$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa File: e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa (raw, json) Hash identifier: pYVKRgsZE1eFA3v0DXZterCN04setCjjmH+mKCgGzJ4= Subject key identifier: 22:B5:EF:19:93:EE:37:7D:4E:06:02:1C:DD:9F:68:72:19:78:F1:86 Certificate issuer: /CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Certificate serial: 010D0C9F4328584F2957CF2C68EB2BCB6557D4C0 Authority key identifier: 03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 36315 IP address blocks: 23.29.224.0/19 maxlen: 24 23.91.32.0/19 maxlen: 24 45.73.192.0/18 maxlen: 24 104.194.160.0/19 maxlen: 24 104.241.64.0/18 maxlen: 24 107.167.128.0/19 maxlen: 24 108.59.128.0/20 maxlen: 24 108.174.32.0/20 maxlen: 24 169.197.192.0/18 maxlen: 24 192.170.160.0/19 maxlen: 24 198.57.96.0/19 maxlen: 24 198.167.144.0/20 maxlen: 24 199.21.120.0/21 maxlen: 24 199.84.96.0/19 maxlen: 24 199.115.232.0/21 maxlen: 24 199.204.176.0/21 maxlen: 24 207.2.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:cf:2c:68:eb:2b:cb:65:57:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25f2c50d-b1f3-455f-835f-493fb32a39f9 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=76f18a22-f900-430e-bed1-e39810d8fd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:25:7d:b1:a0:80:87:39:9e:7c:d1:11:4c: 09:ff:1d:30:3e:89:eb:8a:93:c8:70:19:f0:a9:07: d3:d7:8e:b9:37:98:ce:60:c0:21:54:05:c6:d4:98: d9:94:9b:4e:17:46:29:82:68:d4:19:36:d8:19:0c: 81:80:e0:99:d5:48:bc:03:dd:1a:9e:02:63:b6:cc: f9:fb:d4:65:85:b6:66:f8:62:27:45:94:49:ee:f3: ed:da:12:16:f9:56:04:18:42:8d:cb:dc:93:56:70: 33:fc:a4:51:4a:54:e5:4e:ba:7a:2d:64:00:a9:ee: 80:39:fb:23:0e:aa:5f:44:61:1d:cc:93:28:0b:be: 86:b7:05:b5:cc:23:da:1c:4d:75:f4:df:f1:d8:de: f4:5e:95:16:89:b2:fb:db:fc:16:85:6b:95:2e:b5: 62:28:c6:af:c0:c1:07:75:18:ec:a9:21:f0:26:7b: f7:16:b3:a5:55:9f:20:bd:ab:c5:54:8e:1d:4b:f4: 65:a4:bf:86:06:ea:ca:75:0b:a5:f2:ae:17:03:71: 67:5d:e4:24:13:ba:47:7d:53:e9:de:fc:bc:1d:8f: 2b:ed:dc:b1:ca:86:d3:e7:0f:d8:c1:4e:03:c6:32: bc:22:7f:c2:1a:f3:6d:a3:94:88:be:5e:d6:81:89: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B5:EF:19:93:EE:37:7D:4E:06:02:1C:DD:9F:68:72:19:78:F1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl X509v3 Authority Key Identifier: keyid:03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer sbgp-ipAddrBlock: critical IPv4: 23.29.224.0/19 23.91.32.0/19 45.73.192.0/18 104.194.160.0/19 104.241.64.0/18 107.167.128.0/19 108.59.128.0/20 108.174.32.0/20 169.197.192.0/18 192.170.160.0/19 198.57.96.0/19 198.167.144.0/20 199.21.120.0/21 199.84.96.0/19 199.115.232.0/21 199.204.176.0/21 207.2.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b7:25:af:96:c4:52:96:00:96:a1:10:32:dd:9c:fa:29:2e: ee:8d:5d:05:12:e9:50:cb:53:47:f7:97:b3:48:b6:d0:e5:7b: 93:90:c4:e1:e6:00:09:fb:b5:ad:8e:bd:77:fe:93:9c:d7:c1: 4d:e2:94:18:30:a2:c8:d5:17:66:af:b7:88:66:53:30:14:ad: bd:a3:ad:34:62:32:81:20:b3:b2:94:4e:28:52:7f:ca:c7:10: 5b:83:c0:cd:74:94:ac:f1:30:93:49:5d:c1:bb:40:cd:25:70: 19:93:90:dc:c7:87:fb:86:d4:c4:03:c5:00:99:98:f6:25:4b: 5f:e9:ed:a3:8b:91:e2:50:67:09:fc:05:15:ce:90:e8:48:2e: d8:7c:e3:90:57:51:3f:33:09:17:5c:12:06:0a:f6:66:59:73: 69:78:5b:1e:cc:da:67:1a:59:c2:88:d7:31:15:53:87:14:75: 91:ba:2e:84:64:38:ed:c4:ff:3a:dc:ff:d6:f9:49:d9:6e:42: 9f:39:55:62:94:e8:d1:c2:7a:77:b7:f5:22:7e:3e:e3:6b:e9: 78:81:52:93:ca:59:01:c8:3a:d8:b2:a5:f2:5d:e8:40:90:79: a4:dc:82:2a:00:fb:a4:cd:20:f2:41:1e:0a:ba:f9:88:e0:25: 5b:08:d8:f2 -----BEGIN CERTIFICATE----- MIIGozCCBYugAwIBAgIUAQ0Mn0MoWE8pV88saOsry2VX1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVmMmM1MGQtYjFmMy00NTVmLTgzNWYtNDkzZmIzMmEz OWY5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NzZmMThhMjItZjkwMC00MzBlLWJlZDEtZTM5ODEwZDhmZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIQlfbGggIc5nnzREUwJ/x0wPonripPIcBnw qQfT1465N5jOYMAhVAXG1JjZlJtOF0YpgmjUGTbYGQyBgOCZ1Ui8A90angJjtsz5 +9RlhbZm+GInRZRJ7vPt2hIW+VYEGEKNy9yTVnAz/KRRSlTlTrp6LWQAqe6AOfsj DqpfRGEdzJMoC76GtwW1zCPaHE119N/x2N70XpUWibL72/wWhWuVLrViKMavwMEH dRjsqSHwJnv3FrOlVZ8gvavFVI4dS/RlpL+GBurKdQul8q4XA3FnXeQkE7pHfVPp 3vy8HY8r7dyxyobT5w/YwU4DxjK8In/CGvNto5SIvl7WgYkQ1wIDAQABo4IDtTCC A7EwHQYDVR0OBBYEFCK17xmT7jd9TgYCHN2faHIZePGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yNWYy YzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNmYjMyYTM5ZjkvZTcxMzM2NjctOWQyMi0z MTg1LWE1ZDItNGQ5ZWU1ZmMxOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjVmMmM1MGQtYjFmMy00NTVmLTgz NWYtNDkzZmIzMmEzOWY5LzI1ZjJjNTBkLWIxZjMtNDU1Zi04MzVmLTQ5M2ZiMzJh MzlmOS5jcmwwHwYDVR0jBBgwFoAUA2HrjpzzhYBz3T3eKA29cg43KvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yNWYyYzUwZC1iMWYzLTQ1NWYtODM1Zi00OTNm YjMyYTM5ZjkuY2VyMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQFFx3gAwQF F1sgAwQGLUnAAwQFaMKgAwQGaPFAAwQFa6eAAwQEbDuAAwQEbK4gAwQGqcXAAwQF wKqgAwQFxjlgAwQExqeQAwQDxxV4AwQFx1RgAwQDx3PoAwQDx8ywAwQDzwJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW3Ja+WxFKWAJahEDLdnPopLu6NXQUS6VDLU0f3l7NIttDle5OQxOHm AAn7ta2OvXf+k5zXwU3ilBgwosjVF2avt4hmUzAUrb2jrTRiMoEgs7KUTihSf8rH EFuDwM10lKzxMJNJXcG7QM0lcBmTkNzHh/uG1MQDxQCZmPYlS1/p7aOLkeJQZwn8 BRXOkOhILth845BXUT8zCRdcEgYK9mZZc2l4Wx7M2mcaWcKI1zEVU4cUdZG6LoRk OO3E/zrc/9b5SdluQp85VWKU6NHCene39SJ+PuNr6XiBUpPKWQHIOtiypfJd6ECQ eaTcgioA+6TNIPJBHgq6+YjgJVsI2PI= -----END CERTIFICATE-----Generated at Sun Sep 27 03:01:14 2026 by rpki-client