$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa File: dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json) Hash identifier: NT0XU2B28n/VDNyyAmWrbjN0PfNIeDUTJhs1ABNZw+c= Subject key identifier: CF:EC:A2:90:11:30:34:85:ED:3A:18:27:0A:87:E6:EA:7B:1A:29:DD Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584F698D82A5477DBADA05C9E700 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 15224 IP address blocks: 63.140.32.0/19 maxlen: 24 66.117.16.0/20 maxlen: 24 66.235.128.0/19 maxlen: 24 172.82.192.0/18 maxlen: 24 192.28.144.0/20 maxlen: 24 192.28.160.0/19 maxlen: 24 192.161.136.0/21 maxlen: 24 192.243.224.0/19 maxlen: 24 199.15.212.0/22 maxlen: 24 208.67.40.0/22 maxlen: 24 208.77.136.0/22 maxlen: 24 208.91.168.0/21 maxlen: 24 2620:113:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:82:a5:47:7d:ba:da:05:c9:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=b6cc015b-7962-4293-a492-da7afecf2488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:75:e2:82:b4:5c:d1:42:da:d4:ef:9f:29: 7f:cb:0b:63:24:9f:42:4a:56:48:5f:2f:df:bd:d7: 3e:ae:89:cb:c1:ae:0e:52:00:76:64:aa:2a:f6:10: cb:73:4a:ca:47:7f:a7:85:61:29:83:f3:83:9d:c2: 5d:c5:69:a5:ab:2e:c3:de:22:5a:8e:82:8a:01:6e: 66:73:b7:83:82:93:b1:ac:0f:af:5f:2d:9a:81:b2: ad:7e:32:d6:49:36:44:e7:97:f2:cb:e4:36:47:2a: 1c:a9:d3:48:35:b6:84:bd:23:73:ba:11:09:9d:93: 1c:e1:09:d5:ab:f2:9c:1b:61:37:6c:b0:58:fd:5c: 4e:93:12:83:51:32:ca:e5:9e:b2:9d:fc:1e:45:15: 53:62:17:1c:be:a5:a8:c9:7c:5e:7a:ca:91:76:f5: 8e:02:e2:d1:55:5b:5b:12:2d:0b:91:63:ae:77:4e: 77:08:0f:18:fd:d7:58:87:b0:12:34:ff:ef:81:07: 0e:04:ee:fc:e0:71:0b:b5:cc:f4:cb:c0:2a:31:1a: d3:e3:e2:82:0b:79:b9:9b:b4:9e:be:0a:73:41:2d: 81:ee:5e:6e:ea:b5:71:bb:ef:a9:53:d2:8c:d6:7f: be:cc:8d:62:04:7e:19:0a:3e:a8:35:10:2c:46:44: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EC:A2:90:11:30:34:85:ED:3A:18:27:0A:87:E6:EA:7B:1A:29:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 63.140.32.0/19 66.117.16.0/20 66.235.128.0/19 172.82.192.0/18 192.28.144.0-192.28.191.255 192.161.136.0/21 192.243.224.0/19 199.15.212.0/22 208.67.40.0/22 208.77.136.0/22 208.91.168.0/21 IPv6: 2620:113:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:67:80:76:a3:3e:bd:c4:f2:04:40:c7:b6:82:fe:53:98:d9: 4e:e7:6b:4e:a6:01:ab:60:03:57:5f:60:86:9c:24:1f:aa:88: 8e:b1:0a:c8:3b:8f:68:f9:89:67:e0:da:33:24:1e:5c:63:22: 5f:72:cc:9c:93:6e:6f:5c:f2:e8:24:3b:d8:77:1d:92:cd:70: 84:b0:19:82:68:4c:83:30:26:2e:64:43:34:5f:2a:4c:f9:f6: a0:e8:22:22:8e:d1:b5:9c:90:9b:9e:55:4f:1d:99:fc:62:5a: 2d:e3:42:3a:e6:31:4d:8d:d9:1b:92:36:f1:f6:f1:0b:ab:1a: 3c:2f:9d:7b:54:3b:fb:52:20:37:bd:d8:87:94:45:4c:26:84: 99:a8:53:08:7f:76:09:86:a6:b6:6a:47:38:2d:32:00:67:86: 60:7e:2b:9d:0f:2a:3c:14:63:30:f5:d0:ad:dc:d3:04:14:f7: 5a:19:c6:a2:a3:6a:c4:7d:b2:90:2a:de:db:68:8d:8e:8d:65: 5c:8b:f9:20:69:ec:19:8c:0b:77:79:96:af:18:5f:07:59:44: ab:19:97:fe:cf:54:ec:72:7d:e1:cf:de:83:85:11:84:98:e8: f3:8f:e6:a2:c7:e6:fc:e9:1b:ae:8f:2b:23:60:7a:6c:84:24: ba:d6:7b:f0 -----BEGIN CERTIFICATE----- MIIGmDCCBYCgAwIBAgIUAQ0Mn0MoWE9pjYKlR3262gXJ5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YjZjYzAxNWItNzk2Mi00MjkzLWE0OTItZGE3YWZlY2YyNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDd14oK0XNFC2tTvnyl/ywtjJJ9CSlZIXy/f vdc+ronLwa4OUgB2ZKoq9hDLc0rKR3+nhWEpg/ODncJdxWmlqy7D3iJajoKKAW5m c7eDgpOxrA+vXy2agbKtfjLWSTZE55fyy+Q2RyocqdNINbaEvSNzuhEJnZMc4QnV q/KcG2E3bLBY/VxOkxKDUTLK5Z6ynfweRRVTYhccvqWoyXxeesqRdvWOAuLRVVtb Ei0LkWOud053CA8Y/ddYh7ASNP/vgQcOBO784HELtcz0y8AqMRrT4+KCC3m5m7Se vgpzQS2B7l5u6rVxu++pU9KM1n++zI1iBH4ZCj6oNRAsRkQbgwIDAQABo4IDqjCC A6YwHQYDVR0OBBYEFM/sopARMDSF7ToYJwqH5up7GindMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZGFkNTI2NGYtMzU5YS0z M2YzLWJjMDMtOTU3MjUzZjE1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMHQGCCsGAQUFBwEHAQH/BGUwYzBQBAIAATBKAwQFP4wgAwQE QnUQAwQFQuuAAwQGrFLAMAwDBATAHJADBAbAHIADBAPAoYgDBAXA8+ADBALHD9QD BALQQygDBALQTYgDBAPQW6gwDwQCAAIwCQMHBCYgARMQADBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfZ4B2 oz69xPIEQMe2gv5TmNlO52tOpgGrYANXX2CGnCQfqoiOsQrIO49o+Yln4NozJB5c YyJfcsyck25vXPLoJDvYdx2SzXCEsBmCaEyDMCYuZEM0XypM+fag6CIijtG1nJCb nlVPHZn8Ylot40I65jFNjdkbkjbx9vELqxo8L517VDv7UiA3vdiHlEVMJoSZqFMI f3YJhqa2akc4LTIAZ4ZgfiudDyo8FGMw9dCt3NMEFPdaGcaio2rEfbKQKt7baI2O jWVci/kgaewZjAt3eZavGF8HWUSrGZf+z1Tscn3hz96DhRGEmOjzj+aix+b86Ruu jysjYHpshCS61nvw -----END CERTIFICATE-----Generated at Sun Oct 25 15:52:22 2026 by rpki-client