$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a14b809c-7650-374e-88c4-82d889d078ee.roa File: a14b809c-7650-374e-88c4-82d889d078ee.roa (raw, json) Hash identifier: yWZfoFitbNq1IhlJxL16685wyuaxupqnLHKqZf6Q+nc= Subject key identifier: 4D:6D:C7:AB:D3:23:41:2E:D1:C0:ED:C6:9B:32:A3:84:F8:80:90:67 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F86DDA87C9CC741364E3CF400 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a14b809c-7650-374e-88c4-82d889d078ee.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 11776 IP address blocks: 23.244.160.0/19 maxlen: 19 23.244.183.0/24 maxlen: 24 23.244.224.0/19 maxlen: 19 23.245.32.0/20 maxlen: 20 23.245.48.0/21 maxlen: 21 23.245.52.0/23 maxlen: 23 24.145.0.0/19 maxlen: 19 24.145.0.0/21 maxlen: 21 24.145.8.0/21 maxlen: 21 24.145.16.0/21 maxlen: 21 64.186.80.0/20 maxlen: 20 64.186.92.0/24 maxlen: 24 64.186.93.0/24 maxlen: 24 64.186.94.0/24 maxlen: 24 72.28.192.0/20 maxlen: 20 72.28.192.0/21 maxlen: 21 72.28.192.0/24 maxlen: 24 72.28.193.0/24 maxlen: 24 72.45.36.0/22 maxlen: 22 72.45.40.0/21 maxlen: 21 132.147.0.0/21 maxlen: 21 132.147.48.0/20 maxlen: 20 137.103.0.0/19 maxlen: 19 137.103.128.0/19 maxlen: 19 137.103.176.0/24 maxlen: 24 138.207.128.0/20 maxlen: 20 138.207.168.0/22 maxlen: 22 138.207.168.0/24 maxlen: 24 138.207.232.0/21 maxlen: 21 138.207.248.0/22 maxlen: 22 138.207.252.0/22 maxlen: 22 146.168.192.0/19 maxlen: 19 162.218.16.0/22 maxlen: 22 165.188.160.0/20 maxlen: 20 172.85.0.0/21 maxlen: 21 174.140.64.0/19 maxlen: 19 174.140.80.0/21 maxlen: 21 174.140.87.0/24 maxlen: 24 174.140.88.0/21 maxlen: 21 204.195.128.0/20 maxlen: 20 204.195.128.0/21 maxlen: 21 204.195.140.0/22 maxlen: 22 207.255.0.0/18 maxlen: 18 207.255.0.0/21 maxlen: 21 207.255.0.0/24 maxlen: 24 207.255.1.0/24 maxlen: 24 207.255.2.0/24 maxlen: 24 207.255.8.0/21 maxlen: 21 207.255.16.0/21 maxlen: 21 207.255.24.0/21 maxlen: 21 207.255.26.0/24 maxlen: 24 207.255.32.0/21 maxlen: 21 207.255.56.0/21 maxlen: 21 207.255.96.0/19 maxlen: 19 207.255.96.0/21 maxlen: 21 207.255.96.0/24 maxlen: 24 207.255.128.0/21 maxlen: 21 207.255.144.0/22 maxlen: 22 207.255.148.0/22 maxlen: 22 207.255.160.0/22 maxlen: 22 207.255.168.0/22 maxlen: 22 207.255.192.0/19 maxlen: 19 207.255.192.0/21 maxlen: 21 207.255.192.0/24 maxlen: 24 207.255.200.0/21 maxlen: 21 207.255.224.0/20 maxlen: 20 207.255.236.0/24 maxlen: 24 207.255.237.0/24 maxlen: 24 207.255.240.0/22 maxlen: 22 207.255.248.0/22 maxlen: 22 209.196.160.0/21 maxlen: 21 209.196.160.0/24 maxlen: 24 209.203.212.0/22 maxlen: 22 209.203.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a8:7c:9c:c7:41:36:4e:3c:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=a85f89e0-f07e-46eb-b391-4680247edcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:77:6a:52:24:31:e1:44:b2:56:da:4b:9c:93: 25:ff:ed:37:37:02:87:66:2c:f4:e7:01:61:be:85: e1:84:ec:81:27:b9:ed:a3:b7:79:0e:63:d1:92:bb: 80:12:6e:12:aa:56:95:c0:47:d5:4b:41:fe:bd:9d: 4c:ae:49:4e:e1:70:04:af:e1:6d:a0:3f:0a:b3:f8: 95:9e:87:c1:e9:97:eb:de:9a:a1:f8:63:7e:32:f6: 13:a5:52:ef:dc:37:2d:b7:5a:52:a1:30:6a:8b:51: 2f:e9:06:e1:22:1a:30:64:67:d7:e5:68:10:d9:0c: d7:30:24:ed:81:cf:b2:b4:21:4f:61:bb:f4:d0:47: 29:82:a9:5b:25:15:b7:65:0f:5c:74:db:d9:38:8c: 51:52:34:42:ee:0e:aa:98:15:6d:02:a8:1f:67:f6: 97:60:f5:c6:42:bb:b9:a4:ca:b5:a0:ef:a3:f2:05: b1:15:d1:d8:1e:bb:7f:9b:88:19:23:d5:7b:b7:5f: 5b:40:66:10:bd:ed:c2:20:df:94:e4:ab:4a:12:84: 61:ad:40:b2:a8:2c:2e:25:17:6b:1c:88:1f:69:05: 3c:05:78:8d:0c:2b:04:fe:12:d6:d1:f8:cc:1b:51: 6a:84:3e:8f:41:e9:74:3c:e0:4e:bf:a7:71:e3:fa: aa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6D:C7:AB:D3:23:41:2E:D1:C0:ED:C6:9B:32:A3:84:F8:80:90:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/a14b809c-7650-374e-88c4-82d889d078ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.160.0/19 23.244.224.0/19 23.245.32.0-23.245.55.255 24.145.0.0/19 64.186.80.0/20 72.28.192.0/20 72.45.36.0-72.45.47.255 132.147.0.0/21 132.147.48.0/20 137.103.0.0/19 137.103.128.0/19 137.103.176.0/24 138.207.128.0/20 138.207.168.0/22 138.207.232.0/21 138.207.248.0/21 146.168.192.0/19 162.218.16.0/22 165.188.160.0/20 172.85.0.0/21 174.140.64.0/19 204.195.128.0/20 207.255.0.0/18 207.255.96.0-207.255.135.255 207.255.144.0/21 207.255.160.0/22 207.255.168.0/22 207.255.192.0-207.255.243.255 207.255.248.0/22 209.196.160.0/21 209.203.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2b:9d:b4:5e:4b:33:04:81:09:3a:fb:3e:e5:b5:d0:95:27: dc:c3:6a:4e:6e:c8:a4:dd:20:96:b6:dc:a8:5f:0c:58:84:af: a2:4c:64:22:8a:47:6e:35:59:64:cc:84:58:f9:ee:90:70:62: 5e:8d:8a:83:91:ff:0d:52:92:0e:d5:6e:c7:63:77:ea:49:b2: 96:28:91:b1:e2:60:5e:ff:ce:ed:c6:e9:8e:20:f7:b3:86:3a: d9:87:0b:fc:0d:9d:27:06:a2:0f:91:ac:7e:14:e1:00:64:53: 4e:fa:18:94:f0:40:fa:09:dc:91:71:89:7a:75:e2:19:c7:54: c9:bd:89:20:35:a4:0d:0e:03:df:a6:a3:83:00:75:27:6e:9e: 1b:9c:e6:72:d0:c7:de:ce:18:c8:78:40:bd:06:47:a0:93:f1: 49:35:d8:65:e8:9d:50:54:c8:76:3b:f0:dd:5e:55:09:6b:f0: af:0c:12:19:09:81:84:9a:4f:dd:19:e3:9a:4a:a9:96:10:7c: 95:98:5c:9d:23:1c:1a:dd:74:49:2b:69:92:d2:a7:95:08:b3: 80:a7:62:c8:dd:ed:21:14:08:68:98:cf:f2:a3:7b:25:64:fc: fb:3a:a5:0d:14:1c:62:9a:cb:1d:91:ff:62:52:44:f0:7f:39: 8c:62:ec:1a -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWE+G3ah8nMdBNk489AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk YTg1Zjg5ZTAtZjA3ZS00NmViLWIzOTEtNDY4MDI0N2VkY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13dqUiQx4USyVtpLnJMl/+03NwKHZiz05wFh voXhhOyBJ7nto7d5DmPRkruAEm4SqlaVwEfVS0H+vZ1MrklO4XAEr+FtoD8Ks/iV nofB6Zfr3pqh+GN+MvYTpVLv3Dctt1pSoTBqi1Ev6QbhIhowZGfX5WgQ2QzXMCTt gc+ytCFPYbv00EcpgqlbJRW3ZQ9cdNvZOIxRUjRC7g6qmBVtAqgfZ/aXYPXGQru5 pMq1oO+j8gWxFdHYHrt/m4gZI9V7t19bQGYQve3CIN+U5KtKEoRhrUCyqCwuJRdr HIgfaQU8BXiNDCsE/hLW0fjMG1FqhD6PQel0POBOv6dx4/qqAQIDAQABo4IELjCC BCowHQYDVR0OBBYEFE1tx6vTI0Eu0cDtxpsyo4T4gJBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYTE0YjgwOWMtNzY1MC0z NzRlLTg4YzQtODJkODg5ZDA3OGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIH3BggrBgEFBQcBBwEB/wSB5zCB5DCB4QQCAAEwgdoDBAUX 9KADBAUX9OAwDAMEBRf1IAMEAxf1MAMEBRiRAAMEBEC6UAMEBEgcwDAMAwQCSC0k AwQESC0gAwQDhJMAAwQEhJMwAwQFiWcAAwQFiWeAAwQAiWewAwQEis+AAwQCis+o AwQDis/oAwQDis/4AwQFkqjAAwQCotoQAwQEpbygAwQDrFUAAwQFroxAAwQEzMOA AwQGz/8AMAwDBAXP/2ADBAPP/4ADBAPP/5ADBALP/6ADBALP/6gwDAMEBs//wAME As//8AMEAs//+AMEA9HEoAMEAtHL1DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFK520XkszBIEJOvs+5bXQ lSfcw2pObsik3SCWttyoXwxYhK+iTGQiikduNVlkzIRY+e6QcGJejYqDkf8NUpIO 1W7HY3fqSbKWKJGx4mBe/87txumOIPezhjrZhwv8DZ0nBqIPkax+FOEAZFNO+hiU 8ED6CdyRcYl6deIZx1TJvYkgNaQNDgPfpqODAHUnbp4bnOZy0MfezhjIeEC9Bkeg k/FJNdhl6J1QVMh2O/DdXlUJa/CvDBIZCYGEmk/dGeOaSqmWEHyVmFydIxwa3XRJ K2mS0qeVCLOAp2LI3e0hFAhomM/yo3slZPz7OqUNFBximssdkf9iUkTwfzmMYuwa -----END CERTIFICATE-----Generated at Wed Oct 21 00:55:10 2026 by rpki-client