$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa File: b5c63bfd-1823-3439-89e5-1713f0194e5c.roa (raw, json) Hash identifier: 2uymkKOe+R8H+fm1GSPz45eLr7bITZxPPhkik69fBQk= Subject key identifier: 55:2E:CF:E4:1F:1D:73:83:29:41:8C:3D:C0:79:CB:47:8C:1C:67:D3 Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584D9244B7729B81AF0E0E1C7600 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa Signing time: Mon 20 Apr 2026 17:28:03 +0000 ROA not before: Mon 20 Apr 2026 17:28:03 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 396338 IP address blocks: 23.154.0.0/24 maxlen: 24 23.154.1.0/24 maxlen: 24 23.154.2.0/24 maxlen: 24 66.97.64.0/19 maxlen: 19 104.159.8.0/21 maxlen: 21 104.159.16.0/22 maxlen: 22 104.159.68.0/22 maxlen: 22 104.159.72.0/22 maxlen: 22 104.159.76.0/22 maxlen: 22 104.159.80.0/22 maxlen: 22 104.159.84.0/22 maxlen: 22 104.159.88.0/22 maxlen: 22 104.159.92.0/22 maxlen: 22 104.159.96.0/22 maxlen: 22 104.159.100.0/22 maxlen: 22 104.159.104.0/22 maxlen: 22 104.192.208.0/21 maxlen: 21 142.90.192.0/20 maxlen: 20 142.90.208.0/20 maxlen: 20 142.90.224.0/22 maxlen: 22 142.90.228.0/22 maxlen: 22 142.90.232.0/21 maxlen: 21 142.90.240.0/21 maxlen: 22 142.90.248.0/22 maxlen: 22 162.222.80.0/22 maxlen: 22 162.246.52.0/22 maxlen: 22 166.48.0.0/17 maxlen: 17 166.48.128.0/20 maxlen: 20 166.48.144.0/22 maxlen: 22 166.48.148.0/23 maxlen: 23 166.48.150.0/23 maxlen: 23 166.48.152.0/23 maxlen: 23 166.48.154.0/23 maxlen: 23 166.48.156.0/24 maxlen: 24 166.48.157.0/24 maxlen: 24 166.48.159.0/24 maxlen: 24 166.48.162.0/24 maxlen: 24 166.48.163.0/24 maxlen: 24 166.48.164.0/22 maxlen: 22 166.48.168.0/21 maxlen: 21 166.48.176.0/21 maxlen: 21 166.48.184.0/22 maxlen: 22 166.48.224.0/21 maxlen: 22 166.48.231.0/24 maxlen: 24 166.48.232.0/22 maxlen: 22 166.48.236.0/22 maxlen: 22 166.48.240.0/22 maxlen: 22 166.48.244.0/22 maxlen: 22 166.48.248.0/22 maxlen: 22 166.48.252.0/23 maxlen: 23 170.100.160.0/20 maxlen: 20 170.100.176.0/20 maxlen: 20 199.166.219.0/24 maxlen: 24 199.202.204.0/24 maxlen: 24 209.182.228.0/24 maxlen: 24 209.182.229.0/24 maxlen: 24 209.182.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:92:44:b7:72:9b:81:af:0e:0e:1c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Apr 20 17:28:03 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=e0d2b233-b36c-4ceb-8667-b35f05474533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:be:25:66:59:a9:b6:18:0a:56:04:dc:84: c9:da:d0:f7:05:5a:5d:e1:23:2b:7c:e2:a7:2f:c7: 0a:c1:3e:ab:af:4d:95:a8:71:29:1a:85:2d:27:6b: 70:a9:4b:c5:6b:c3:7d:0e:c2:55:0f:fc:2e:13:fb: 58:c9:f3:cd:61:a7:d0:2c:53:0d:2d:33:cf:e2:36: 00:36:fa:51:ce:a6:0d:f1:65:33:a4:50:71:91:78: c2:71:ea:c5:0e:a5:5e:03:0e:5c:a6:95:66:5f:09: 4a:d0:1c:93:8f:75:28:c0:dc:10:a4:53:46:8f:24: c9:8f:39:00:bb:a2:0e:4d:10:4c:54:2a:b0:78:d0: 50:3d:97:7a:c1:a0:2e:d8:22:85:d9:ca:c6:87:fd: 05:ff:6c:0c:0e:67:fa:63:58:da:62:bf:9b:55:26: 69:f2:6a:c9:1e:09:ad:54:55:50:93:5c:31:e5:d6: a1:3b:ac:b8:e0:69:76:b5:9e:48:a7:86:a4:2c:42: 1b:67:36:8c:12:36:31:4a:d3:c0:ca:82:ac:66:bb: 67:3f:ac:0f:b9:ba:cc:db:b3:a3:8f:5f:8d:20:d4: 30:29:bd:cc:88:ef:f5:31:f5:c9:c6:c4:c1:48:d1: 93:c1:1b:ad:86:be:a8:93:16:48:99:d0:5d:d0:2f: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2E:CF:E4:1F:1D:73:83:29:41:8C:3D:C0:79:CB:47:8C:1C:67:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/b5c63bfd-1823-3439-89e5-1713f0194e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 23.154.0.0-23.154.2.255 66.97.64.0/19 104.159.8.0-104.159.19.255 104.159.68.0-104.159.107.255 104.192.208.0/21 142.90.192.0-142.90.251.255 162.222.80.0/22 162.246.52.0/22 166.48.0.0-166.48.157.255 166.48.159.0/24 166.48.162.0-166.48.187.255 166.48.224.0-166.48.253.255 170.100.160.0/19 199.166.219.0/24 199.202.204.0/24 209.182.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3b:69:87:be:c6:f9:d3:db:56:fd:1b:d0:10:f6:ed:87:09: 32:0f:34:85:0e:18:2c:a9:4e:a0:81:0a:17:60:a1:a8:ad:05: f8:81:a7:77:75:4e:4f:7d:ec:98:f4:64:c1:cd:db:8d:cc:84: 58:d8:3d:32:b6:57:a6:c6:ba:31:05:b8:93:c7:4c:0c:f6:a9: 60:5c:c2:22:59:fa:c4:fd:4f:38:f1:57:45:1d:81:e5:fa:38: 87:ba:3f:3a:2d:77:d5:f3:19:42:e3:66:0b:2e:d3:2a:86:24: 33:64:05:d9:ff:e4:b4:b5:3e:2a:52:03:ca:c7:68:df:72:d8: fa:1c:4d:50:1a:51:c0:c1:e1:7f:df:d5:e5:a1:4d:26:ec:c2: 57:de:ed:d7:db:b7:54:9b:a1:84:2c:45:38:f5:73:64:1c:db: 11:0e:b8:d0:4a:b5:96:dd:64:ae:f2:bc:38:c9:e8:f4:c9:7c: 7b:45:88:be:7e:37:ed:63:a3:52:2f:de:c2:d2:a8:e1:0d:91: 1d:34:c9:6e:82:ed:56:77:1a:f9:9c:15:70:1a:d3:77:51:98: b9:45:5d:02:78:de:ec:98:b6:6e:3d:46:29:63:15:25:88:0f: 6b:f7:16:c7:5b:fa:be:3b:4d:fe:52:cf:eb:e9:61:df:4b:f6: 57:1e:9c:b4 -----BEGIN CERTIFICATE----- MIIG2DCCBcCgAwIBAgIUAQ0Mn0MoWE2SRLdym4GvDg4cdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI2MDQyMDE3MjgwM1oXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ZTBkMmIyMzMtYjM2Yy00Y2ViLTg2NjctYjM1ZjA1NDc0NTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+a+JWZZqbYYClYE3ITJ2tD3BVpd4SMrfOKn L8cKwT6rr02VqHEpGoUtJ2twqUvFa8N9DsJVD/wuE/tYyfPNYafQLFMNLTPP4jYA NvpRzqYN8WUzpFBxkXjCcerFDqVeAw5cppVmXwlK0ByTj3UowNwQpFNGjyTJjzkA u6IOTRBMVCqweNBQPZd6waAu2CKF2crGh/0F/2wMDmf6Y1jaYr+bVSZp8mrJHgmt VFVQk1wx5dahO6y44Gl2tZ5Ip4akLEIbZzaMEjYxStPAyoKsZrtnP6wPubrM27Oj j1+NINQwKb3MiO/1MfXJxsTBSNGTwRuthr6okxZImdBd0C/98wIDAQABo4ID6jCC A+YwHQYDVR0OBBYEFFUuz+QfHXODKUGMPcB5y0eMHGfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvYjVjNjNiZmQtMTgyMy0z NDM5LTg5ZTUtMTcxM2YwMTk0ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYwCwMD AReaAwQAF5oCAwQFQmFAMAwDBANonwgDBAJonxAwDAMEAmifRAMEAmifaAMEA2jA 0DAMAwQGjlrAAwQCjlr4AwQCot5QAwQCovY0MAsDAwSmMAMEAaYwnAMEAKYwnzAM AwQBpjCiAwQCpjC4MAwDBAWmMOADBAGmMPwDBAWqZKADBADHptsDBADHyswDBALR tuQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALjtph77G+dPbVv0b0BD27YcJMg80hQ4YLKlOoIEKF2ChqK0F +IGnd3VOT33smPRkwc3bjcyEWNg9MrZXpsa6MQW4k8dMDPapYFzCIln6xP1POPFX RR2B5fo4h7o/Oi131fMZQuNmCy7TKoYkM2QF2f/ktLU+KlIDysdo33LY+hxNUBpR wMHhf9/V5aFNJuzCV97t19u3VJuhhCxFOPVzZBzbEQ640Eq1lt1krvK8OMno9Ml8 e0WIvn437WOjUi/ewtKo4Q2RHTTJboLtVnca+ZwVcBrTd1GYuUVdAnje7Ji2bj1G KWMVJYgPa/cWx1v6vjtN/lLP6+lh30v2Vx6ctA== -----END CERTIFICATE-----Generated at Tue Apr 28 10:53:14 2026 by rpki-client