$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa File: 396ba5c2-f713-34f3-90a6-299dd001744c.roa (raw, json) Hash identifier: SEOg0DdW3wiXR6m994ZLsdOqSW4BFp0NMqgpYTJdl/M= Subject key identifier: C6:9D:75:39:FF:39:B3:9D:0F:53:00:C8:92:57:40:B7:D7:1A:43:E4 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584ED431CF663AC43663219F4E80 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 11776 IP address blocks: 23.244.209.0/24 maxlen: 24 23.245.4.0/23 maxlen: 23 23.245.6.0/23 maxlen: 23 23.245.182.0/23 maxlen: 23 24.233.97.0/24 maxlen: 24 24.233.119.0/24 maxlen: 24 24.233.124.0/24 maxlen: 24 24.245.125.0/24 maxlen: 24 65.175.135.0/24 maxlen: 24 65.175.140.0/24 maxlen: 24 65.175.182.0/23 maxlen: 23 65.175.184.0/23 maxlen: 23 65.175.186.0/23 maxlen: 23 65.175.207.0/24 maxlen: 24 65.175.242.0/23 maxlen: 23 65.175.244.0/23 maxlen: 23 65.175.246.0/24 maxlen: 24 65.175.248.0/23 maxlen: 23 65.175.250.0/23 maxlen: 23 65.175.252.0/23 maxlen: 23 65.175.254.0/23 maxlen: 23 67.231.78.0/23 maxlen: 23 69.161.72.0/23 maxlen: 23 69.161.124.0/23 maxlen: 23 75.76.70.0/24 maxlen: 24 104.153.40.0/22 maxlen: 22 146.168.30.0/23 maxlen: 23 159.250.4.0/23 maxlen: 23 162.217.32.0/23 maxlen: 23 162.217.34.0/23 maxlen: 23 173.44.69.0/24 maxlen: 24 173.44.115.0/24 maxlen: 24 199.192.148.0/23 maxlen: 23 199.192.150.0/23 maxlen: 23 216.10.167.0/24 maxlen: 24 216.10.178.0/24 maxlen: 24 216.10.179.0/24 maxlen: 24 216.10.180.0/24 maxlen: 24 216.246.130.0/24 maxlen: 24 216.246.131.0/24 maxlen: 24 216.246.137.0/24 maxlen: 24 216.246.143.0/24 maxlen: 24 216.246.144.0/24 maxlen: 24 216.246.150.0/24 maxlen: 24 216.246.154.0/23 maxlen: 23 216.255.164.0/23 maxlen: 23 216.255.168.0/23 maxlen: 23 216.255.170.0/24 maxlen: 24 216.255.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:cf:66:3a:c4:36:63:21:9f:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=495e9b7e-81bf-468d-abae-01495c627952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:88:8a:ac:e3:d2:fd:c3:2c:f5:c0:55:da:34: b2:6a:6f:20:df:cc:4b:bf:13:49:c4:78:43:3d:e2: 57:65:54:86:0e:7b:82:3c:48:ef:29:9d:f9:75:e2: 0f:a3:81:01:a2:09:02:ae:00:e6:86:60:99:23:83: 76:17:f4:32:7b:1d:6f:00:de:59:7a:41:81:09:61: 7e:a5:f9:dd:99:2d:b6:34:31:76:93:8c:81:b7:ea: 42:2f:6e:92:32:84:5d:c5:2e:64:1f:1d:ae:1f:59: 3a:c5:0f:02:54:f6:6a:9c:c0:a9:09:01:ab:4e:87: bc:ab:b3:cb:26:f6:32:c1:3b:33:68:a9:bf:40:5f: 28:e5:ef:67:64:32:68:3a:98:b2:e7:46:e7:60:90: ba:36:bb:fd:6d:3f:95:e3:fc:ed:5a:c0:6b:61:f9: 66:0f:7c:d2:6b:e4:be:22:d2:a7:f8:03:82:c0:0e: 76:ff:c7:0c:25:0d:e5:51:44:fb:0a:0a:1a:15:c6: 4e:a0:a3:b0:5c:da:1f:3e:f3:38:9f:df:d2:fc:1b: 7f:1e:3c:90:56:c4:8a:d0:c2:60:0e:f6:9c:a1:b0: 76:34:a4:00:2d:3a:0f:47:eb:a9:5e:78:bd:fd:24: 17:92:30:09:27:92:b6:8f:65:42:f6:98:37:07:f3: 28:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9D:75:39:FF:39:B3:9D:0F:53:00:C8:92:57:40:B7:D7:1A:43:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.209.0/24 23.245.4.0/22 23.245.182.0/23 24.233.97.0/24 24.233.119.0/24 24.233.124.0/24 24.245.125.0/24 65.175.135.0/24 65.175.140.0/24 65.175.182.0-65.175.187.255 65.175.207.0/24 65.175.242.0-65.175.246.255 65.175.248.0/21 67.231.78.0/23 69.161.72.0/23 69.161.124.0/23 75.76.70.0/24 104.153.40.0/22 146.168.30.0/23 159.250.4.0/23 162.217.32.0/22 173.44.69.0/24 173.44.115.0/24 199.192.148.0/22 216.10.167.0/24 216.10.178.0-216.10.180.255 216.246.130.0/23 216.246.137.0/24 216.246.143.0-216.246.144.255 216.246.150.0/24 216.246.154.0/23 216.255.164.0/23 216.255.168.0-216.255.170.255 216.255.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:16:c2:4c:23:56:e5:15:b5:78:8b:f7:e1:b2:ad:71:a6:27: 52:3b:e9:4f:3c:1a:77:34:5a:18:09:7c:e9:ce:62:d9:b1:db: 82:67:40:35:de:5e:5d:42:50:fb:1b:2b:73:68:bf:89:12:1b: a7:f0:18:fc:e2:50:a3:c9:9f:a9:48:2e:59:b4:1a:36:b0:84: 98:ea:17:8d:c4:df:e2:21:18:31:7d:ea:13:7e:60:4d:48:a9: fc:8e:91:c8:4c:e7:39:67:74:e3:9d:04:21:30:a0:e3:e5:ef: cf:9f:01:e3:b5:34:5b:1b:3f:a6:3a:87:92:8f:03:2b:81:8a: e1:3b:c7:a4:85:f9:61:35:c6:45:d2:38:36:14:16:53:a5:1d: 22:82:8a:ca:96:a6:a5:74:f0:56:c3:21:d0:4b:b7:97:b7:d3: 7c:2b:12:48:b5:1d:3d:ad:36:4e:40:42:94:0f:34:b1:e4:26: bc:67:4c:ee:2b:66:72:d4:a6:76:68:6c:a4:66:8a:31:36:6d: 3f:e7:90:e1:e8:5d:47:1c:03:18:74:76:2f:d6:26:85:89:7d: 21:23:4b:51:d8:53:2f:40:7d:0f:ec:8f:34:32:29:28:a8:f4: df:52:5b:5c:d6:19:b4:c7:4c:16:c6:6e:1f:12:ab:b8:9e:0c: dc:2b:a7:0c -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWE7UMc9mOsQ2YyGfToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDk1ZTliN2UtODFiZi00NjhkLWFiYWUtMDE0OTVjNjI3OTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIiKrOPS/cMs9cBV2jSyam8g38xLvxNJxHhD PeJXZVSGDnuCPEjvKZ35deIPo4EBogkCrgDmhmCZI4N2F/Qyex1vAN5ZekGBCWF+ pfndmS22NDF2k4yBt+pCL26SMoRdxS5kHx2uH1k6xQ8CVPZqnMCpCQGrToe8q7PL JvYywTszaKm/QF8o5e9nZDJoOpiy50bnYJC6Nrv9bT+V4/ztWsBrYflmD3zSa+S+ ItKn+AOCwA52/8cMJQ3lUUT7CgoaFcZOoKOwXNofPvM4n9/S/Bt/HjyQVsSK0MJg DvacobB2NKQALToPR+upXni9/SQXkjAJJ5K2j2VC9pg3B/MoZQIDAQABo4IESjCC BEYwHQYDVR0OBBYEFMaddTn/ObOdD1MAyJJXQLfXGkPkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvMzk2YmE1YzItZjcxMy0z NGYzLTkwYTYtMjk5ZGQwMDE3NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME ABf00QMEAhf1BAMEARf1tgMEABjpYQMEABjpdwMEABjpfAMEABj1fQMEAEGvhwME AEGvjDAMAwQBQa+2AwQCQa+4AwQAQa/PMAwDBAFBr/IDBABBr/YDBANBr/gDBAFD 504DBAFFoUgDBAFFoXwDBABLTEYDBAJomSgDBAGSqB4DBAGf+gQDBAKi2SADBACt LEUDBACtLHMDBALHwJQDBADYCqcwDAMEAdgKsgMEANgKtAMEAdj2ggMEANj2iTAM AwQA2PaPAwQA2PaQAwQA2PaWAwQB2PaaAwQB2P+kMAwDBAPY/6gDBADY/6oDBALY /6wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEhbCTCNW5RW1eIv34bKtcaYnUjvpTzwadzRaGAl86c5i2bHb gmdANd5eXUJQ+xsrc2i/iRIbp/AY/OJQo8mfqUguWbQaNrCEmOoXjcTf4iEYMX3q E35gTUip/I6RyEznOWd0450EITCg4+Xvz58B47U0Wxs/pjqHko8DK4GK4TvHpIX5 YTXGRdI4NhQWU6UdIoKKypampXTwVsMh0Eu3l7fTfCsSSLUdPa02TkBClA80seQm vGdM7itmctSmdmhspGaKMTZtP+eQ4ehdRxwDGHR2L9YmhYl9ISNLUdhTL0B9D+yP NDIpKKj031JbXNYZtMdMFsZuHxKruJ4M3CunDA== -----END CERTIFICATE-----Generated at Mon Aug 31 10:38:48 2026 by rpki-client