
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa
File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json)
Hash identifier: FkdN9qXc83t3fV5442R0WoGnYtzyrbgSwbeVbzsR+Ac=
Subject key identifier: C5:D8:27:C1:A4:FF:2F:42:5C:E3:4C:1E:BC:7A:B6:13:08:60:0A:16
Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Certificate serial: 010D0C9F4328584D5234F15F50CC06ADE01E67C0
Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa
Signing time: Sat 28 Mar 2026 18:44:32 +0000
ROA not before: Sat 28 Mar 2026 18:44:32 +0000
ROA not after: Sun 31 May 2026 01:00:31 +0000
asID: 396338
IP address blocks: 23.154.0.0/24 maxlen: 24
23.154.1.0/24 maxlen: 24
23.154.2.0/24 maxlen: 24
66.97.64.0/19 maxlen: 19
104.159.8.0/21 maxlen: 21
104.159.16.0/22 maxlen: 22
104.159.68.0/22 maxlen: 22
104.159.72.0/22 maxlen: 22
104.159.76.0/22 maxlen: 22
104.159.80.0/22 maxlen: 22
104.159.84.0/22 maxlen: 22
104.159.88.0/22 maxlen: 22
104.159.92.0/22 maxlen: 22
104.159.96.0/22 maxlen: 22
104.159.100.0/22 maxlen: 22
104.159.104.0/22 maxlen: 22
104.192.208.0/21 maxlen: 21
142.90.192.0/20 maxlen: 20
142.90.208.0/20 maxlen: 20
142.90.224.0/22 maxlen: 22
142.90.228.0/22 maxlen: 22
142.90.232.0/21 maxlen: 21
162.222.80.0/22 maxlen: 22
162.246.52.0/22 maxlen: 22
166.48.0.0/17 maxlen: 17
166.48.128.0/20 maxlen: 20
166.48.144.0/22 maxlen: 22
166.48.148.0/23 maxlen: 23
166.48.150.0/23 maxlen: 23
166.48.152.0/23 maxlen: 23
166.48.154.0/23 maxlen: 23
166.48.156.0/24 maxlen: 24
166.48.157.0/24 maxlen: 24
166.48.159.0/24 maxlen: 24
166.48.162.0/24 maxlen: 24
166.48.163.0/24 maxlen: 24
166.48.164.0/22 maxlen: 22
166.48.168.0/21 maxlen: 21
166.48.176.0/21 maxlen: 21
166.48.184.0/22 maxlen: 22
166.48.224.0/22 maxlen: 22
166.48.231.0/24 maxlen: 24
166.48.232.0/22 maxlen: 22
166.48.236.0/22 maxlen: 22
166.48.240.0/22 maxlen: 22
166.48.244.0/22 maxlen: 22
166.48.248.0/22 maxlen: 22
166.48.252.0/23 maxlen: 23
170.100.160.0/20 maxlen: 20
170.100.176.0/20 maxlen: 20
199.202.204.0/24 maxlen: 24
209.182.228.0/24 maxlen: 24
209.182.229.0/24 maxlen: 24
209.182.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:f1:5f:50:cc:06:ad:e0:1e:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386
Validity
Not Before: Mar 28 18:44:32 2026 GMT
Not After : May 31 01:00:31 2026 GMT
Subject: CN=405243bd-7d92-432d-abe3-1259cc0420aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4d:16:dd:38:74:94:b7:f9:40:e6:0e:30:3a:
00:17:3e:ad:7b:9e:84:9b:06:e7:34:0c:57:3f:38:
5a:cb:12:96:89:99:ea:1f:08:ba:ed:15:49:f7:e2:
6b:c3:ed:b8:4c:36:fd:07:50:63:e2:5c:0f:61:8c:
9d:e1:42:17:1d:38:5c:fd:0d:90:ef:15:9f:86:3a:
33:e1:9e:e9:dd:ad:47:b8:4a:2a:e5:b9:46:70:ae:
93:12:57:3e:c6:de:6b:74:28:92:be:09:36:07:86:
f8:21:78:6b:25:28:ee:4d:f3:5c:21:b7:c8:41:7e:
75:e5:90:90:7f:33:a4:50:41:aa:93:00:39:73:04:
2d:72:b9:23:de:f4:25:7f:b9:16:1d:a7:c3:01:36:
63:0e:7e:4d:cb:8e:ed:6f:ee:08:04:b4:3f:3d:2c:
88:f0:cf:86:cc:92:58:2f:45:e3:9e:01:80:16:b8:
9e:f7:1c:e6:bd:17:6a:52:42:9c:bc:5c:a4:20:2d:
d9:ec:05:1e:ea:0e:3f:ec:05:b6:5f:3e:36:df:20:
18:27:3e:32:f6:61:05:bf:82:f6:de:70:8d:e9:5e:
86:a5:6c:06:8b:62:1e:08:30:30:4d:63:5f:eb:e7:
9d:6e:ba:4d:b7:ad:a7:a4:e3:a5:54:96:18:43:e8:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:27:C1:A4:FF:2F:42:5C:E3:4C:1E:BC:7A:B6:13:08:60:0A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl
X509v3 Authority Key Identifier:
keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.0.0-23.154.2.255
66.97.64.0/19
104.159.8.0-104.159.19.255
104.159.68.0-104.159.107.255
104.192.208.0/21
142.90.192.0-142.90.239.255
162.222.80.0/22
162.246.52.0/22
166.48.0.0-166.48.157.255
166.48.159.0/24
166.48.162.0-166.48.187.255
166.48.224.0/22
166.48.231.0-166.48.253.255
170.100.160.0/19
199.202.204.0/24
209.182.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:2e:7e:28:c4:8d:a1:70:5a:ff:3c:7d:49:af:5e:ee:71:59:
cd:45:d5:8a:e3:ab:a5:0b:44:26:05:80:c5:d4:3e:35:4b:ad:
e4:c9:c1:4c:1d:f5:40:c2:9e:43:0f:ba:b4:1f:ce:49:cb:26:
e9:60:46:48:34:c1:5e:66:18:a7:6b:dc:ad:08:fe:ea:5b:60:
e4:01:c4:80:56:78:4d:38:6b:0d:8f:c7:d1:82:6f:ac:e1:38:
8c:70:6d:2a:8f:44:af:78:08:90:66:e3:78:fb:32:1b:88:b2:
8c:73:be:de:14:d8:78:6a:60:c8:8a:f0:47:74:a6:2e:30:bc:
0b:08:a6:00:e6:22:88:3f:63:09:d5:1d:3a:c2:66:7d:15:5b:
47:6a:2e:02:6a:4f:56:c1:32:59:a2:af:77:01:b4:2d:d8:59:
5c:3f:c5:ce:e7:7a:91:30:0b:8f:0b:a0:02:47:40:47:01:6f:
dd:86:18:c5:d0:bd:72:c4:e7:59:bf:10:d9:4e:2f:a8:10:a5:
d7:3c:61:ed:ea:9a:be:34:7e:84:40:f1:7e:26:a5:22:af:ee:
c5:42:7f:9e:c3:5b:8f:3c:0e:af:9d:b1:91:cb:3d:7d:a0:dc:
c3:d4:b4:05:92:0b:ca:f4:c1:aa:11:7f:24:64:d2:f5:10:1c:
f6:d4:27:82
-----BEGIN CERTIFICATE-----
MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE1SNPFfUMwGreAeZ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm
Mzg2MB4XDTI2MDMyODE4NDQzMloXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
NDA1MjQzYmQtN2Q5Mi00MzJkLWFiZTMtMTI1OWNjMDQyMGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA300W3Th0lLf5QOYOMDoAFz6te56EmwbnNAxX
PzhayxKWiZnqHwi67RVJ9+Jrw+24TDb9B1Bj4lwPYYyd4UIXHThc/Q2Q7xWfhjoz
4Z7p3a1HuEoq5blGcK6TElc+xt5rdCiSvgk2B4b4IXhrJSjuTfNcIbfIQX515ZCQ
fzOkUEGqkwA5cwQtcrkj3vQlf7kWHafDATZjDn5Ny47tb+4IBLQ/PSyI8M+GzJJY
L0XjngGAFrie9xzmvRdqUkKcvFykIC3Z7AUe6g4/7AW2Xz423yAYJz4y9mEFv4L2
3nCN6V6GpWwGi2IeCDAwTWNf6+edbrpNt62npOOlVJYYQ+hAUwIDAQABo4ID6jCC
A+YwHQYDVR0OBBYEFMXYJ8Gk/y9CXONMHrx6thMIYAoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx
ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z
NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj
ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1
ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz
NzQwNWYzODYuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYwCwMD
AReaAwQAF5oCAwQFQmFAMAwDBANonwgDBAJonxAwDAMEAmifRAMEAmifaAMEA2jA
0DAMAwQGjlrAAwQEjlrgAwQCot5QAwQCovY0MAsDAwSmMAMEAaYwnAMEAKYwnzAM
AwQBpjCiAwQCpjC4AwQCpjDgMAwDBACmMOcDBAGmMPwDBAWqZKADBADHyswDBALR
tuQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAlC5+KMSNoXBa/zx9Sa9e7nFZzUXViuOrpQtEJgWAxdQ+NUut
5MnBTB31QMKeQw+6tB/OScsm6WBGSDTBXmYYp2vcrQj+6ltg5AHEgFZ4TThrDY/H
0YJvrOE4jHBtKo9Er3gIkGbjePsyG4iyjHO+3hTYeGpgyIrwR3SmLjC8CwimAOYi
iD9jCdUdOsJmfRVbR2ouAmpPVsEyWaKvdwG0LdhZXD/Fzud6kTALjwugAkdARwFv
3YYYxdC9csTnWb8Q2U4vqBCl1zxh7eqavjR+hEDxfialIq/uxUJ/nsNbjzwOr52x
kcs9faDcw9S0BZILyvTBqhF/JGTS9RAc9tQngg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:58 2026 by rpki-client