$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa File: dad5264f-359a-33f3-bc03-957253f1506e.roa (raw, json) Hash identifier: ivWCR3op+e2Mx6YlkIeQF5KqN+nfiY7oM1HCNFRnscw= Subject key identifier: 5E:78:BD:D3:C6:67:AF:97:9F:D3:1C:26:22:FA:96:75:3E:88:C3:8D Certificate issuer: /CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Certificate serial: 010D0C9F4328584AA42B85CEC32BD80E31C40F00 Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 15224 IP address blocks: 63.140.32.0/19 maxlen: 24 66.117.16.0/20 maxlen: 24 66.235.128.0/19 maxlen: 24 172.82.192.0/18 maxlen: 24 192.161.136.0/21 maxlen: 24 192.243.224.0/19 maxlen: 24 208.67.40.0/22 maxlen: 24 208.77.136.0/22 maxlen: 24 208.91.168.0/21 maxlen: 24 2620:113:1000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:85:ce:c3:2b:d8:0e:31:c4:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d5bc5e8a-9d7a-474d-8c92-b7f8622bd8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:20:cc:2d:e7:af:29:32:db:26:29:0f:dd: 80:b3:df:c7:a8:bc:ac:69:81:bd:83:fa:98:9e:8c: ba:39:16:5f:17:aa:17:41:f8:bc:75:33:ff:80:00: cd:e5:59:f4:ef:c1:bb:cc:d4:a7:24:9b:c1:d0:bf: 2f:78:c0:27:37:f8:40:9c:4d:1f:82:e6:24:40:d5: 05:20:25:41:1c:2e:13:34:db:1d:a1:21:9e:fa:c9: 20:83:86:d8:74:7e:64:2f:cd:0d:20:7a:d6:ff:7f: be:82:5e:28:29:55:38:df:8e:8b:27:4f:d1:93:91: 3b:e9:99:69:1e:81:c8:c5:31:de:da:ec:bc:94:6b: 17:71:5f:6a:d4:28:2a:54:a9:1a:47:70:5f:c4:86: f1:e0:17:05:c3:07:38:57:87:a4:ef:47:44:bc:9f: a2:41:35:f6:56:10:5d:58:ab:38:4a:97:63:da:85: ca:0a:bc:2f:a2:a4:8e:25:00:65:d4:12:f8:39:f6: f9:98:15:e6:39:4d:80:57:4a:47:44:2f:96:c5:21: 4a:3f:d0:2f:af:ea:41:d4:16:65:8e:af:9d:0a:1a: b4:06:3a:a6:e8:ad:f2:b4:90:1c:d5:cd:c3:c5:b3: 47:48:2e:7d:e8:0e:bc:be:34:96:20:5f:50:64:02: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:78:BD:D3:C6:67:AF:97:9F:D3:1C:26:22:FA:96:75:3E:88:C3:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/dad5264f-359a-33f3-bc03-957253f1506e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl X509v3 Authority Key Identifier: keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer sbgp-ipAddrBlock: critical IPv4: 63.140.32.0/19 66.117.16.0/20 66.235.128.0/19 172.82.192.0/18 192.161.136.0/21 192.243.224.0/19 208.67.40.0/22 208.77.136.0/22 208.91.168.0/21 IPv6: 2620:113:1000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:72:bb:d3:45:1a:df:15:a4:4f:76:d2:57:44:21:41:71:a3: 26:e3:1b:b7:db:d8:19:2d:73:75:56:38:79:78:8a:28:5e:d6: 22:88:44:31:c7:36:b7:91:2a:d9:e2:98:62:3d:56:40:77:9c: e9:af:4f:4e:d2:4b:2d:47:28:86:54:dc:71:31:9b:03:20:b8: 8c:1f:41:97:fc:01:4f:da:d9:b6:d0:98:79:58:31:6d:46:3f: a0:7f:5f:30:bf:62:57:4d:15:c4:38:7c:78:3d:f0:87:69:fe: c3:6f:b3:e8:53:2f:26:31:12:d8:f7:4f:22:6b:ab:9e:45:0a: 01:c7:bb:99:f3:7e:4d:90:72:a9:32:e8:29:b4:44:d3:26:46: 3e:55:47:67:62:3c:24:81:40:f1:1c:10:3c:76:27:28:b0:d1: 49:fd:ae:ac:c3:01:8c:6b:2b:62:2b:13:ba:6b:5f:b5:a7:36: 09:af:fa:41:fa:c8:a0:10:08:f4:58:c3:44:e1:cc:d0:50:2a: 52:0c:b0:58:e3:01:f6:c8:0a:9b:b7:31:9b:e1:93:dc:b9:18: 6d:1c:f3:7d:ee:33:f6:9c:8a:5c:76:41:51:5f:31:9d:ac:60: 5e:44:41:d9:1f:62:e7:0e:f3:cf:c8:52:e8:a4:f2:f0:92:85: 16:22:07:47 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUAQ0Mn0MoWEqkK4XOwyvYDjHEDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5 ZWE5MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDViYzVlOGEtOWQ3YS00NzRkLThjOTItYjdmODYyMmJkOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxggzC3nryky2yYpD92As9/HqLysaYG9g/qY noy6ORZfF6oXQfi8dTP/gADN5Vn078G7zNSnJJvB0L8veMAnN/hAnE0fguYkQNUF ICVBHC4TNNsdoSGe+skgg4bYdH5kL80NIHrW/3++gl4oKVU4346LJ0/Rk5E76Zlp HoHIxTHe2uy8lGsXcV9q1CgqVKkaR3BfxIbx4BcFwwc4V4ek70dEvJ+iQTX2VhBd WKs4Spdj2oXKCrwvoqSOJQBl1BL4Ofb5mBXmOU2AV0pHRC+WxSFKP9Avr+pB1BZl jq+dChq0Bjqm6K3ytJAc1c3DxbNHSC596A68vjSWIF9QZAJS2wIDAQABo4IDljCC A5IwHQYDVR0OBBYEFF54vdPGZ6+Xn9McJiL6lnU+iMONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvZGFkNTI2NGYtMzU5YS0z M2YzLWJjMDMtOTU3MjUzZjE1MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz MjkyMTllYTkuY2VyMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQFP4wgAwQE QnUQAwQFQuuAAwQGrFLAAwQDwKGIAwQFwPPgAwQC0EMoAwQC0E2IAwQD0FuoMA8E AgACMAkDBwQmIAETEAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa3K700Ua3xWkT3bSV0QhQXGjJuMbt9vY GS1zdVY4eXiKKF7WIohEMcc2t5Eq2eKYYj1WQHec6a9PTtJLLUcohlTccTGbAyC4 jB9Bl/wBT9rZttCYeVgxbUY/oH9fML9iV00VxDh8eD3wh2n+w2+z6FMvJjES2PdP ImurnkUKAce7mfN+TZByqTLoKbRE0yZGPlVHZ2I8JIFA8RwQPHYnKLDRSf2urMMB jGsrYisTumtftac2Ca/6QfrIoBAI9FjDROHM0FAqUgywWOMB9sgKm7cxm+GT3LkY bRzzfe4z9pyKXHZBUV8xnaxgXkRB2R9i5w7zz8hS6KTy8JKFFiIHRw== -----END CERTIFICATE-----Generated at Mon Aug 4 22:26:33 2025 by rpki-client