkDBgAZ/y1rgNAqEU6kL3NP25SRFUvai xHVxOXrivPoA3zm8jUFJJQ5Ix6jlvfw= -----END CERTIFICATE-----Generated at Thu Nov 5 13:00:57 2026 by rpki-client