$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be1aaa13-15f1-3604-8e29-1f97b5872c49.roa File: be1aaa13-15f1-3604-8e29-1f97b5872c49.roa (raw, json) Hash identifier: d3A7mRVJjXsR26+Fswg+5gXUSAOQjE9fi22IvuPH+EE= Subject key identifier: 40:E9:97:63:03:2A:86:03:1C:36:D1:C7:57:AB:4D:ED:90:77:E9:12 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F7AC2F37D85F066D633B07C48 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be1aaa13-15f1-3604-8e29-1f97b5872c49.roa Signing time: Mon 12 Oct 2026 16:56:52 +0000 ROA not before: Mon 12 Oct 2026 16:56:52 +0000 ROA not after: Mon 04 Jan 2027 16:12:28 +0000 asID: 133120 IP address blocks: 149.18.56.0/22 maxlen: 22 149.18.56.0/24 maxlen: 24 149.18.57.0/24 maxlen: 24 149.57.48.0/24 maxlen: 24 149.57.49.0/24 maxlen: 24 149.57.50.0/24 maxlen: 24 149.57.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:c2:f3:7d:85:f0:66:d6:33:b0:7c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 12 16:56:52 2026 GMT Not After : Jan 4 16:12:28 2027 GMT Subject: CN=5ec978bb-352f-4366-b77d-3b9d0fca016a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:2a:8f:b7:05:50:b8:ba:88:9e:c5:2d:2b: fa:e6:41:a4:09:bc:c7:64:47:2c:6d:7e:5b:cb:28: 9e:e7:2a:91:f7:7f:1e:5b:8a:15:83:fb:47:c2:04: 68:fd:36:98:59:31:25:c5:82:76:98:18:de:9f:c0: 5b:12:2c:9d:3a:09:4a:c7:b7:98:c6:51:99:1e:b4: ad:73:57:7a:b2:b8:fe:33:02:38:cb:4d:2f:14:75: 67:95:57:48:6b:ef:41:13:01:84:84:27:6f:7e:8e: f4:c6:13:b9:7a:0a:55:fa:42:62:60:9e:9e:59:51: e2:8e:e6:e2:ac:99:9f:88:11:1f:60:65:bb:ef:b3: 67:23:37:e0:3a:ec:9d:c0:27:38:ef:14:07:ea:15: b1:46:eb:31:a3:c0:de:20:ed:ca:60:9f:85:4c:bc: c0:86:de:55:ed:31:1e:a1:ac:ca:87:a0:67:12:71: 59:19:c3:0b:76:48:17:29:0e:69:39:02:b1:96:4d: 09:31:a8:8d:97:41:89:df:f6:6e:b5:fe:cc:a1:c5: 2a:99:39:c6:e4:8f:43:13:40:9e:5b:9c:7e:ef:52: ae:e8:71:e2:15:63:36:06:73:c5:e8:75:ef:22:7a: c7:bd:da:57:b0:70:b6:be:8e:d1:cb:bb:a3:a5:f5: ec:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:97:63:03:2A:86:03:1C:36:D1:C7:57:AB:4D:ED:90:77:E9:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/be1aaa13-15f1-3604-8e29-1f97b5872c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.18.56.0/22 149.57.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:78:1e:cd:5f:f6:93:56:cf:4f:24:79:3a:25:46:98:c1:cf: f0:46:2b:47:38:40:25:cd:77:01:2c:99:25:96:cc:db:4b:2b: 65:26:81:ef:71:23:63:85:0b:9c:1b:a3:21:1d:ed:d3:83:38: 92:5b:d1:a6:92:38:c5:04:b6:10:62:22:ce:ff:91:31:54:08: 4a:5a:b9:a6:05:e7:8b:24:a7:a9:24:6f:c1:c8:e8:52:dc:97: 43:c2:f9:1f:86:9e:5d:51:0d:d1:f4:c8:d8:87:94:c4:a3:6e: 4b:0c:2a:ec:64:af:bd:b0:2c:b0:27:a2:8d:98:26:07:a4:f2: 88:6f:c1:db:9d:3f:53:9d:fd:0a:7b:4a:92:00:bd:40:0f:ce: 79:0b:f1:ea:2b:2d:aa:97:30:bb:f4:17:11:66:bd:24:ac:01: e6:0d:36:a7:51:fd:a2:e3:f2:b4:ea:02:db:64:3a:e4:7a:ac: 1c:06:76:16:fb:90:62:1b:6d:9b:70:91:f0:21:6e:28:43:ad: cc:92:66:4e:6f:27:af:69:f5:18:b2:44:2b:65:c6:b2:cb:3a: ad:17:a0:9f:3b:99:9f:24:40:2e:13:be:25:ab:66:f6:a9:67: 25:95:1e:43:ec:a8:3e:11:f6:d1:a1:82:5f:11:cb:67:12:e2: 74:4d:67:dd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE96wvN9hfBm1jOwfEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAxMjE2NTY1MloXDTI3MDEwNDE2MTIyOFowLzEtMCsGA1UEAxMk NWVjOTc4YmItMzUyZi00MzY2LWI3N2QtM2I5ZDBmY2EwMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBgqj7cFULi6iJ7FLSv65kGkCbzHZEcsbX5b yyie5yqR938eW4oVg/tHwgRo/TaYWTElxYJ2mBjen8BbEiydOglKx7eYxlGZHrSt c1d6srj+MwI4y00vFHVnlVdIa+9BEwGEhCdvfo70xhO5egpV+kJiYJ6eWVHijubi rJmfiBEfYGW777NnIzfgOuydwCc47xQH6hWxRusxo8DeIO3KYJ+FTLzAht5V7TEe oazKh6BnEnFZGcMLdkgXKQ5pOQKxlk0JMaiNl0GJ3/Zutf7MocUqmTnG5I9DE0Ce W5x+71Ku6HHiFWM2BnPF6HXvInrHvdpXsHC2vo7Ry7ujpfXsgQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEDpl2MDKoYDHDbRx1erTe2Qd+kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYmUxYWFhMTMtMTVmMS0z NjA0LThlMjktMWY5N2I1ODcyYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClRI4AwQC lTkwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACh4Hs1f9pNWz08keTolRpjBz/BGK0c4QCXNdwEsmSWWzNtL K2Umge9xI2OFC5wboyEd7dODOJJb0aaSOMUEthBiIs7/kTFUCEpauaYF54skp6kk b8HI6FLcl0PC+R+Gnl1RDdH0yNiHlMSjbksMKuxkr72wLLAnoo2YJgek8ohvwdud P1Od/Qp7SpIAvUAPznkL8eorLaqXMLv0FxFmvSSsAeYNNqdR/aLj8rTqAttkOuR6 rBwGdhb7kGIbbZtwkfAhbihDrcySZk5vJ69p9RiyRCtlxrLLOq0XoJ87mZ8kQC4T viWrZvapZyWVHkPsqD4R9tGhgl8Ry2cS4nRNZ90= -----END CERTIFICATE-----Generated at Sun Oct 25 12:03:42 2026 by rpki-client