$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa File: aa77bbfa-ed54-3041-958c-d4556f3f285c.roa (raw, json) Hash identifier: ofyV2SyQVCipILz2KoMK9FiFq24NlB8Gu+laRBv3KFM= Subject key identifier: ED:DC:1D:CC:33:EF:CA:2A:9C:3C:96:BC:3F:78:E9:D9:ED:37:AC:CA Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F612D6A9F8C0E3C77E669E680 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 11776 IP address blocks: 24.153.36.0/23 maxlen: 23 24.153.44.0/23 maxlen: 23 24.153.46.0/23 maxlen: 23 24.233.202.0/23 maxlen: 23 24.245.109.0/24 maxlen: 24 24.245.110.0/23 maxlen: 23 24.245.116.0/22 maxlen: 22 65.99.116.0/23 maxlen: 23 65.99.120.0/24 maxlen: 24 65.99.127.0/24 maxlen: 24 66.85.4.0/24 maxlen: 24 72.9.17.0/24 maxlen: 24 72.9.18.0/23 maxlen: 23 72.9.20.0/23 maxlen: 23 72.9.22.0/23 maxlen: 23 72.9.24.0/22 maxlen: 22 72.9.28.0/23 maxlen: 23 72.9.30.0/23 maxlen: 23 74.214.32.0/23 maxlen: 23 74.214.34.0/24 maxlen: 24 74.214.35.0/24 maxlen: 24 74.214.36.0/24 maxlen: 24 74.214.37.0/24 maxlen: 24 74.214.38.0/24 maxlen: 24 74.214.50.0/23 maxlen: 23 74.214.56.0/24 maxlen: 24 146.168.18.0/23 maxlen: 23 146.168.20.0/23 maxlen: 23 146.168.25.0/24 maxlen: 24 146.168.26.0/24 maxlen: 24 146.168.32.0/20 maxlen: 20 146.168.48.0/21 maxlen: 21 146.168.132.0/23 maxlen: 23 146.168.142.0/23 maxlen: 23 159.250.66.0/23 maxlen: 23 159.250.70.0/23 maxlen: 23 162.223.182.0/23 maxlen: 23 162.247.106.0/24 maxlen: 24 173.44.70.0/24 maxlen: 24 173.44.71.0/24 maxlen: 24 173.44.74.0/24 maxlen: 24 173.44.108.0/23 maxlen: 23 173.44.110.0/24 maxlen: 24 173.44.111.0/24 maxlen: 24 198.52.11.0/24 maxlen: 24 209.42.132.0/23 maxlen: 23 209.42.137.0/24 maxlen: 24 209.42.158.0/24 maxlen: 24 216.10.190.0/24 maxlen: 24 216.10.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:9f:8c:0e:3c:77:e6:69:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=741a507e-e59b-40f5-b214-59bfb9302baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:24:a1:6a:19:a1:fd:20:ea:da:85:e9:c0:26: c5:d2:f7:2e:46:3e:6f:40:5e:8d:84:b3:2c:03:8f: d1:a6:97:3d:ea:89:78:2f:de:30:78:9c:e4:be:e1: a3:8f:52:29:7b:f5:5b:1f:d2:fa:f9:14:e0:cd:b2: 10:7c:9d:92:d4:b2:5b:87:14:7a:d4:da:4a:f2:4f: 60:b0:9d:0d:9f:2d:60:c7:43:5b:60:80:e3:0f:6d: c6:9a:a8:9b:4b:69:8a:e2:8c:97:19:2f:7d:1d:d0: 7b:48:4a:da:50:be:c8:9c:25:7b:74:f4:10:ed:0c: 08:af:82:ed:1c:44:63:1b:44:cf:16:d3:d5:e8:36: 66:ff:14:72:88:0a:50:06:06:11:40:b1:13:3e:98: eb:ac:90:5f:3c:64:d9:a1:82:96:19:c4:00:26:4e: b8:86:35:e2:ac:d7:8a:e9:83:6c:7c:53:32:23:51: 18:ce:77:a4:e4:7c:15:dc:e0:2b:58:a2:3c:25:f7: 07:f0:63:90:17:1c:92:8e:34:b5:25:ef:e6:a4:e6: 5d:0f:cb:ae:5e:6d:74:0c:e5:65:17:3f:9e:0e:d8: bd:5c:2d:ff:4b:09:15:5a:ba:b1:a0:7d:74:ae:31: 13:b0:d3:bf:fb:03:77:5a:09:d3:dd:8c:a3:2b:a2: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:1D:CC:33:EF:CA:2A:9C:3C:96:BC:3F:78:E9:D9:ED:37:AC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 24.153.36.0/23 24.153.44.0/22 24.233.202.0/23 24.245.109.0-24.245.111.255 24.245.116.0/22 65.99.116.0/23 65.99.120.0/24 65.99.127.0/24 66.85.4.0/24 72.9.17.0-72.9.31.255 74.214.32.0-74.214.38.255 74.214.50.0/23 74.214.56.0/24 146.168.18.0-146.168.21.255 146.168.25.0-146.168.26.255 146.168.32.0-146.168.55.255 146.168.132.0/23 146.168.142.0/23 159.250.66.0/23 159.250.70.0/23 162.223.182.0/23 162.247.106.0/24 173.44.70.0/23 173.44.74.0/24 173.44.108.0/22 198.52.11.0/24 209.42.132.0/23 209.42.137.0/24 209.42.158.0/24 216.10.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:be:25:a8:3f:af:f0:a4:dc:b3:bc:e9:37:d9:fd:a6:2d:b6: a7:17:4e:d6:34:82:90:24:0e:94:56:7c:74:ab:3a:48:4e:7a: 0b:62:15:24:1c:8a:5f:cc:0d:8c:28:14:96:01:00:eb:6c:9f: 16:ce:eb:5f:e2:63:7c:c6:84:59:61:95:9e:58:6f:c2:cc:43: 48:4c:9a:16:9e:0c:87:86:d8:db:c3:40:2a:e0:8c:e7:4f:8e: c9:cf:61:ca:9c:dc:ae:cf:b8:fc:21:2e:af:07:66:42:ef:6e: ba:53:7b:b8:54:0d:ac:a0:fb:cb:6f:f9:46:3d:e6:0c:28:47: 18:59:53:bb:84:39:dd:b5:20:9b:0a:2d:02:ef:7e:46:45:94: 02:0a:41:69:da:5c:ac:5e:e3:47:de:91:fd:62:d2:ce:59:98: 6b:ad:5e:c6:6d:9d:19:af:2c:39:ed:a8:6d:25:fb:50:9f:b2: 94:21:1f:1b:c5:db:4c:14:2f:aa:82:69:0c:53:08:65:0c:88: db:a4:9e:5d:b6:ee:08:93:bb:78:5f:db:c4:3c:be:51:b7:10: 9a:9b:69:38:bb:7e:4b:5e:45:a5:a9:8e:a2:a5:93:70:4a:fc: f2:02:79:5b:0a:46:9e:90:ab:aa:29:7b:1d:5a:c5:9f:58:af: d1:3d:bf:05 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE9hLWqfjA48d+Zp5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NzQxYTUwN2UtZTU5Yi00MGY1LWIyMTQtNTliZmI5MzAyYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCShahmh/SDq2oXpwCbF0vcuRj5vQF6NhLMs A4/Rppc96ol4L94weJzkvuGjj1Ipe/VbH9L6+RTgzbIQfJ2S1LJbhxR61NpK8k9g sJ0Nny1gx0NbYIDjD23GmqibS2mK4oyXGS99HdB7SEraUL7InCV7dPQQ7QwIr4Lt HERjG0TPFtPV6DZm/xRyiApQBgYRQLETPpjrrJBfPGTZoYKWGcQAJk64hjXirNeK 6YNsfFMyI1EYznek5HwV3OArWKI8JfcH8GOQFxySjjS1Je/mpOZdD8uuXm10DOVl Fz+eDti9XC3/SwkVWrqxoH10rjETsNO/+wN3WgnT3YyjK6JwqwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFO3cHcwz78oqnDyWvD946dntN6zKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYWE3N2JiZmEtZWQ1NC0z MDQxLTk1OGMtZDQ1NTZmM2YyODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQB GJkkAwQCGJksAwQBGOnKMAwDBAAY9W0DBAQY9WADBAIY9XQDBAFBY3QDBABBY3gD BABBY38DBABCVQQwDAMEAEgJEQMEBUgJADAMAwQFStYgAwQAStYmAwQBStYyAwQA StY4MAwDBAGSqBIDBAGSqBQwDAMEAJKoGQMEAJKoGjAMAwQFkqggAwQDkqgwAwQB kqiEAwQBkqiOAwQBn/pCAwQBn/pGAwQBot+2AwQAovdqAwQBrSxGAwQArSxKAwQC rSxsAwQAxjQLAwQB0SqEAwQA0SqJAwQA0SqeAwQB2Aq+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC6+Jag/ r/Ck3LO86TfZ/aYttqcXTtY0gpAkDpRWfHSrOkhOegtiFSQcil/MDYwoFJYBAOts nxbO61/iY3zGhFlhlZ5Yb8LMQ0hMmhaeDIeG2NvDQCrgjOdPjsnPYcqc3K7PuPwh Lq8HZkLvbrpTe7hUDayg+8tv+UY95gwoRxhZU7uEOd21IJsKLQLvfkZFlAIKQWna XKxe40fekf1i0s5ZmGutXsZtnRmvLDntqG0l+1CfspQhHxvF20wUL6qCaQxTCGUM iNuknl227giTu3hf28Q8vlG3EJqbaTi7fkteRaWpjqKlk3BK/PICeVsKRp6Qq6op ex1axZ9Yr9E9vwU= -----END CERTIFICATE-----Generated at Sun Oct 18 11:50:36 2026 by rpki-client