$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa0bffa2-e9d5-35f2-b8cb-236884b48fd1.roa File: aa0bffa2-e9d5-35f2-b8cb-236884b48fd1.roa (raw, json) Hash identifier: 5wbYNoYYeQaOBvwK1wX2XyjqVFGThpIvm1sIzWv4Y/E= Subject key identifier: DC:C5:3D:C1:EC:66:A7:EA:D9:D3:42:4B:05:4D:5F:37:DB:C3:09:E6 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584EC63C6E3FE45A39928D5B7780 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa0bffa2-e9d5-35f2-b8cb-236884b48fd1.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 11776 IP address blocks: 69.171.193.0/24 maxlen: 24 69.171.194.0/24 maxlen: 24 69.171.195.0/24 maxlen: 24 69.171.200.0/24 maxlen: 24 69.171.201.0/24 maxlen: 24 69.171.202.0/24 maxlen: 24 69.171.204.0/24 maxlen: 24 74.81.192.0/23 maxlen: 23 74.81.194.0/24 maxlen: 24 74.81.196.0/24 maxlen: 24 74.81.197.0/24 maxlen: 24 74.81.198.0/24 maxlen: 24 74.81.200.0/22 maxlen: 22 74.81.204.0/24 maxlen: 24 74.81.205.0/24 maxlen: 24 74.81.206.0/24 maxlen: 24 74.81.207.0/24 maxlen: 24 74.81.208.0/24 maxlen: 24 74.81.209.0/24 maxlen: 24 74.81.211.0/24 maxlen: 24 74.81.212.0/23 maxlen: 23 74.81.214.0/24 maxlen: 24 74.81.216.0/23 maxlen: 23 74.81.218.0/24 maxlen: 24 74.81.219.0/24 maxlen: 24 74.81.220.0/22 maxlen: 22 75.76.41.0/24 maxlen: 24 75.76.42.0/24 maxlen: 24 75.76.43.0/24 maxlen: 24 75.76.45.0/24 maxlen: 24 75.76.46.0/24 maxlen: 24 75.76.50.0/24 maxlen: 24 75.76.51.0/24 maxlen: 24 75.76.56.0/24 maxlen: 24 75.76.57.0/24 maxlen: 24 75.76.58.0/24 maxlen: 24 75.76.59.0/24 maxlen: 24 75.76.66.0/24 maxlen: 24 75.76.68.0/24 maxlen: 24 75.76.70.0/23 maxlen: 23 75.76.75.0/24 maxlen: 24 75.76.78.0/24 maxlen: 24 75.76.85.0/24 maxlen: 24 75.76.86.0/24 maxlen: 24 75.76.87.0/24 maxlen: 24 75.76.88.0/24 maxlen: 24 75.76.94.0/23 maxlen: 23 75.76.96.0/24 maxlen: 24 75.76.97.0/24 maxlen: 24 75.76.106.0/24 maxlen: 24 75.76.108.0/24 maxlen: 24 75.76.109.0/24 maxlen: 24 75.76.110.0/23 maxlen: 23 75.76.112.0/23 maxlen: 23 75.76.114.0/23 maxlen: 23 75.76.118.0/24 maxlen: 24 75.76.119.0/24 maxlen: 24 75.76.122.0/24 maxlen: 24 75.76.123.0/24 maxlen: 24 75.76.124.0/24 maxlen: 24 75.76.125.0/24 maxlen: 24 75.76.129.0/24 maxlen: 24 75.76.172.0/24 maxlen: 24 75.76.174.0/24 maxlen: 24 75.76.176.0/24 maxlen: 24 75.76.178.0/24 maxlen: 24 75.76.179.0/24 maxlen: 24 75.76.180.0/22 maxlen: 22 75.76.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:6e:3f:e4:5a:39:92:8d:5b:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=ce7bd550-f414-4c27-a6dc-d67adbfda05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:e5:7d:67:2d:e2:2d:4a:92:14:b2:8d:00: b8:c4:ef:13:eb:93:48:9a:35:9d:bd:66:d0:81:5b: 91:67:4b:07:9d:5a:d5:d7:f8:15:b5:6a:2b:c3:12: 56:a7:ad:68:58:2b:34:42:96:e4:cd:20:15:bd:df: 67:2d:cc:22:56:61:78:bf:28:e5:ba:c2:1b:b1:58: 40:5d:61:53:23:a6:7b:1b:1e:35:3b:72:d2:3d:af: 30:ae:0b:94:8a:37:42:30:66:f1:1e:73:c4:8c:ca: b1:41:59:ad:a5:04:43:98:ae:79:59:f8:9a:54:4c: 18:ba:0d:87:c6:e3:d2:6e:25:d7:e9:7d:c9:5c:7b: 0d:2c:fc:04:ad:46:41:b2:34:47:5f:7a:62:d8:7e: c0:06:33:bc:b5:d4:fd:03:bb:9a:3a:bf:02:fa:52: 1a:f0:a6:2d:c5:1b:48:2d:ea:c9:25:3e:17:94:1a: 81:f6:c1:f5:59:57:1f:d1:f5:7f:23:ae:0d:0d:1d: 2f:1f:c1:82:94:17:f4:5a:66:c2:ef:f8:0d:71:89: bf:7a:d0:11:45:10:81:c3:4b:21:f0:f6:6e:ae:29: 9d:cb:dc:4d:0f:cb:ab:76:f5:be:81:a6:9c:3c:30: f2:38:61:5c:a9:38:f1:f2:f8:5d:3b:aa:a7:59:34: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C5:3D:C1:EC:66:A7:EA:D9:D3:42:4B:05:4D:5F:37:DB:C3:09:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa0bffa2-e9d5-35f2-b8cb-236884b48fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 69.171.193.0-69.171.195.255 69.171.200.0-69.171.202.255 69.171.204.0/24 74.81.192.0-74.81.194.255 74.81.196.0-74.81.198.255 74.81.200.0-74.81.209.255 74.81.211.0-74.81.214.255 74.81.216.0/21 75.76.41.0-75.76.43.255 75.76.45.0-75.76.46.255 75.76.50.0/23 75.76.56.0/22 75.76.66.0/24 75.76.68.0/24 75.76.70.0/23 75.76.75.0/24 75.76.78.0/24 75.76.85.0-75.76.88.255 75.76.94.0-75.76.97.255 75.76.106.0/24 75.76.108.0-75.76.115.255 75.76.118.0/23 75.76.122.0-75.76.125.255 75.76.129.0/24 75.76.172.0/24 75.76.174.0/24 75.76.176.0/24 75.76.178.0-75.76.187.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:4f:e1:14:1e:44:62:41:4b:6a:3f:22:98:3b:ce:d1:84:67: a9:9c:2a:2c:f3:a9:09:c8:f2:97:bc:0c:c5:ae:e3:a2:68:27: 5a:27:e4:79:5f:25:11:3d:d5:13:fd:60:49:eb:92:38:a1:8c: d1:38:40:1d:2d:cb:e8:9c:2a:40:bc:e4:65:c4:d0:39:da:31: aa:f9:fc:8a:6a:b0:2c:a7:e6:84:de:bc:03:27:ea:bb:1c:aa: 6f:cc:17:45:59:ae:7c:67:d3:87:9d:59:aa:04:5a:fe:92:cf: 54:d1:23:ed:e6:09:65:6d:26:40:c9:ac:0f:1a:2b:b6:eb:fd: 31:07:08:fc:c6:37:02:59:ba:1d:89:ca:5a:8d:91:0a:b7:ad: 37:7b:02:84:d9:c8:47:26:8f:46:48:17:1d:a9:3e:05:f0:15: 67:9f:66:51:b5:3f:4b:05:2a:e9:f3:2d:78:5d:fa:a4:0a:3a: c1:4d:16:f0:37:02:85:ab:42:2d:03:52:64:e7:c0:1e:91:fe: 15:02:6a:4c:dc:a3:69:4e:6d:61:c3:89:e1:df:76:a6:3b:fa: 8b:96:55:ed:c8:3a:90:23:e4:39:1c:a7:92:fa:2c:6a:70:10: e3:82:9c:95:20:d8:6b:79:72:3b:6e:55:f8:45:6a:ab:1c:6b: 2b:5b:d8:cf -----BEGIN CERTIFICATE----- MIIHVzCCBj+gAwIBAgIUAQ0Mn0MoWE7GPG4/5Fo5ko1bd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk Y2U3YmQ1NTAtZjQxNC00YzI3LWE2ZGMtZDY3YWRiZmRhMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbPlfWct4i1KkhSyjQC4xO8T65NImjWdvWbQ gVuRZ0sHnVrV1/gVtWorwxJWp61oWCs0QpbkzSAVvd9nLcwiVmF4vyjlusIbsVhA XWFTI6Z7Gx41O3LSPa8wrguUijdCMGbxHnPEjMqxQVmtpQRDmK55WfiaVEwYug2H xuPSbiXX6X3JXHsNLPwErUZBsjRHX3pi2H7ABjO8tdT9A7uaOr8C+lIa8KYtxRtI LerJJT4XlBqB9sH1WVcf0fV/I64NDR0vH8GClBf0WmbC7/gNcYm/etARRRCBw0sh 8PZurimdy9xND8urdvW+gaacPDDyOGFcqTjx8vhdO6qnWTRl+wIDAQABo4IEaTCC BGUwHQYDVR0OBBYEFNzFPcHsZqfq2dNCSwVNXzfbwwnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYWEwYmZmYTItZTlkNS0z NWYyLWI4Y2ItMjM2ODg0YjQ4ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBMQYIKwYBBQUHAQcBAf8EggEgMIIBHDCCARgEAgABMIIB EDAMAwQARavBAwQCRavAMAwDBANFq8gDBABFq8oDBABFq8wwDAMEBkpRwAMEAEpR wjAMAwQCSlHEAwQASlHGMAwDBANKUcgDBAFKUdAwDAMEAEpR0wMEAEpR1gMEA0pR 2DAMAwQAS0wpAwQCS0woMAwDBABLTC0DBABLTC4DBAFLTDIDBAJLTDgDBABLTEID BABLTEQDBAFLTEYDBABLTEsDBABLTE4wDAMEAEtMVQMEAEtMWDAMAwQBS0xeAwQB S0xgAwQAS0xqMAwDBAJLTGwDBAJLTHADBAFLTHYwDAMEAUtMegMEAUtMfAMEAEtM gQMEAEtMrAMEAEtMrgMEAEtMsDAMAwQBS0yyAwQCS0y4MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFZP4RQe RGJBS2o/Ipg7ztGEZ6mcKizzqQnI8pe8DMWu46JoJ1on5HlfJRE91RP9YEnrkjih jNE4QB0ty+icKkC85GXE0DnaMar5/IpqsCyn5oTevAMn6rscqm/MF0VZrnxn04ed WaoEWv6Sz1TRI+3mCWVtJkDJrA8aK7br/TEHCPzGNwJZuh2JylqNkQq3rTd7AoTZ yEcmj0ZIFx2pPgXwFWefZlG1P0sFKunzLXhd+qQKOsFNFvA3AoWrQi0DUmTnwB6R /hUCakzco2lObWHDieHfdqY7+ouWVe3IOpAj5Dkcp5L6LGpwEOOCnJUg2Gt5cjtu VfhFaqscaytb2M8= -----END CERTIFICATE-----Generated at Mon Aug 31 10:50:12 2026 by rpki-client