$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa File: e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa (raw, json) Hash identifier: ECeN8foZw6u/Eaxv/q2F3lu1cLofFnie2BM39dKnepA= Subject key identifier: AE:DC:57:4C:2A:BA:98:59:44:26:A9:3E:F5:52:69:10:DB:3E:79:0A Certificate issuer: /CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Certificate serial: 010D0C9F4328584E86F4E30B595ECDA06EBB3A00 Authority key identifier: 03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 36315 IP address blocks: 23.29.224.0/19 maxlen: 24 23.91.32.0/19 maxlen: 24 45.73.192.0/18 maxlen: 24 104.194.160.0/19 maxlen: 24 104.241.64.0/18 maxlen: 24 107.167.128.0/19 maxlen: 24 108.59.128.0/20 maxlen: 24 108.174.32.0/20 maxlen: 24 169.197.192.0/18 maxlen: 24 192.170.160.0/19 maxlen: 24 198.57.96.0/19 maxlen: 24 198.167.144.0/20 maxlen: 24 199.21.120.0/21 maxlen: 24 199.84.96.0/19 maxlen: 24 199.115.232.0/21 maxlen: 24 199.204.176.0/21 maxlen: 24 207.2.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:e3:0b:59:5e:cd:a0:6e:bb:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=ddf65994-05ea-406f-9263-88b0ec75e3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ee:2b:8c:47:5b:00:33:9a:09:ad:12:9b:32: b9:e4:3f:2f:fc:d4:20:f1:53:9e:a9:fb:49:74:8f: a0:24:c9:6f:6b:77:48:b8:f4:e5:ce:10:61:88:39: f8:5f:4c:fa:b5:5b:fb:2d:84:8b:c6:7b:67:a6:c1: 4d:07:4c:81:8d:17:59:fd:b5:d3:17:94:65:8f:da: 17:48:88:83:ec:bc:d2:e5:9f:b2:5e:b5:1d:f3:81: 1b:41:9c:4c:d1:8a:6f:30:91:0a:5b:94:be:9e:4b: ac:21:47:34:ce:02:7b:65:70:39:6f:cf:fc:4a:cd: 80:c3:ac:e3:58:6d:73:f3:56:cc:81:4f:2d:bd:ce: 98:96:de:a0:4c:ee:df:c1:ca:8e:eb:d5:c9:cd:fc: 88:6c:04:63:bb:b1:fb:f9:1e:67:49:b0:5e:31:71: 15:b0:e4:ae:b1:77:be:55:c9:0d:7f:b8:26:37:ff: 85:13:45:e2:4d:1a:f1:7c:64:72:09:95:66:6b:81: 7a:24:d4:bd:a5:d1:ed:70:99:f9:f2:32:e6:12:01: 0c:91:00:70:93:e3:2f:e8:ac:0f:98:90:88:a9:5a: f5:c6:5d:55:9d:d7:31:81:60:1c:f7:2c:e1:29:de: b4:bd:b0:58:80:55:ae:fa:fc:d2:16:e5:31:a7:f5: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:57:4C:2A:BA:98:59:44:26:A9:3E:F5:52:69:10:DB:3E:79:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl X509v3 Authority Key Identifier: keyid:03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer sbgp-ipAddrBlock: critical IPv4: 23.29.224.0/19 23.91.32.0/19 45.73.192.0/18 104.194.160.0/19 104.241.64.0/18 107.167.128.0/19 108.59.128.0/20 108.174.32.0/20 169.197.192.0/18 192.170.160.0/19 198.57.96.0/19 198.167.144.0/20 199.21.120.0/21 199.84.96.0/19 199.115.232.0/21 199.204.176.0/21 207.2.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a0:9e:77:4e:5b:87:41:e2:37:b8:fa:b6:87:1b:c0:14:03: 2e:29:e1:77:1e:3e:f3:b6:86:fc:1f:a4:53:92:f6:2e:ec:43: 81:ef:78:90:fe:93:8c:62:34:16:98:96:63:93:dd:53:db:e7: 52:22:9f:f4:ea:04:29:6b:97:cf:6a:ca:64:90:0a:ca:a1:05: 0d:ab:f7:bd:d4:90:0c:52:8a:ba:f9:1f:68:ae:f7:c7:5e:05: 12:c5:3e:56:b1:5f:39:11:ba:3c:d6:a1:77:55:99:d7:23:3e: 2d:b5:6d:c0:f9:ee:f0:43:77:90:80:8d:09:c6:a0:c6:a0:1e: 1b:58:74:af:05:22:47:be:46:19:6c:da:e4:d4:05:f4:e8:e7: 8d:b0:0d:05:d9:8a:78:ce:29:59:13:5c:0a:2e:30:78:23:fe: 1c:9a:bf:6a:92:3e:c5:2e:ed:8f:e8:2e:ca:a1:73:f6:eb:50: 84:1a:ba:6b:fa:5e:6a:f2:a6:79:b1:1f:5c:02:0a:aa:e8:c1: 9b:a1:72:58:23:0f:b8:83:30:00:be:95:65:88:53:2e:58:c7: a6:d0:41:96:b8:60:e5:5f:bb:60:b0:98:71:b2:82:87:a2:a0: d0:0e:b2:73:4a:8f:ca:df:c0:9e:13:42:0b:e0:16:e4:e3:6c: 15:93:e3:ab -----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgIUAQ0Mn0MoWE6G9OMLWV7NoG67OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVmMmM1MGQtYjFmMy00NTVmLTgzNWYtNDkzZmIzMmEz OWY5MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZGRmNjU5OTQtMDVlYS00MDZmLTkyNjMtODhiMGVjNzVlM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne4rjEdbADOaCa0SmzK55D8v/NQg8VOeqftJ dI+gJMlva3dIuPTlzhBhiDn4X0z6tVv7LYSLxntnpsFNB0yBjRdZ/bXTF5Rlj9oX SIiD7LzS5Z+yXrUd84EbQZxM0YpvMJEKW5S+nkusIUc0zgJ7ZXA5b8/8Ss2Aw6zj WG1z81bMgU8tvc6Ylt6gTO7fwcqO69XJzfyIbARju7H7+R5nSbBeMXEVsOSusXe+ VckNf7gmN/+FE0XiTRrxfGRyCZVma4F6JNS9pdHtcJn58jLmEgEMkQBwk+Mv6KwP mJCIqVr1xl1VndcxgWAc9yzhKd60vbBYgFWu+vzSFuUxp/VPVwIDAQABo4IDtTCC A7EwHQYDVR0OBBYEFK7cV0wquphZRCapPvVSaRDbPnkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNWYy YzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNmYjMyYTM5ZjkvZTcxMzM2NjctOWQyMi0z MTg1LWE1ZDItNGQ5ZWU1ZmMxOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjVmMmM1MGQtYjFmMy00NTVmLTgz NWYtNDkzZmIzMmEzOWY5LzI1ZjJjNTBkLWIxZjMtNDU1Zi04MzVmLTQ5M2ZiMzJh MzlmOS5jcmwwHwYDVR0jBBgwFoAUA2HrjpzzhYBz3T3eKA29cg43KvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNWYyYzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNm YjMyYTM5ZjkuY2VyMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQFFx3gAwQF F1sgAwQGLUnAAwQFaMKgAwQGaPFAAwQFa6eAAwQEbDuAAwQEbK4gAwQGqcXAAwQF wKqgAwQFxjlgAwQExqeQAwQDxxV4AwQFx1RgAwQDx3PoAwQDx8ywAwQDzwJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWgnndOW4dB4je4+raHG8AUAy4p4XcePvO2hvwfpFOS9i7sQ4HveJD+ k4xiNBaYlmOT3VPb51Iin/TqBClrl89qymSQCsqhBQ2r973UkAxSirr5H2iu98de BRLFPlaxXzkRujzWoXdVmdcjPi21bcD57vBDd5CAjQnGoMagHhtYdK8FIke+Rhls 2uTUBfTo542wDQXZinjOKVkTXAouMHgj/hyav2qSPsUu7Y/oLsqhc/brUIQaumv6 XmrypnmxH1wCCqrowZuhclgjD7iDMAC+lWWIUy5Yx6bQQZa4YOVfu2CwmHGygoei oNAOsnNKj8rfwJ4TQgvgFuTjbBWT46s= -----END CERTIFICATE-----Generated at Tue Jul 21 20:13:13 2026 by rpki-client