$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa File: 33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json) Hash identifier: nLL4WN1KuYgMjHHjIe+G91RSe683M54WpztBVjKS9Zg= Subject key identifier: 22:B9:B3:AC:87:8F:FD:01:8B:FF:7D:52:DD:5A:13:EB:95:44:5A:B1 Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39 Certificate serial: 010D0C9F4328584CA5F714FD7CD538453E894000 Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 400981 IP address blocks: 23.105.192.0/19 maxlen: 24 23.106.128.0/19 maxlen: 24 23.252.96.0/20 maxlen: 24 45.62.96.0/19 maxlen: 24 45.78.0.0/18 maxlen: 24 66.112.208.0/20 maxlen: 24 67.209.176.0/20 maxlen: 24 74.121.148.0/22 maxlen: 24 104.128.80.0/20 maxlen: 24 104.160.32.0/20 maxlen: 24 104.194.64.0/19 maxlen: 24 104.224.128.0/18 maxlen: 24 107.182.176.0/20 maxlen: 24 138.128.192.0/19 maxlen: 24 144.168.56.0/21 maxlen: 24 162.211.224.0/21 maxlen: 24 192.243.112.0/20 maxlen: 24 198.35.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:14:fd:7c:d5:38:45:3e:89:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=cafde645-fb9b-45d0-a849-8b3f3f52ff1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8d:62:c0:8f:e3:4b:63:3c:46:07:c9:8c:72: c0:f5:8b:ed:5b:cd:b7:ed:a4:1f:aa:97:f3:04:0f: f0:4a:79:64:1a:c1:af:fc:32:d2:87:8d:d4:f4:4e: 4e:76:4e:da:cc:c9:93:1c:fe:df:b4:57:31:88:78: 11:2f:f3:87:71:ec:ac:5f:1d:3b:ff:bc:34:86:af: c6:7c:3f:23:6d:a4:05:61:b4:17:41:b2:89:b6:71: 23:9f:e3:f0:83:06:46:51:fb:ed:88:d5:f3:2f:3c: eb:87:ad:24:21:57:d0:b3:9a:27:f1:ec:be:45:bf: ad:94:f6:31:6a:bc:5d:31:d1:1d:d1:be:32:cc:ab: 0a:c5:bd:c4:3f:8f:a1:8d:bc:1a:37:5f:72:c3:c9: 90:fd:07:0e:9a:fe:29:fc:7c:3b:6b:8a:73:94:ad: 88:4c:b2:ec:47:3e:09:47:05:54:dd:84:66:a8:05: cb:60:7b:d8:0e:48:c7:77:dc:b6:c6:b8:c6:b4:ef: 7e:7a:88:c7:46:cc:93:8c:e8:d8:cd:a2:89:cd:30: 5a:c1:b4:85:25:5b:0a:79:59:c9:b6:2c:dc:93:70: 6c:03:09:a4:65:8e:72:ab:84:89:37:c8:dc:64:1c: 5b:e2:fd:d1:87:04:07:3b:3b:a4:95:5d:68:17:7e: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B9:B3:AC:87:8F:FD:01:8B:FF:7D:52:DD:5A:13:EB:95:44:5A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl X509v3 Authority Key Identifier: keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer sbgp-ipAddrBlock: critical IPv4: 23.105.192.0/19 23.106.128.0/19 23.252.96.0/20 45.62.96.0/19 45.78.0.0/18 66.112.208.0/20 67.209.176.0/20 74.121.148.0/22 104.128.80.0/20 104.160.32.0/20 104.194.64.0/19 104.224.128.0/18 107.182.176.0/20 138.128.192.0/19 144.168.56.0/21 162.211.224.0/21 192.243.112.0/20 198.35.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:cd:10:fd:97:cb:7b:ad:4f:56:d6:de:a4:f4:9e:08:d9:1c: 01:d2:1c:4d:72:ec:1b:2d:b1:e9:dd:fe:1b:06:3c:36:ef:01: 91:ec:83:e6:2a:8c:95:93:e9:6a:af:24:c0:9c:5a:2c:a0:d3: 50:d9:08:90:b8:64:27:63:2d:25:6a:57:c7:96:ff:13:3e:d3: c2:ad:4d:9d:38:3c:cc:1f:1a:28:01:6d:91:41:ec:1d:a7:fe: 24:71:1b:19:6f:43:12:6b:45:1f:68:71:aa:99:58:50:3e:5e: d8:9d:60:26:47:83:d6:cb:11:51:e0:20:54:00:99:8c:34:d5: 60:6e:96:be:cb:b7:d1:74:9d:5d:eb:af:c0:5e:95:1f:4d:63: 89:b2:a5:f8:15:61:9a:b4:34:4c:49:c9:21:8e:9e:b4:7b:73: 12:ad:7f:09:65:e3:d5:a0:d7:08:20:c0:cf:e8:bf:5d:08:3a: 04:4b:0f:16:d6:fd:a8:6d:52:43:a0:ea:10:81:83:57:f3:6a: df:42:d1:a8:d1:ef:90:43:96:89:76:27:57:3a:34:e4:02:29: 2a:37:b5:a1:ea:6a:57:7a:9a:81:1e:e8:44:a4:97:ea:98:5b: 9c:6d:c8:ad:c1:95:b9:19:1d:db:b4:4c:6d:69:2b:0b:08:28: 4f:1f:c8:32 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUAQ0Mn0MoWEyl9xT9fNU4RT6JQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyMWY1ZWUtODlkMi00MDg4LWFiYjktZjY5MjkxNjU1 ZTM5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk Y2FmZGU2NDUtZmI5Yi00NWQwLWE4NDktOGIzZjNmNTJmZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Y1iwI/jS2M8RgfJjHLA9YvtW8237aQfqpfz BA/wSnlkGsGv/DLSh43U9E5Odk7azMmTHP7ftFcxiHgRL/OHceysXx07/7w0hq/G fD8jbaQFYbQXQbKJtnEjn+PwgwZGUfvtiNXzLzzrh60kIVfQs5on8ey+Rb+tlPYx arxdMdEd0b4yzKsKxb3EP4+hjbwaN19yw8mQ/QcOmv4p/Hw7a4pzlK2ITLLsRz4J RwVU3YRmqAXLYHvYDkjHd9y2xrjGtO9+eojHRsyTjOjYzaKJzTBawbSFJVsKeVnJ tizck3BsAwmkZY5yq4SJN8jcZBxb4v3RhwQHOzuklV1oF36ySQIDAQABo4IDvDCC A7gwHQYDVR0OBBYEFCK5s6yHj/0Bi/99Ut1aE+uVRFqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIx ZjVlZS04OWQyLTQwODgtYWJiOS1mNjkyOTE2NTVlMzkvMzNhOWRkYzItZGViMy0z Mzg0LWFjMDItNzQyMjQ0NWI5Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTUyMWY1ZWUtODlkMi00MDg4LWFi YjktZjY5MjkxNjU1ZTM5L2E1MjFmNWVlLTg5ZDItNDA4OC1hYmI5LWY2OTI5MTY1 NWUzOS5jcmwwHwYDVR0jBBgwFoAUFO4NvHhYb0lqT3wuMEpOEan+m3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNTIxZjVlZS04OWQyLTQwODgtYWJiOS1mNjky OTE2NTVlMzkuY2VyMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEBRdpwAME BRdqgAMEBBf8YAMEBS0+YAMEBi1OAAMEBEJw0AMEBEPRsAMEAkp5lAMEBGiAUAME BGigIAMEBWjCQAMEBmjggAMEBGu2sAMEBYqAwAMEA5CoOAMEA6LT4AMEBMDzcAME AsYjLDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAuzRD9l8t7rU9W1t6k9J4I2RwB0hxNcuwbLbHp3f4bBjw2 7wGR7IPmKoyVk+lqryTAnFosoNNQ2QiQuGQnYy0lalfHlv8TPtPCrU2dODzMHxoo AW2RQewdp/4kcRsZb0MSa0UfaHGqmVhQPl7YnWAmR4PWyxFR4CBUAJmMNNVgbpa+ y7fRdJ1d66/AXpUfTWOJsqX4FWGatDRMSckhjp60e3MSrX8JZePVoNcIIMDP6L9d CDoESw8W1v2obVJDoOoQgYNX82rfQtGo0e+QQ5aJdidXOjTkAikqN7Wh6mpXepqB HuhEpJfqmFucbcitwZW5GR3btExtaSsLCChPH8gy -----END CERTIFICATE-----Generated at Thu Feb 26 15:19:40 2026 by rpki-client