$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa File: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (raw, json) Hash identifier: Adv/k4WjvgMzBfEoaQEqEOfAv2lokquKfVbyGhaNkqM= Subject key identifier: B1:00:64:2F:33:53:19:AE:6F:7F:2A:27:C5:5D:D3:9B:A7:08:A9:3F Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584D3DFFAEE3381B4962226A0C90 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 393524 IP address blocks: 23.134.16.0/24 maxlen: 24 23.134.17.0/24 maxlen: 24 23.135.18.0/24 maxlen: 24 104.192.96.0/22 maxlen: 22 104.245.136.0/22 maxlen: 22 2602:ff44::/36 maxlen: 36 2602:ff44::/38 maxlen: 38 2602:ff44:400::/38 maxlen: 38 2602:ff44:800::/38 maxlen: 38 2602:ff44:c00::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ae:e3:38:1b:49:62:22:6a:0c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=33d2c52e-1edd-4aa0-a07f-0db5ff6d5fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:dc:30:e6:eb:cb:32:d1:22:8c:1e:94:90: 75:21:f2:b1:0c:18:85:e5:d5:75:83:7d:19:eb:f0: 3b:db:81:81:33:70:f2:0c:c1:34:81:8a:37:37:28: fe:65:1e:9a:27:a1:12:c4:82:d4:e6:7b:fa:21:cb: 4c:10:05:2a:36:53:61:a2:02:c9:05:49:14:22:61: 10:b6:fa:cd:e8:a1:f2:7a:94:0e:ce:30:4c:cf:02: 24:6d:73:32:42:22:74:50:63:e5:2a:d2:88:91:d0: 97:64:90:fc:8c:f9:ad:4a:22:38:70:8f:70:51:63: 20:0d:a9:5a:19:49:54:f2:c6:51:1b:cc:3d:3b:c7: f8:53:5b:1f:14:ad:0b:e0:d3:8d:f0:68:00:c5:f5: 00:c2:e5:ac:c6:70:0f:13:2a:6b:1a:46:ef:de:8d: 67:5c:58:49:b0:e1:d0:11:b4:39:88:e5:44:54:ef: 29:74:17:30:0f:1c:a9:eb:73:0e:6c:7d:60:a4:a9: 9d:c3:d9:db:46:47:a5:a6:76:81:91:78:2f:71:f9: e6:f2:b8:5f:12:fb:be:1c:2e:b9:e7:9f:bc:de:ce: 95:4a:33:3f:35:0a:83:75:1a:99:aa:0f:64:d4:25: 30:9e:89:f3:85:1b:ef:2d:b2:74:5a:9f:0e:06:08: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:00:64:2F:33:53:19:AE:6F:7F:2A:27:C5:5D:D3:9B:A7:08:A9:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: 23.134.16.0/23 23.135.18.0/24 104.192.96.0/22 104.245.136.0/22 IPv6: 2602:ff44::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:87:ed:56:b2:1e:24:5b:57:df:87:1e:12:10:15:c0:7c:57: 2e:41:37:02:8f:3c:6e:1f:c5:7f:a1:80:4a:6e:f3:76:2c:d9: 7c:92:e2:7d:49:46:dc:24:87:67:7c:71:34:d7:50:58:d3:23: ab:13:54:45:eb:b2:0d:95:b9:e8:dc:0b:81:27:ed:66:0d:4e: 36:5b:e9:9d:9f:37:fb:13:8f:35:14:22:0a:a8:6a:b8:43:4a: b7:fb:05:27:af:3e:7d:6a:eb:3e:9e:c9:bd:b8:3f:78:74:45: 48:73:d6:bd:b5:b7:ad:e1:04:91:ef:ba:bd:00:32:22:1b:82: 56:32:9b:69:df:11:a3:4a:94:61:41:a6:cf:fa:7d:fe:48:75: d5:ed:32:6d:5b:e2:94:f7:1e:0a:b5:57:b4:36:5f:e8:ea:5e: 21:52:ab:2e:c7:8c:f3:d0:82:dd:fc:a3:b7:a8:ba:6a:01:13: 42:e1:03:11:28:ab:9f:a4:ec:23:aa:ca:36:a9:7b:f3:fd:f3: 91:58:24:65:b7:b1:f2:14:2d:4f:0e:4e:a4:38:ce:27:59:1a: 0c:05:1e:68:cf:25:d1:5d:8f:d8:c6:ef:42:fc:aa:19:c2:b8: 9b:1a:90:be:50:fd:3e:3e:ce:c8:78:c2:7e:e3:91:cf:00:90: 37:d6:a0:2b -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE09/67jOBtJYiJqDJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MzNkMmM1MmUtMWVkZC00YWEwLWEwN2YtMGRiNWZmNmQ1ZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNrcMObryzLRIowelJB1IfKxDBiF5dV1g30Z 6/A724GBM3DyDME0gYo3Nyj+ZR6aJ6ESxILU5nv6IctMEAUqNlNhogLJBUkUImEQ tvrN6KHyepQOzjBMzwIkbXMyQiJ0UGPlKtKIkdCXZJD8jPmtSiI4cI9wUWMgDala GUlU8sZRG8w9O8f4U1sfFK0L4NON8GgAxfUAwuWsxnAPEyprGkbv3o1nXFhJsOHQ EbQ5iOVEVO8pdBcwDxyp63MObH1gpKmdw9nbRkelpnaBkXgvcfnm8rhfEvu+HC65 55+83s6VSjM/NQqDdRqZqg9k1CUwnonzhRvvLbJ0Wp8OBggyFwIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFLEAZC8zUxmub38qJ8Vd05unCKk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMDdhZmRiNWItZjMzOS0z YTFmLTkwOGEtMmI1YzkyMDQ0ZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQBF4YQAwQA F4cSAwQCaMBgAwQCaPWIMA4EAgACMAgDBgQmAv9EADBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASh+1Wsh4k W1ffhx4SEBXAfFcuQTcCjzxuH8V/oYBKbvN2LNl8kuJ9SUbcJIdnfHE011BY0yOr E1RF67INlbno3AuBJ+1mDU42W+mdnzf7E481FCIKqGq4Q0q3+wUnrz59aus+nsm9 uD94dEVIc9a9tbet4QSR77q9ADIiG4JWMptp3xGjSpRhQabP+n3+SHXV7TJtW+KU 9x4KtVe0Nl/o6l4hUqsux4zz0ILd/KO3qLpqARNC4QMRKKufpOwjqso2qXvz/fOR WCRlt7HyFC1PDk6kOM4nWRoMBR5ozyXRXY/Yxu9C/KoZwribGpC+UP0+Ps7IeMJ+ 45HPAJA31qAr -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:04 2026 by rpki-client