$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa File: b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa (raw, json) Hash identifier: rSDe0coILaW/MzEiaJ37fIoA5JxHN2K0qUwKJUdG8a8= Subject key identifier: 31:32:4E:FB:97:B9:88:B2:64:8C:10:30:97:2C:04:AB:E8:60:1E:63 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F4328584BB2F7CE601543341366C5EA00 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 21887 IP address blocks: 23.105.192.0/19 maxlen: 24 23.106.128.0/19 maxlen: 24 23.252.96.0/20 maxlen: 24 45.62.96.0/19 maxlen: 24 45.78.0.0/18 maxlen: 24 66.112.208.0/20 maxlen: 24 67.209.176.0/20 maxlen: 24 74.121.148.0/22 maxlen: 24 104.128.80.0/20 maxlen: 24 104.160.32.0/20 maxlen: 24 104.194.64.0/19 maxlen: 24 104.224.128.0/18 maxlen: 24 107.182.176.0/20 maxlen: 24 138.128.192.0/19 maxlen: 24 144.168.56.0/21 maxlen: 24 162.211.224.0/21 maxlen: 24 192.243.112.0/20 maxlen: 24 198.35.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ce:60:15:43:34:13:66:c5:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a778f10e-bd3a-419f-b46c-e69884e4c46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:18:76:52:d9:55:60:4d:7e:e1:80:5e:65:a5: 86:89:12:d5:e5:d2:4f:b1:3a:e4:c6:de:ef:01:38: 0e:24:c3:9a:51:e7:b5:73:b9:77:d5:a8:39:4d:e2: 85:78:08:0b:82:07:40:d5:47:29:e3:f4:ff:d5:ac: f0:f7:75:5d:6f:e6:de:90:6c:54:46:c5:f6:66:85: e8:26:78:a2:4b:91:53:98:39:e5:11:f0:c2:8e:84: 3f:6e:21:7f:98:e4:a6:db:e2:b2:65:7c:89:00:57: 04:e7:4b:f8:f0:83:16:47:2f:87:34:05:47:bc:7c: 86:5f:11:5b:fa:1a:f6:32:a4:fd:8c:94:9d:ee:09: 48:1f:b6:2c:9f:4f:f0:d0:e7:6d:b4:d6:b6:1d:b8: 48:56:4b:90:18:97:59:b5:c0:5c:18:c5:99:48:97: e9:dc:29:f2:4e:79:99:60:70:b4:bf:a3:06:ee:8a: 8d:e6:5c:f6:88:15:5c:ca:e8:7a:c3:53:53:b4:eb: 5b:ee:55:b5:bd:db:d9:e5:39:32:c8:b9:39:39:ac: be:9d:46:99:d9:2a:f0:93:1f:92:fb:cf:85:e5:88: 06:c2:d2:9f:40:a4:3b:97:6f:64:72:be:42:dd:ca: 5c:ae:c6:f1:6c:39:b0:f8:30:26:10:ad:44:3c:75: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:32:4E:FB:97:B9:88:B2:64:8C:10:30:97:2C:04:AB:E8:60:1E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/b0ac23b0-5f3a-365d-9af6-27021a9154c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b5:26:72:f3:14:77:e3:56:27:38:77:66:59:10:cf:ac:d4: c8:c6:a8:df:25:b9:95:fd:71:0a:09:1b:58:56:01:14:e6:2f: e9:70:be:bd:7e:68:05:8b:a2:be:42:fa:54:a5:5f:5d:a5:20: 86:44:85:5b:3f:0f:a2:17:50:70:10:31:0e:6e:2c:ed:1a:db: 50:57:85:59:39:45:b9:9b:8b:53:04:9d:72:e4:c2:c1:5e:4f: 6b:52:28:32:c9:d7:5e:be:bf:b2:40:34:ab:0b:2a:20:dd:82: 15:cc:98:c9:42:42:94:ca:56:2b:86:99:b8:95:ab:59:1e:2f: 71:5d:ba:25:7b:85:77:07:b1:ad:f6:8f:fd:86:48:0c:3e:8a: 97:c6:e3:f2:bc:0f:21:dd:ff:fd:a2:33:a3:c4:01:f5:42:13: 86:c9:cc:99:f8:c2:6b:07:c1:e2:1d:6e:bd:44:1a:31:73:6b: a5:9c:72:29:82:1a:48:2f:b7:c9:04:65:88:7e:e8:d7:33:c4: 82:ee:29:ff:73:d9:42:f6:a4:b0:8c:12:4e:ff:d7:c4:5f:74: cf:2a:40:38:dc:dd:2d:ff:2a:d9:9c:04:9e:72:2c:bc:dd:69: c7:8b:36:ce:da:6e:3d:be:7c:ca:c7:97:2d:e5:19:86:cb:ec: b5:08:e1:05 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEuy985gFUM0E2bF6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTc3OGYxMGUtYmQzYS00MTlmLWI0NmMtZTY5ODg0ZTRjNDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBh2UtlVYE1+4YBeZaWGiRLV5dJPsTrkxt7v ATgOJMOaUee1c7l31ag5TeKFeAgLggdA1Ucp4/T/1azw93Vdb+bekGxURsX2ZoXo JniiS5FTmDnlEfDCjoQ/biF/mOSm2+KyZXyJAFcE50v48IMWRy+HNAVHvHyGXxFb +hr2MqT9jJSd7glIH7Ysn0/w0OdttNa2HbhIVkuQGJdZtcBcGMWZSJfp3CnyTnmZ YHC0v6MG7oqN5lz2iBVcyuh6w1NTtOtb7lW1vdvZ5TkyyLk5Oay+nUaZ2Srwkx+S +8+F5YgGwtKfQKQ7l29kcr5C3cpcrsbxbDmw+DAmEK1EPHUjJQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFDEyTvuXuYiyZIwQMJcsBKvoYB5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvYjBhYzIzYjAtNWYzYS0z NjVkLTlhZjYtMjcwMjFhOTE1NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAttSZy8xR341YnOHdmWRDPrNTIxqjfJbmV/XEKCRtYVgEU 5i/pcL69fmgFi6K+QvpUpV9dpSCGRIVbPw+iF1BwEDEObiztGttQV4VZOUW5m4tT BJ1y5MLBXk9rUigyyddevr+yQDSrCyog3YIVzJjJQkKUylYrhpm4latZHi9xXbol e4V3B7Gt9o/9hkgMPoqXxuPyvA8h3f/9ojOjxAH1QhOGycyZ+MJrB8HiHW69RBox c2ulnHIpghpIL7fJBGWIfujXM8SC7in/c9lC9qSwjBJO/9fEX3TPKkA43N0t/yrZ nASeciy83WnHizbO2m49vnzKx5ct5RmGy+y1COEF -----END CERTIFICATE-----Generated at Wed Nov 5 02:20:49 2025 by rpki-client