$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa File: 20081892-0240-315f-9e2a-143133652b88.roa (raw, json) Hash identifier: hF4MXMLwpWDWMaozyP7YwwL2RDmgOejWfn+tzV+Xl20= Subject key identifier: 7B:A6:B0:36:C2:01:13:1C:52:03:16:8B:F6:FE:C2:3C:C3:05:8B:F4 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584ED2CC7EFC543F04C5431D7F80 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 11776 IP address blocks: 23.244.44.0/22 maxlen: 22 23.244.128.0/19 maxlen: 19 23.244.192.0/19 maxlen: 19 23.245.0.0/20 maxlen: 20 23.245.176.0/20 maxlen: 20 64.186.84.0/24 maxlen: 24 65.175.128.0/17 maxlen: 17 65.175.160.0/19 maxlen: 19 65.175.192.0/18 maxlen: 18 66.212.192.0/19 maxlen: 19 67.231.64.0/20 maxlen: 20 69.161.64.0/20 maxlen: 20 69.161.72.0/21 maxlen: 21 72.9.16.0/20 maxlen: 20 74.214.52.0/24 maxlen: 24 138.207.192.0/20 maxlen: 20 138.207.224.0/21 maxlen: 21 146.168.56.0/21 maxlen: 21 159.250.16.0/21 maxlen: 21 162.218.144.0/22 maxlen: 22 162.218.144.0/24 maxlen: 24 172.85.28.0/22 maxlen: 22 172.110.92.0/22 maxlen: 22 173.44.68.0/23 maxlen: 23 173.44.84.0/22 maxlen: 22 173.44.85.0/24 maxlen: 24 173.44.104.0/24 maxlen: 24 173.44.124.0/22 maxlen: 22 192.222.10.0/23 maxlen: 23 198.52.9.0/24 maxlen: 24 198.52.10.0/24 maxlen: 24 198.52.14.0/24 maxlen: 24 198.133.12.0/23 maxlen: 23 204.14.184.0/21 maxlen: 21 206.53.64.0/19 maxlen: 19 208.90.139.0/24 maxlen: 24 208.103.64.0/20 maxlen: 20 208.103.72.0/21 maxlen: 21 209.42.134.0/24 maxlen: 24 209.196.168.0/21 maxlen: 21 209.196.168.0/24 maxlen: 24 216.10.168.0/24 maxlen: 24 216.246.128.0/19 maxlen: 19 216.246.144.0/20 maxlen: 20 216.255.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:7e:fc:54:3f:04:c5:43:1d:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=ca332969-a74d-4a16-b3bc-241620d1cbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:72:29:3a:80:e5:43:08:69:d6:70:41:78: e9:76:e8:e8:b3:1a:fe:22:12:a4:66:e9:8b:df:11: 46:91:0c:f5:47:db:69:8b:eb:33:aa:25:a2:cb:10: 04:04:4a:1d:e4:1a:99:31:86:ed:83:1a:74:ee:04: 4d:ed:9d:85:60:80:44:fa:a7:47:d0:d3:cd:ab:06: da:d4:23:0f:d2:2b:96:9e:13:63:34:31:1a:7d:1c: 32:e7:4c:91:9d:2f:3e:5c:71:f3:3c:df:f6:14:60: f7:4e:22:e9:59:d9:a9:34:6e:a5:37:1e:f3:bd:10: 73:5e:26:9a:62:f8:7b:76:c3:63:99:d9:3c:23:3c: 38:41:4e:6e:31:8e:d6:7e:57:e6:21:b1:c5:39:78: c9:96:6c:fc:ed:89:e0:80:bc:c4:65:41:c4:ad:74: df:57:f9:33:da:14:75:97:fe:6e:0c:ca:b3:29:a1: 16:ec:e5:64:0c:6c:d4:b6:09:39:45:db:f6:f5:4c: be:3a:43:72:22:66:7a:04:05:df:e2:3a:3c:06:5f: ce:7a:50:74:ab:8c:77:81:13:64:d8:52:38:bc:c0: 8c:47:44:25:78:bd:59:e9:b3:a4:b1:b8:9f:53:d6: 93:68:71:05:42:23:e3:92:01:41:fa:3f:95:35:51: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A6:B0:36:C2:01:13:1C:52:03:16:8B:F6:FE:C2:3C:C3:05:8B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/20081892-0240-315f-9e2a-143133652b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.44.0/22 23.244.128.0/19 23.244.192.0/19 23.245.0.0/20 23.245.176.0/20 64.186.84.0/24 65.175.128.0/17 66.212.192.0/19 67.231.64.0/20 69.161.64.0/20 72.9.16.0/20 74.214.52.0/24 138.207.192.0/20 138.207.224.0/21 146.168.56.0/21 159.250.16.0/21 162.218.144.0/22 172.85.28.0/22 172.110.92.0/22 173.44.68.0/23 173.44.84.0/22 173.44.104.0/24 173.44.124.0/22 192.222.10.0/23 198.52.9.0-198.52.10.255 198.52.14.0/24 198.133.12.0/23 204.14.184.0/21 206.53.64.0/19 208.90.139.0/24 208.103.64.0/20 209.42.134.0/24 209.196.168.0/21 216.10.168.0/24 216.246.128.0/19 216.255.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:4c:05:e5:3c:87:c3:70:f7:43:ea:6e:a5:41:d1:5f:87:76: a5:d2:54:c7:dd:9d:35:10:f1:55:f3:05:76:7e:eb:6f:20:c9: 74:ae:17:81:ca:78:60:fe:9e:5d:ab:8d:b4:c7:20:42:1f:43: 95:23:b2:c0:c8:bc:74:2a:1d:e4:c8:54:22:13:6b:f8:26:5d: eb:21:ad:14:fa:c6:fc:e2:d4:d7:47:9f:9f:ae:e4:2d:53:ab: 51:84:31:66:70:b7:dd:19:f9:d4:6d:3f:5b:3f:19:df:0f:a8: 9e:ab:8d:fa:a8:56:a3:c5:57:5a:a8:8a:6a:11:94:78:55:1c: 5b:3d:b0:69:6d:2a:86:f5:95:9f:33:bf:d7:c3:e3:e4:75:5f: a0:40:f2:a5:d6:5e:bb:dd:02:32:3d:51:a0:a9:b8:6d:e1:d7: 0a:ff:e8:71:c9:24:7e:9d:7a:fb:69:ca:d2:f2:2d:79:9d:8e: 22:64:b7:97:fc:8e:a7:3b:eb:c4:74:26:b9:41:70:4c:c5:c5: a1:6d:81:9b:a0:8e:9f:8e:9f:53:9e:d9:1e:74:52:a0:bc:74: 92:09:39:b2:a7:ef:9a:57:19:6a:47:86:44:84:a1:f8:63:7c: 71:16:db:d3:de:5c:8a:97:8c:23:f5:97:14:c2:16:cb:72:4c: 53:fa:25:dc -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE7SzH78VD8ExUMdf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk Y2EzMzI5NjktYTc0ZC00YTE2LWIzYmMtMjQxNjIwZDFjYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNyKTqA5UMIadZwQXjpdujosxr+IhKkZumL 3xFGkQz1R9tpi+szqiWiyxAEBEod5BqZMYbtgxp07gRN7Z2FYIBE+qdH0NPNqwba 1CMP0iuWnhNjNDEafRwy50yRnS8+XHHzPN/2FGD3TiLpWdmpNG6lNx7zvRBzXiaa Yvh7dsNjmdk8Izw4QU5uMY7WflfmIbHFOXjJlmz87YnggLzEZUHErXTfV/kz2hR1 l/5uDMqzKaEW7OVkDGzUtgk5Rdv29Uy+OkNyImZ6BAXf4jo8Bl/OelB0q4x3gRNk 2FI4vMCMR0QleL1Z6bOksbifU9aTaHEFQiPjkgFB+j+VNVFTSQIDAQABo4IENDCC BDAwHQYDVR0OBBYEFHumsDbCARMcUgMWi/b+wjzDBYv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvMjAwODE4OTItMDI0MC0z MTVmLTllMmEtMTQzMTMzNjUyYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBAIX 9CwDBAUX9IADBAUX9MADBAQX9QADBAQX9bADBABAulQDBAdBr4ADBAVC1MADBARD 50ADBARFoUADBARICRADBABK1jQDBASKz8ADBAOKz+ADBAOSqDgDBAOf+hADBAKi 2pADBAKsVRwDBAKsblwDBAGtLEQDBAKtLFQDBACtLGgDBAKtLHwDBAHA3gowDAME AMY0CQMEAMY0CgMEAMY0DgMEAcaFDAMEA8wOuAMEBc41QAMEANBaiwMEBNBnQAME ANEqhgMEA9HEqAMEANgKqAMEBdj2gAMEBNj/oDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALTAXlPIfDcPdD 6m6lQdFfh3al0lTH3Z01EPFV8wV2futvIMl0rheBynhg/p5dq420xyBCH0OVI7LA yLx0Kh3kyFQiE2v4Jl3rIa0U+sb84tTXR5+fruQtU6tRhDFmcLfdGfnUbT9bPxnf D6ieq436qFajxVdaqIpqEZR4VRxbPbBpbSqG9ZWfM7/Xw+PkdV+gQPKl1l673QIy PVGgqbht4dcK/+hxySR+nXr7acrS8i15nY4iZLeX/I6nO+vEdCa5QXBMxcWhbYGb oI6fjp9TntkedFKgvHSSCTmyp++aVxlqR4ZEhKH4Y3xxFtvT3lyKl4wj9ZcUwhbL ckxT+iXc -----END CERTIFICATE-----Generated at Mon Aug 31 10:25:29 2026 by rpki-client