$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json) Hash identifier: yynciN5hGGhMLVmqsfvViBJAZMOhNy4JW3VmR5soTeQ= Subject key identifier: 32:CC:F9:AB:AA:E4:56:53:84:8B:50:A0:68:55:FC:40:A4:61:27:99 Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584D07ACECFF3A94E75396510A90 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396338 IP address blocks: 23.154.0.0/24 maxlen: 24 23.154.1.0/24 maxlen: 24 23.154.2.0/24 maxlen: 24 66.97.64.0/19 maxlen: 19 104.159.8.0/21 maxlen: 21 104.159.16.0/22 maxlen: 22 104.159.68.0/22 maxlen: 22 104.159.72.0/22 maxlen: 22 104.159.76.0/22 maxlen: 22 104.159.80.0/22 maxlen: 22 104.159.84.0/22 maxlen: 22 104.159.88.0/22 maxlen: 22 104.159.92.0/22 maxlen: 22 104.159.96.0/22 maxlen: 22 104.159.100.0/22 maxlen: 22 104.159.104.0/22 maxlen: 22 104.192.208.0/21 maxlen: 21 142.90.192.0/20 maxlen: 20 142.90.208.0/20 maxlen: 20 142.90.224.0/22 maxlen: 22 142.90.228.0/22 maxlen: 22 142.90.232.0/21 maxlen: 21 162.222.80.0/22 maxlen: 22 162.246.52.0/22 maxlen: 22 166.48.0.0/17 maxlen: 17 166.48.128.0/20 maxlen: 20 166.48.144.0/22 maxlen: 22 166.48.148.0/23 maxlen: 23 166.48.150.0/23 maxlen: 23 166.48.152.0/23 maxlen: 23 166.48.154.0/23 maxlen: 23 166.48.156.0/24 maxlen: 24 166.48.157.0/24 maxlen: 24 166.48.159.0/24 maxlen: 24 166.48.162.0/24 maxlen: 24 166.48.163.0/24 maxlen: 24 166.48.164.0/22 maxlen: 22 166.48.168.0/21 maxlen: 21 166.48.176.0/21 maxlen: 21 166.48.184.0/22 maxlen: 22 166.48.224.0/22 maxlen: 22 166.48.231.0/24 maxlen: 24 166.48.232.0/22 maxlen: 22 166.48.236.0/22 maxlen: 22 166.48.240.0/22 maxlen: 22 166.48.244.0/22 maxlen: 22 166.48.248.0/22 maxlen: 22 166.48.252.0/23 maxlen: 23 170.100.160.0/20 maxlen: 20 170.100.176.0/20 maxlen: 20 199.202.204.0/24 maxlen: 24 209.182.229.0/24 maxlen: 24 209.182.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ec:ff:3a:94:e7:53:96:51:0a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=e170aa90-0439-464c-8bb7-ffa392452f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:90:ca:47:f0:f9:bf:e4:33:55:40:ae:9d:0b: 41:d0:76:c2:87:88:4e:d6:59:08:16:6f:03:0a:dd: a4:a9:38:58:c4:a9:37:62:57:da:dc:ac:78:51:43: b9:59:82:ae:c7:a2:a4:74:49:11:a6:db:74:34:0e: 46:de:7f:2f:12:a4:e0:71:a0:6e:25:22:0a:c5:e2: 2d:f7:75:f1:96:f6:50:e6:d0:cc:00:6b:b7:04:8b: 8f:6b:ca:75:dc:3a:be:4e:cc:9b:d7:13:37:63:a0: c8:ae:96:22:2a:5d:09:67:e7:6d:f0:e0:ab:57:a4: 34:f3:23:58:bd:46:f5:7c:6f:e9:2d:3e:74:fd:8d: e1:e9:04:d3:fe:ef:a0:2b:12:9d:ae:0f:2e:c5:49: f0:e9:5c:58:05:e0:14:92:d8:5d:d3:71:02:1b:e9: 1b:bd:09:b7:08:70:5e:99:7a:e1:5a:d8:39:74:d6: 78:9f:8b:ce:cd:02:fa:90:7b:4d:38:b6:f2:4a:51: a9:47:3e:da:a7:0b:47:3e:3d:73:22:f1:9f:d2:77: 79:8a:08:14:a1:b6:3e:da:7c:66:fd:2b:ca:a8:ae: d1:e3:c0:c0:1b:94:43:65:cd:c1:ac:4a:94:8b:76: d6:4c:c9:8c:f8:9d:88:08:92:ca:02:4b:35:96:47: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CC:F9:AB:AA:E4:56:53:84:8B:50:A0:68:55:FC:40:A4:61:27:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 23.154.0.0-23.154.2.255 66.97.64.0/19 104.159.8.0-104.159.19.255 104.159.68.0-104.159.107.255 104.192.208.0/21 142.90.192.0-142.90.239.255 162.222.80.0/22 162.246.52.0/22 166.48.0.0-166.48.157.255 166.48.159.0/24 166.48.162.0-166.48.187.255 166.48.224.0/22 166.48.231.0-166.48.253.255 170.100.160.0/19 199.202.204.0/24 209.182.229.0-209.182.230.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9a:83:9a:dc:5a:41:04:5d:f4:fd:6e:64:cf:ad:9c:f2:41: 57:1b:51:c4:56:e4:1b:ae:df:f3:d3:23:49:d0:96:75:40:ab: 67:07:31:9e:3c:47:58:8f:d6:b7:da:4d:37:4e:d5:9c:15:40: bd:eb:16:7d:66:7b:8c:4d:15:90:e3:95:42:68:d9:7b:55:c2: ab:59:9a:7a:b4:0e:63:d8:39:b5:ac:59:67:38:2c:56:72:d5: 3b:b0:f9:8a:63:35:6c:30:ea:dc:c5:08:5d:15:e3:79:e3:70: ea:0c:34:0b:c7:ce:1a:7b:5c:6a:c5:dd:c3:9a:4c:62:09:02: dc:3e:9f:f4:96:f1:c0:6f:05:ff:48:7c:74:9e:f9:8c:5d:53: 88:82:ea:09:c4:92:7d:e2:17:0e:b2:ab:89:49:bd:f2:a7:51: a7:f5:81:24:04:4b:de:81:2f:aa:44:17:21:3a:be:02:4b:ba: 4d:50:99:74:d7:7e:bd:19:39:7c:ab:84:b4:f6:c6:76:4a:82: bb:ad:e5:18:cc:ea:33:04:43:76:af:57:4b:0c:69:b1:3f:4f: 48:1d:de:7d:88:4b:08:fc:22:8b:11:38:32:6d:3d:36:97:54: 7e:5b:0c:20:95:4c:b4:d6:ad:78:8e:0a:28:b7:24:13:4e:9c: 42:96:df:03 -----BEGIN CERTIFICATE----- MIIG4DCCBcigAwIBAgIUAQ0Mn0MoWE0HrOz/OpTnU5ZRCpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZTE3MGFhOTAtMDQzOS00NjRjLThiYjctZmZhMzkyNDUyZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJDKR/D5v+QzVUCunQtB0HbCh4hO1lkIFm8D Ct2kqThYxKk3Ylfa3Kx4UUO5WYKux6KkdEkRptt0NA5G3n8vEqTgcaBuJSIKxeIt 93XxlvZQ5tDMAGu3BIuPa8p13Dq+Tsyb1xM3Y6DIrpYiKl0JZ+dt8OCrV6Q08yNY vUb1fG/pLT50/Y3h6QTT/u+gKxKdrg8uxUnw6VxYBeAUkthd03ECG+kbvQm3CHBe mXrhWtg5dNZ4n4vOzQL6kHtNOLbySlGpRz7apwtHPj1zIvGf0nd5iggUobY+2nxm /SvKqK7R48DAG5RDZc3BrEqUi3bWTMmM+J2ICJLKAks1lkcZ1QIDAQABo4ID8jCC A+4wHQYDVR0OBBYEFDLM+auq5FZThItQoGhV/ECkYSeZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4wCwMD AReaAwQAF5oCAwQFQmFAMAwDBANonwgDBAJonxAwDAMEAmifRAMEAmifaAMEA2jA 0DAMAwQGjlrAAwQEjlrgAwQCot5QAwQCovY0MAsDAwSmMAMEAaYwnAMEAKYwnzAM AwQBpjCiAwQCpjC4AwQCpjDgMAwDBACmMOcDBAGmMPwDBAWqZKADBADHyswwDAME ANG25QMEANG25jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBmoOa3FpBBF30/W5kz62c8kFXG1HEVuQbrt/z 0yNJ0JZ1QKtnBzGePEdYj9a32k03TtWcFUC96xZ9ZnuMTRWQ45VCaNl7VcKrWZp6 tA5j2Dm1rFlnOCxWctU7sPmKYzVsMOrcxQhdFeN543DqDDQLx84ae1xqxd3Dmkxi CQLcPp/0lvHAbwX/SHx0nvmMXVOIguoJxJJ94hcOsquJSb3yp1Gn9YEkBEvegS+q RBchOr4CS7pNUJl01369GTl8q4S09sZ2SoK7reUYzOozBEN2r1dLDGmxP09IHd59 iEsI/CKLETgybT02l1R+WwwglUy01q14jgootyQTTpxClt8D -----END CERTIFICATE-----Generated at Mon Mar 2 16:11:25 2026 by rpki-client