$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa File: 20081892-0240-315f-9e2a-143133652b88.roa (raw, json) Hash identifier: vriZwhgtxKALZl6PKoPL7Q0fnPtGORjZnyRWCAbgSvg= Subject key identifier: 67:60:E1:95:8E:A9:4B:55:1C:E6:44:CA:2B:74:C8:C1:71:1B:CF:75 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F74B82EAE8414A69617827440 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 11776 IP address blocks: 23.244.44.0/22 maxlen: 22 23.244.128.0/19 maxlen: 19 23.244.192.0/19 maxlen: 19 23.245.0.0/20 maxlen: 20 23.245.176.0/20 maxlen: 20 64.186.84.0/24 maxlen: 24 65.175.128.0/17 maxlen: 17 65.175.160.0/19 maxlen: 19 65.175.192.0/18 maxlen: 18 66.212.192.0/19 maxlen: 19 67.231.64.0/20 maxlen: 20 69.161.64.0/20 maxlen: 20 69.161.72.0/21 maxlen: 21 72.9.16.0/20 maxlen: 20 74.214.52.0/24 maxlen: 24 138.207.192.0/20 maxlen: 20 138.207.224.0/21 maxlen: 21 146.168.56.0/21 maxlen: 21 159.250.16.0/21 maxlen: 21 162.218.144.0/22 maxlen: 22 162.218.144.0/24 maxlen: 24 172.85.28.0/22 maxlen: 22 172.110.92.0/22 maxlen: 22 173.44.68.0/23 maxlen: 23 173.44.84.0/22 maxlen: 22 173.44.85.0/24 maxlen: 24 173.44.104.0/24 maxlen: 24 173.44.124.0/22 maxlen: 22 192.222.10.0/23 maxlen: 23 198.52.9.0/24 maxlen: 24 198.52.10.0/24 maxlen: 24 198.52.14.0/24 maxlen: 24 198.133.12.0/23 maxlen: 23 204.14.184.0/21 maxlen: 21 206.53.64.0/19 maxlen: 19 208.90.139.0/24 maxlen: 24 208.103.64.0/20 maxlen: 20 208.103.72.0/21 maxlen: 21 209.42.134.0/24 maxlen: 24 209.196.168.0/21 maxlen: 21 209.196.168.0/24 maxlen: 24 216.10.168.0/24 maxlen: 24 216.246.128.0/19 maxlen: 19 216.246.144.0/20 maxlen: 20 216.255.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2e:ae:84:14:a6:96:17:82:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=768756e8-2656-4c39-91f5-2dacf71d0db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:41:12:3e:05:3c:20:bd:a8:fb:c3:78:dd: 58:84:d2:48:54:49:a5:05:e9:05:30:39:8d:95:a1: 49:16:77:fa:cd:39:89:1c:f5:05:7d:69:d4:56:a0: 3e:0c:d6:a8:27:fd:79:6f:ee:09:06:20:83:1a:3e: 5b:01:1d:c2:8a:4d:94:c7:0a:76:67:6d:59:ba:00: 80:d9:ed:b2:ce:c7:70:c1:6d:7f:f7:c1:31:80:59: 2a:8a:61:28:84:37:29:2a:c1:ad:5e:48:1e:54:91: 40:2e:3d:0d:94:90:7b:17:1b:a8:02:d1:2a:56:a2: cf:7f:7f:26:7c:15:ba:68:26:d1:32:0e:dc:1d:f2: da:ff:4c:ea:a3:07:c0:29:3a:c1:82:33:05:36:65: 02:a5:f2:c4:a0:a8:88:34:9f:f8:83:6b:ac:48:7a: 70:07:0e:f3:2e:ae:8b:f6:3f:25:a4:d1:ae:1d:ae: bb:d8:2b:9d:1b:18:5e:d7:46:bd:8a:f3:ab:5e:6e: 92:ac:5f:34:45:8c:51:6e:d9:5c:cd:84:aa:97:28: 9f:61:a2:69:d9:ec:a1:10:5a:f7:73:51:37:2c:bd: 19:fe:48:fe:e6:af:a5:e3:56:a6:5e:58:7b:67:59: 41:3e:9e:da:e2:8b:f2:c5:7c:c2:73:02:d3:60:44: 8b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:60:E1:95:8E:A9:4B:55:1C:E6:44:CA:2B:74:C8:C1:71:1B:CF:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.44.0/22 23.244.128.0/19 23.244.192.0/19 23.245.0.0/20 23.245.176.0/20 64.186.84.0/24 65.175.128.0/17 66.212.192.0/19 67.231.64.0/20 69.161.64.0/20 72.9.16.0/20 74.214.52.0/24 138.207.192.0/20 138.207.224.0/21 146.168.56.0/21 159.250.16.0/21 162.218.144.0/22 172.85.28.0/22 172.110.92.0/22 173.44.68.0/23 173.44.84.0/22 173.44.104.0/24 173.44.124.0/22 192.222.10.0/23 198.52.9.0-198.52.10.255 198.52.14.0/24 198.133.12.0/23 204.14.184.0/21 206.53.64.0/19 208.90.139.0/24 208.103.64.0/20 209.42.134.0/24 209.196.168.0/21 216.10.168.0/24 216.246.128.0/19 216.255.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9c:56:f5:f2:90:34:d0:6f:3a:32:62:6c:79:a2:e4:a7:c4: b5:c0:41:51:6e:70:ac:53:5a:f3:bd:68:be:30:60:4b:bc:2b: 86:e8:e0:70:4a:28:71:a7:6f:da:29:a3:11:16:62:26:fa:96: 91:fa:51:93:0f:a2:7c:0e:bb:b9:87:a6:74:8a:49:08:63:80: 05:a2:1e:22:20:05:0c:c0:d1:92:7b:10:60:71:72:51:bb:4c: 77:5a:ae:2c:63:a8:43:c8:0b:b5:ef:9a:e2:c0:20:22:29:b6: a0:31:3c:08:0b:43:5e:c2:04:cd:cd:2a:8b:ea:27:c4:66:91: e6:cc:e2:d9:7c:39:97:40:e8:83:79:a0:7a:fd:58:67:b6:62: 0f:8c:36:8b:df:14:33:ae:48:7d:31:24:8a:f0:6f:6a:c8:ae: 21:68:f2:d2:b9:31:e7:4d:24:83:0e:a2:60:ac:da:8c:0b:30: d7:5c:41:a5:a8:7f:94:03:12:31:6b:a8:87:92:4b:cc:52:fa: f0:dc:39:65:16:b8:94:e8:d3:20:ac:ea:ad:26:ae:dd:73:54: 5f:70:54:d3:10:a7:74:63:3b:aa:f2:62:a2:f2:a6:e7:65:cf: 1a:01:be:55:23:4c:47:5c:b5:0a:b3:d9:24:3e:3a:78:60:16: a5:7f:7d:1b -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE90uC6uhBSmlheCdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk NzY4NzU2ZTgtMjY1Ni00YzM5LTkxZjUtMmRhY2Y3MWQwZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWVBEj4FPCC9qPvDeN1YhNJIVEmlBekFMDmN laFJFnf6zTmJHPUFfWnUVqA+DNaoJ/15b+4JBiCDGj5bAR3Cik2Uxwp2Z21ZugCA 2e2yzsdwwW1/98ExgFkqimEohDcpKsGtXkgeVJFALj0NlJB7FxuoAtEqVqLPf38m fBW6aCbRMg7cHfLa/0zqowfAKTrBgjMFNmUCpfLEoKiINJ/4g2usSHpwBw7zLq6L 9j8lpNGuHa672CudGxhe10a9ivOrXm6SrF80RYxRbtlczYSqlyifYaJp2eyhEFr3 c1E3LL0Z/kj+5q+l41amXlh7Z1lBPp7a4ovyxXzCcwLTYESLQQIDAQABo4IENDCC BDAwHQYDVR0OBBYEFGdg4ZWOqUtVHOZEyit0yMFxG891MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvMjAwODE4OTItMDI0MC0z MTVmLTllMmEtMTQzMTMzNjUyYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAIX 9CwDBAUX9IADBAUX9MADBAQX9QADBAQX9bADBABAulQDBAdBr4ADBAVC1MADBARD 50ADBARFoUADBARICRADBABK1jQDBASKz8ADBAOKz+ADBAOSqDgDBAOf+hADBAKi 2pADBAKsVRwDBAKsblwDBAGtLEQDBAKtLFQDBACtLGgDBAKtLHwDBAHA3gowDAME AMY0CQMEAMY0CgMEAMY0DgMEAcaFDAMEA8wOuAMEBc41QAMEANBaiwMEBNBnQAME ANEqhgMEA9HEqAMEANgKqAMEBdj2gAMEBNj/oDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPnFb18pA00G86 MmJseaLkp8S1wEFRbnCsU1rzvWi+MGBLvCuG6OBwSihxp2/aKaMRFmIm+paR+lGT D6J8Dru5h6Z0ikkIY4AFoh4iIAUMwNGSexBgcXJRu0x3Wq4sY6hDyAu175riwCAi KbagMTwIC0NewgTNzSqL6ifEZpHmzOLZfDmXQOiDeaB6/VhntmIPjDaL3xQzrkh9 MSSK8G9qyK4haPLSuTHnTSSDDqJgrNqMCzDXXEGlqH+UAxIxa6iHkkvMUvrw3Dll FriU6NMgrOqtJq7dc1RfcFTTEKd0Yzuq8mKi8qbnZc8aAb5VI0xHXLUKs9kkPjp4 YBalf30b -----END CERTIFICATE-----Generated at Sun Oct 18 17:46:06 2026 by rpki-client