$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa File: 20081892-0240-315f-9e2a-143133652b88.roa (raw, json) Hash identifier: vtZm8vEJVaDxC0sFnR5ytGJlazi6+h8MEq7WnYHqvag= Subject key identifier: B5:E3:6A:CF:8E:84:09:6A:E5:5B:EE:6B:DB:A9:D9:EC:6A:39:25:95 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584E337F10FCE19B5B4074628C00 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa Signing time: Wed 17 Jun 2026 11:30:46 +0000 ROA not before: Wed 17 Jun 2026 11:30:46 +0000 ROA not after: Mon 14 Sep 2026 12:52:33 +0000 asID: 11776 IP address blocks: 23.244.44.0/22 maxlen: 22 23.244.128.0/19 maxlen: 19 23.244.192.0/19 maxlen: 19 23.245.0.0/20 maxlen: 20 23.245.176.0/20 maxlen: 20 64.186.84.0/24 maxlen: 24 65.175.128.0/17 maxlen: 17 65.175.160.0/19 maxlen: 19 65.175.192.0/18 maxlen: 18 66.212.192.0/19 maxlen: 19 67.231.64.0/20 maxlen: 20 69.161.64.0/20 maxlen: 20 69.161.72.0/21 maxlen: 21 72.9.16.0/20 maxlen: 20 74.214.52.0/24 maxlen: 24 138.207.192.0/20 maxlen: 20 138.207.224.0/21 maxlen: 21 146.168.56.0/21 maxlen: 21 159.250.16.0/21 maxlen: 21 162.218.144.0/22 maxlen: 22 162.218.144.0/24 maxlen: 24 172.85.28.0/22 maxlen: 22 172.110.92.0/22 maxlen: 22 173.44.68.0/23 maxlen: 23 173.44.84.0/22 maxlen: 22 173.44.85.0/24 maxlen: 24 173.44.104.0/24 maxlen: 24 173.44.124.0/22 maxlen: 22 192.222.10.0/23 maxlen: 23 198.52.9.0/24 maxlen: 24 198.52.10.0/24 maxlen: 24 198.52.14.0/24 maxlen: 24 198.133.12.0/23 maxlen: 23 204.14.184.0/21 maxlen: 21 206.53.64.0/19 maxlen: 19 208.90.139.0/24 maxlen: 24 208.103.64.0/20 maxlen: 20 208.103.72.0/21 maxlen: 21 209.42.134.0/24 maxlen: 24 209.196.168.0/21 maxlen: 21 209.196.168.0/24 maxlen: 24 216.10.168.0/24 maxlen: 24 216.246.128.0/19 maxlen: 19 216.246.144.0/20 maxlen: 20 216.255.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:33:7f:10:fc:e1:9b:5b:40:74:62:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Jun 17 11:30:46 2026 GMT Not After : Sep 14 12:52:33 2026 GMT Subject: CN=f465e464-d3e0-456b-97ab-719bfcbe63cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:20:a0:68:dd:d5:45:fe:33:62:96:5a:51: 2b:b5:ed:5e:98:c6:9c:af:1c:04:6e:38:55:53:c8: 4e:94:76:ae:92:38:11:2f:a8:2e:d3:01:bd:27:37: 9f:f6:82:96:90:e5:f1:90:c5:18:cb:23:01:a1:58: ab:92:02:f3:f6:e4:2a:26:d3:cf:c5:82:8b:52:81: d2:4f:e0:72:87:bd:67:5d:3f:7f:a5:8c:2b:c0:73: a8:84:26:05:b8:fb:75:1e:01:c2:63:e6:df:01:40: 75:91:4c:4b:8b:d4:e1:39:83:af:c9:30:3a:5c:3b: 4f:a5:a2:23:d0:db:ba:97:80:00:f7:2b:cc:5c:95: eb:9b:8f:8d:00:49:ef:de:ea:8c:46:cc:c3:3b:4a: 66:9a:b5:f6:3a:c6:b6:f2:b6:bc:fe:8f:5f:e1:94: 2d:4c:2e:a7:47:eb:0e:e9:b7:7a:a0:1f:d4:cc:a3: ac:64:61:ca:c3:87:44:07:b6:45:4c:5b:02:f5:d2: 89:a0:49:fc:5f:8f:76:fd:3f:82:16:a1:87:d8:d1: bc:3b:ac:b4:e4:72:34:18:48:15:b4:5c:32:50:18: 3d:fe:b2:8d:68:ca:cc:7f:02:0e:68:e6:c3:ef:44: b9:b2:d4:44:bf:89:ed:9e:52:89:87:91:df:00:be: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E3:6A:CF:8E:84:09:6A:E5:5B:EE:6B:DB:A9:D9:EC:6A:39:25:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.44.0/22 23.244.128.0/19 23.244.192.0/19 23.245.0.0/20 23.245.176.0/20 64.186.84.0/24 65.175.128.0/17 66.212.192.0/19 67.231.64.0/20 69.161.64.0/20 72.9.16.0/20 74.214.52.0/24 138.207.192.0/20 138.207.224.0/21 146.168.56.0/21 159.250.16.0/21 162.218.144.0/22 172.85.28.0/22 172.110.92.0/22 173.44.68.0/23 173.44.84.0/22 173.44.104.0/24 173.44.124.0/22 192.222.10.0/23 198.52.9.0-198.52.10.255 198.52.14.0/24 198.133.12.0/23 204.14.184.0/21 206.53.64.0/19 208.90.139.0/24 208.103.64.0/20 209.42.134.0/24 209.196.168.0/21 216.10.168.0/24 216.246.128.0/19 216.255.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0f:87:5d:3e:4f:af:47:5d:24:a9:0c:8e:a4:e6:e4:95:2a: 3c:40:de:73:d8:22:ee:b2:98:93:f8:25:59:80:c7:d9:8a:ea: 40:bb:21:f2:a2:6e:49:45:7e:9a:09:f2:b8:74:38:a4:f0:11: fc:78:3c:64:18:be:a5:59:c7:83:76:09:2f:61:0b:be:89:a4: be:90:6f:97:ee:42:5e:8f:b9:b6:e9:f7:eb:60:48:25:64:dd: a7:75:65:92:ae:6f:a7:82:cc:7f:3a:bd:d8:d9:b2:6d:7e:10: 6a:07:1c:e0:52:91:53:20:a5:17:90:6f:37:3d:83:0c:e9:4d: 46:36:d0:56:a9:ff:3d:4a:47:f7:2f:7c:8e:67:2d:28:be:41: 71:1d:20:c5:c3:0b:c3:65:95:24:54:5f:e6:f8:f5:96:17:61: a5:ce:79:ba:24:94:49:4e:ae:c7:81:43:11:a5:cf:f8:7c:d4: b7:6d:7e:9b:dc:07:4b:d2:ae:80:46:71:b8:57:34:0f:90:51: c1:f3:29:4a:07:b6:94:c0:2a:9d:67:86:92:a5:21:4a:67:5c: 8e:c8:84:aa:ab:b6:58:f0:0a:d4:63:ec:13:04:c2:d7:07:8b: f5:57:aa:c0:38:d4:49:e9:f0:bf:45:0a:ac:d4:84:17:bb:40: 60:e2:91:3a -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE4zfxD84ZtbQHRijAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDYxNzExMzA0NloXDTI2MDkxNDEyNTIzM1owLzEtMCsGA1UEAxMk ZjQ2NWU0NjQtZDNlMC00NTZiLTk3YWItNzE5YmZjYmU2M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eYgoGjd1UX+M2KWWlErte1emMacrxwEbjhV U8hOlHaukjgRL6gu0wG9Jzef9oKWkOXxkMUYyyMBoVirkgLz9uQqJtPPxYKLUoHS T+Byh71nXT9/pYwrwHOohCYFuPt1HgHCY+bfAUB1kUxLi9ThOYOvyTA6XDtPpaIj 0Nu6l4AA9yvMXJXrm4+NAEnv3uqMRszDO0pmmrX2Osa28ra8/o9f4ZQtTC6nR+sO 6bd6oB/UzKOsZGHKw4dEB7ZFTFsC9dKJoEn8X492/T+CFqGH2NG8O6y05HI0GEgV tFwyUBg9/rKNaMrMfwIOaObD70S5stREv4ntnlKJh5HfAL6ASwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFLXjas+OhAlq5Vvua9up2exqOSWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvMjAwODE4OTItMDI0MC0z MTVmLTllMmEtMTQzMTMzNjUyYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAIX 9CwDBAUX9IADBAUX9MADBAQX9QADBAQX9bADBABAulQDBAdBr4ADBAVC1MADBARD 50ADBARFoUADBARICRADBABK1jQDBASKz8ADBAOKz+ADBAOSqDgDBAOf+hADBAKi 2pADBAKsVRwDBAKsblwDBAGtLEQDBAKtLFQDBACtLGgDBAKtLHwDBAHA3gowDAME AMY0CQMEAMY0CgMEAMY0DgMEAcaFDAMEA8wOuAMEBc41QAMEANBaiwMEBNBnQAME ANEqhgMEA9HEqAMEANgKqAMEBdj2gAMEBNj/oDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/D4ddPk+vR10k qQyOpObklSo8QN5z2CLuspiT+CVZgMfZiupAuyHyom5JRX6aCfK4dDik8BH8eDxk GL6lWceDdgkvYQu+iaS+kG+X7kJej7m26ffrYEglZN2ndWWSrm+ngsx/Or3Y2bJt fhBqBxzgUpFTIKUXkG83PYMM6U1GNtBWqf89Skf3L3yOZy0ovkFxHSDFwwvDZZUk VF/m+PWWF2Glznm6JJRJTq7HgUMRpc/4fNS3bX6b3AdL0q6ARnG4VzQPkFHB8ylK B7aUwCqdZ4aSpSFKZ1yOyISqq7ZY8ArUY+wTBMLXB4v1V6rAONRJ6fC/RQqs1IQX u0Bg4pE6 -----END CERTIFICATE-----Generated at Fri Jul 17 05:21:32 2026 by rpki-client