$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa File: dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json) Hash identifier: 3rlGYfiB6VCE/jQ7urGY2krm9s9KAZ+TW5KCJYl02ng= Subject key identifier: A9:A5:9C:B7:CA:32:C1:00:64:D7:17:63:5B:C6:EA:74:73:EA:8F:44 Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584D44FA402F4C7DC35F31B727C0 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 15224 IP address blocks: 63.140.32.0/19 maxlen: 24 66.117.16.0/20 maxlen: 24 66.235.128.0/19 maxlen: 24 172.82.192.0/18 maxlen: 24 192.161.136.0/21 maxlen: 24 192.243.224.0/19 maxlen: 24 208.67.40.0/22 maxlen: 24 208.77.136.0/22 maxlen: 24 208.91.168.0/21 maxlen: 24 2620:113:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:40:2f:4c:7d:c3:5f:31:b7:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=541eaa51-3051-41f3-9277-f600fad9a1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:32:d9:63:06:bc:50:c6:32:01:a7:0d:f8: 28:c7:86:5b:7d:63:02:34:91:f4:b2:dd:5c:00:7f: aa:ae:5e:01:89:78:b3:b0:4e:42:74:d1:6d:87:cd: e5:52:0d:25:15:75:2a:39:76:a5:76:33:b3:0a:01: 94:6f:d1:26:24:9e:23:84:fa:06:2b:ca:23:f2:ac: 93:37:78:d8:5a:f3:c1:d4:8a:99:91:5f:51:e8:87: 48:43:00:6f:6a:3b:93:88:0f:e4:fc:46:ce:5a:40: c3:5d:1d:c6:48:9c:9d:7e:fa:57:ef:06:dd:ec:df: 3b:89:1d:17:de:55:87:f8:67:b9:7c:01:5e:90:db: 5a:f3:33:21:70:13:c0:fb:d0:3a:6e:10:85:ec:0e: 46:fb:b3:af:0e:18:70:3d:1d:10:d3:c1:c4:dc:39: 76:a3:a1:44:6a:03:dc:a1:7c:41:77:25:10:9f:2c: b7:eb:a4:11:0c:b7:6a:44:93:87:bd:dc:1e:61:2d: 32:0e:d7:97:32:49:92:95:15:51:90:27:69:e3:ba: 48:0d:98:73:f4:f4:0b:57:58:3d:2a:09:85:0b:e2: f4:8a:48:c0:ef:b6:93:d2:de:67:8f:1e:83:40:92: b7:f9:e1:58:32:69:82:ed:10:ff:7c:7d:23:86:4b: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:9C:B7:CA:32:C1:00:64:D7:17:63:5B:C6:EA:74:73:EA:8F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 63.140.32.0/19 66.117.16.0/20 66.235.128.0/19 172.82.192.0/18 192.161.136.0/21 192.243.224.0/19 208.67.40.0/22 208.77.136.0/22 208.91.168.0/21 IPv6: 2620:113:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:cf:38:fd:a8:e1:c3:25:fb:83:be:73:e3:a2:d6:af:87:43: 22:10:60:28:f1:0f:50:51:47:2f:2f:db:2b:23:d1:de:30:ca: 0d:0e:c3:c4:48:a5:cf:37:40:57:7a:61:61:6c:c5:06:e8:99: 4d:d0:85:44:c6:7c:5e:9c:50:c5:3a:46:3c:a2:d7:a7:8a:53: 45:ae:63:70:ec:39:b8:f7:26:4d:7e:04:41:26:f4:75:40:15: 87:a9:b1:17:3f:f1:2b:75:90:e3:07:93:fc:38:4d:00:d4:5d: 9f:1b:b2:16:75:5a:9e:2b:90:2b:68:32:a8:ab:04:37:95:c1: c4:5b:3f:90:f7:4e:11:fe:86:27:01:25:ad:8c:79:37:96:5f: 30:bf:7b:4c:88:34:50:5f:b8:7a:8a:c9:09:06:8a:78:d3:cf: b2:ef:58:4c:25:ea:62:2e:ad:9a:23:2a:24:dd:54:14:bc:0a: a6:8e:65:09:b4:7f:1a:b5:3a:78:a2:fa:01:be:6a:2d:6a:48: 59:a8:b6:b1:69:5f:cb:7e:12:f8:9e:5f:10:28:17:6a:ac:66: 6f:1e:fd:b9:42:1d:d1:26:b5:1d:64:2c:48:b5:e1:17:80:ff: a4:b2:be:dd:d0:f9:65:4b:f8:c8:2d:15:19:12:1f:89:f4:f8: 15:f6:9b:58 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUAQ0Mn0MoWE1E+kAvTH3DXzG3J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NTQxZWFhNTEtMzA1MS00MWYzLTkyNzctZjYwMGZhZDlhMWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5oy2WMGvFDGMgGnDfgox4ZbfWMCNJH0st1c AH+qrl4BiXizsE5CdNFth83lUg0lFXUqOXaldjOzCgGUb9EmJJ4jhPoGK8oj8qyT N3jYWvPB1IqZkV9R6IdIQwBvajuTiA/k/EbOWkDDXR3GSJydfvpX7wbd7N87iR0X 3lWH+Ge5fAFekNta8zMhcBPA+9A6bhCF7A5G+7OvDhhwPR0Q08HE3Dl2o6FEagPc oXxBdyUQnyy366QRDLdqRJOHvdweYS0yDteXMkmSlRVRkCdp47pIDZhz9PQLV1g9 KgmFC+L0ikjA77aT0t5njx6DQJK3+eFYMmmC7RD/fH0jhktk0QIDAQABo4IDljCC A5IwHQYDVR0OBBYEFKmlnLfKMsEAZNcXY1vG6nRz6o9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZGFkNTI2NGYtMzU5YS0z M2YzLWJjMDMtOTU3MjUzZjE1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQFP4wgAwQE QnUQAwQFQuuAAwQGrFLAAwQDwKGIAwQFwPPgAwQC0EMoAwQC0E2IAwQD0FuoMA8E AgACMAkDBwQmIAETEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAms84/ajhwyX7g75z46LWr4dDIhBgKPEP UFFHLy/bKyPR3jDKDQ7DxEilzzdAV3phYWzFBuiZTdCFRMZ8XpxQxTpGPKLXp4pT Ra5jcOw5uPcmTX4EQSb0dUAVh6mxFz/xK3WQ4weT/DhNANRdnxuyFnVaniuQK2gy qKsEN5XBxFs/kPdOEf6GJwElrYx5N5ZfML97TIg0UF+4eorJCQaKeNPPsu9YTCXq Yi6tmiMqJN1UFLwKpo5lCbR/GrU6eKL6Ab5qLWpIWai2sWlfy34S+J5fECgXaqxm bx79uUId0Sa1HWQsSLXhF4D/pLK+3dD5ZUv4yC0VGRIfifT4FfabWA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:08:55 2026 by rpki-client