$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json) Hash identifier: hyqe227d7c8Em7aM1Rr8pqrE3+5gY35dUGwUzouiTls= Subject key identifier: 52:87:16:19:B3:1C:0B:1E:8E:22:A3:01:D9:92:8D:9F:13:7B:1F:3D Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584EA7919F9DE5250AEC08DD0680 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 396338 IP address blocks: 23.154.0.0/24 maxlen: 24 23.154.1.0/24 maxlen: 24 23.154.2.0/24 maxlen: 24 66.97.64.0/19 maxlen: 19 104.159.8.0/21 maxlen: 21 104.159.16.0/22 maxlen: 22 104.159.68.0/22 maxlen: 22 104.159.72.0/22 maxlen: 22 104.159.76.0/22 maxlen: 22 104.159.80.0/22 maxlen: 22 104.159.84.0/22 maxlen: 22 104.159.88.0/22 maxlen: 22 104.159.92.0/22 maxlen: 22 104.159.96.0/22 maxlen: 22 104.159.100.0/22 maxlen: 22 104.159.104.0/22 maxlen: 22 104.192.208.0/21 maxlen: 21 142.90.192.0/20 maxlen: 20 142.90.208.0/20 maxlen: 20 142.90.224.0/22 maxlen: 22 142.90.228.0/22 maxlen: 22 142.90.232.0/21 maxlen: 21 142.90.240.0/21 maxlen: 22 142.90.248.0/22 maxlen: 22 162.222.80.0/22 maxlen: 22 162.246.52.0/22 maxlen: 22 166.48.0.0/17 maxlen: 17 166.48.128.0/20 maxlen: 20 166.48.144.0/22 maxlen: 22 166.48.148.0/23 maxlen: 23 166.48.150.0/23 maxlen: 23 166.48.152.0/23 maxlen: 23 166.48.154.0/23 maxlen: 23 166.48.156.0/24 maxlen: 24 166.48.157.0/24 maxlen: 24 166.48.159.0/24 maxlen: 24 166.48.162.0/24 maxlen: 24 166.48.163.0/24 maxlen: 24 166.48.164.0/22 maxlen: 22 166.48.168.0/21 maxlen: 21 166.48.176.0/21 maxlen: 21 166.48.184.0/22 maxlen: 22 166.48.224.0/21 maxlen: 22 166.48.231.0/24 maxlen: 24 166.48.232.0/22 maxlen: 22 166.48.236.0/22 maxlen: 22 166.48.240.0/22 maxlen: 22 166.48.244.0/22 maxlen: 22 166.48.248.0/22 maxlen: 22 166.48.252.0/23 maxlen: 23 170.100.160.0/20 maxlen: 20 170.100.176.0/20 maxlen: 20 199.166.219.0/24 maxlen: 24 199.202.204.0/24 maxlen: 24 209.182.228.0/24 maxlen: 24 209.182.229.0/24 maxlen: 24 209.182.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:9f:9d:e5:25:0a:ec:08:dd:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b74bc153-e483-4544-875c-d4c315eec818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:75:51:f7:68:02:d7:0d:f3:69:09:fb:c7: 85:af:0c:0f:cd:08:df:a4:be:80:f2:46:c9:a5:70: 5b:2d:48:1b:a1:81:52:0e:cd:80:a2:3a:71:e0:c3: 16:96:ba:58:f8:a4:fa:e0:20:21:3d:71:11:90:ad: e1:fc:2f:1d:d2:ab:01:28:27:6d:f2:7f:ed:4d:b9: e3:8e:a8:5a:85:98:5e:ce:48:c0:75:bf:9f:d0:ab: 90:2d:46:ba:4b:3a:5a:14:db:34:42:a9:a1:7d:48: ed:96:54:5b:f0:36:d9:50:92:5d:1b:3f:08:58:b7: e5:52:5c:12:cf:d7:7c:52:61:09:db:e4:55:95:e0: 0e:51:7b:f2:d9:bc:47:26:87:ea:d8:0f:e2:bf:50: f5:8a:e0:b8:ab:fd:5d:36:a8:36:2b:5d:07:24:49: 33:26:91:20:00:2f:28:7b:9c:47:c5:68:bb:cb:37: 1e:eb:bb:5b:e6:2e:d0:c7:15:9c:c4:4b:08:90:cf: fc:76:05:e3:e0:1b:f8:c2:53:8e:ac:b9:d2:81:91: ca:7d:4b:b4:22:c4:b9:7f:7e:78:84:13:29:03:5a: 35:20:74:e9:de:66:5a:0a:ab:1f:bb:a6:3b:b4:4c: 46:b4:40:92:86:4f:17:05:2c:b3:49:9c:2b:2e:a8: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:16:19:B3:1C:0B:1E:8E:22:A3:01:D9:92:8D:9F:13:7B:1F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 23.154.0.0-23.154.2.255 66.97.64.0/19 104.159.8.0-104.159.19.255 104.159.68.0-104.159.107.255 104.192.208.0/21 142.90.192.0-142.90.251.255 162.222.80.0/22 162.246.52.0/22 166.48.0.0-166.48.157.255 166.48.159.0/24 166.48.162.0-166.48.187.255 166.48.224.0-166.48.253.255 170.100.160.0/19 199.166.219.0/24 199.202.204.0/24 209.182.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:6b:5b:10:87:65:ab:24:30:7e:6f:cc:a1:80:bf:41:72:10: 95:36:18:eb:ab:93:8e:8d:36:da:ba:39:ca:3e:32:53:d8:9c: 83:40:8a:51:2b:7a:87:25:49:c5:2f:30:c5:ca:8a:6b:82:27: 65:71:3e:9c:ca:07:49:70:f5:3a:48:34:20:0d:82:27:d9:d2: a4:34:f4:60:fa:c1:46:3b:dc:e4:e9:b0:37:d7:72:f5:99:2f: a9:a9:ef:04:38:7b:15:a9:c9:ca:32:ed:5b:b6:3f:1e:a9:b1: 7e:72:8a:1d:15:ae:28:b0:d3:de:99:1a:99:2b:1b:1b:ae:01: 7b:4b:98:c1:46:25:09:d9:9d:1b:06:21:a9:7e:ae:2b:81:65: 88:39:e2:fc:55:3f:8d:95:bf:cb:8b:e2:b6:5b:43:ba:32:54: 28:c5:fa:07:53:92:1a:f2:52:55:33:d5:7e:66:bb:b8:a8:e8: 6f:fd:d6:e2:d1:76:fa:14:07:34:f9:e0:2d:ac:0a:f5:ab:82: 81:b7:7c:f5:48:19:6f:89:c0:52:b8:47:38:7a:c0:a3:a1:8f: 38:f1:07:ee:81:b5:3f:9d:11:03:f8:77:54:3c:71:e2:de:1b: 69:bb:df:d9:14:d0:a2:b8:88:3a:0d:84:bf:8c:a4:1b:bd:db: f5:d7:72:36 -----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE6nkZ+d5SUK7AjdBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Yjc0YmMxNTMtZTQ4My00NTQ0LTg3NWMtZDRjMzE1ZWVjODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyV1UfdoAtcN82kJ+8eFrwwPzQjfpL6A8kbJ pXBbLUgboYFSDs2Aojpx4MMWlrpY+KT64CAhPXERkK3h/C8d0qsBKCdt8n/tTbnj jqhahZhezkjAdb+f0KuQLUa6SzpaFNs0QqmhfUjtllRb8DbZUJJdGz8IWLflUlwS z9d8UmEJ2+RVleAOUXvy2bxHJofq2A/iv1D1iuC4q/1dNqg2K10HJEkzJpEgAC8o e5xHxWi7yzce67tb5i7QxxWcxEsIkM/8dgXj4Bv4wlOOrLnSgZHKfUu0IsS5f354 hBMpA1o1IHTp3mZaCqsfu6Y7tExGtECShk8XBSyzSZwrLqgn7wIDAQABo4ID6jCC A+YwHQYDVR0OBBYEFFKHFhmzHAsejiKjAdmSjZ8Tex89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYwCwMD AReaAwQAF5oCAwQFQmFAMAwDBANonwgDBAJonxAwDAMEAmifRAMEAmifaAMEA2jA 0DAMAwQGjlrAAwQCjlr4AwQCot5QAwQCovY0MAsDAwSmMAMEAaYwnAMEAKYwnzAM AwQBpjCiAwQCpjC4MAwDBAWmMOADBAGmMPwDBAWqZKADBADHptsDBADHyswDBALR tuQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAS2tbEIdlqyQwfm/MoYC/QXIQlTYY66uTjo022ro5yj4yU9ic g0CKUSt6hyVJxS8wxcqKa4InZXE+nMoHSXD1Okg0IA2CJ9nSpDT0YPrBRjvc5Omw N9dy9ZkvqanvBDh7FanJyjLtW7Y/HqmxfnKKHRWuKLDT3pkamSsbG64Be0uYwUYl CdmdGwYhqX6uK4FliDni/FU/jZW/y4vitltDujJUKMX6B1OSGvJSVTPVfma7uKjo b/3W4tF2+hQHNPngLawK9auCgbd89UgZb4nAUrhHOHrAo6GPOPEH7oG1P50RA/h3 VDxx4t4babvf2RTQoriIOg2Ev4ykG73b9ddyNg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:53:37 2026 by rpki-client