$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa File: aa77bbfa-ed54-3041-958c-d4556f3f285c.roa (raw, json) Hash identifier: cA6xWpRCoUS46GYHeD2GMqgbqQMiEL6R4mhCBti76Bo= Subject key identifier: 3A:A0:0C:83:15:EB:F2:16:50:4F:7F:AC:F8:73:18:C3:57:55:E3:A3 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584EBDDC52E458C2A572A6C73580 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 11776 IP address blocks: 24.153.36.0/23 maxlen: 23 24.153.44.0/23 maxlen: 23 24.153.46.0/23 maxlen: 23 24.233.202.0/23 maxlen: 23 24.245.109.0/24 maxlen: 24 24.245.110.0/23 maxlen: 23 24.245.116.0/22 maxlen: 22 65.99.116.0/23 maxlen: 23 65.99.120.0/24 maxlen: 24 65.99.127.0/24 maxlen: 24 66.85.4.0/24 maxlen: 24 72.9.17.0/24 maxlen: 24 72.9.18.0/23 maxlen: 23 72.9.20.0/23 maxlen: 23 72.9.22.0/23 maxlen: 23 72.9.24.0/22 maxlen: 22 72.9.28.0/23 maxlen: 23 72.9.30.0/23 maxlen: 23 74.214.32.0/23 maxlen: 23 74.214.34.0/24 maxlen: 24 74.214.35.0/24 maxlen: 24 74.214.36.0/24 maxlen: 24 74.214.37.0/24 maxlen: 24 74.214.38.0/24 maxlen: 24 74.214.50.0/23 maxlen: 23 74.214.56.0/24 maxlen: 24 146.168.18.0/23 maxlen: 23 146.168.20.0/23 maxlen: 23 146.168.25.0/24 maxlen: 24 146.168.26.0/24 maxlen: 24 146.168.32.0/20 maxlen: 20 146.168.48.0/21 maxlen: 21 146.168.132.0/23 maxlen: 23 146.168.142.0/23 maxlen: 23 159.250.66.0/23 maxlen: 23 159.250.70.0/23 maxlen: 23 162.223.182.0/23 maxlen: 23 162.247.106.0/24 maxlen: 24 173.44.70.0/24 maxlen: 24 173.44.71.0/24 maxlen: 24 173.44.74.0/24 maxlen: 24 173.44.108.0/23 maxlen: 23 173.44.110.0/24 maxlen: 24 173.44.111.0/24 maxlen: 24 198.52.11.0/24 maxlen: 24 209.42.132.0/23 maxlen: 23 209.42.137.0/24 maxlen: 24 209.42.158.0/24 maxlen: 24 216.10.190.0/24 maxlen: 24 216.10.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:52:e4:58:c2:a5:72:a6:c7:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=cf4ead9a-071e-4f29-bf4e-6dc63289c321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b9:a3:2c:59:c8:c1:6d:f4:8a:23:06:73:1a: 90:95:b0:7a:e1:77:55:a2:13:a4:d1:4e:1f:a1:5f: e3:41:2f:c9:aa:64:ba:1a:4f:36:c4:87:42:67:26: fb:b5:43:79:b8:86:ba:fc:7f:72:06:96:94:0e:e3: db:7f:7b:51:68:d5:1b:a4:20:54:8c:7f:73:71:c0: e7:a9:8b:35:fc:e5:be:3c:11:7e:23:bc:d8:5c:a1: bd:f2:ff:79:84:6c:eb:dd:6c:22:34:f3:93:ea:f5: ff:82:87:30:ab:31:a7:20:36:6e:56:8d:33:a7:79: 0e:f7:a0:25:69:97:c2:e9:c0:3e:04:89:08:b9:f4: c1:2f:b9:6c:1e:c1:c7:66:0c:95:ab:bd:5f:fd:18: 56:76:96:43:93:07:97:c5:e5:38:e3:5c:20:a7:41: e6:62:46:ad:1e:f2:89:09:b1:d7:9d:c7:d5:d9:5e: 96:27:3c:be:6d:7c:a1:38:22:e0:f4:13:2e:61:3f: 3c:78:25:75:92:05:da:2a:17:8e:f8:c6:1a:a3:b0: b1:ca:48:3e:24:7b:be:55:ae:af:ab:c4:1e:6b:1f: fc:37:93:cb:72:f1:b2:48:ed:fc:42:32:c2:93:de: d0:fc:20:b3:13:47:51:5f:29:b4:38:a7:35:14:e9: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A0:0C:83:15:EB:F2:16:50:4F:7F:AC:F8:73:18:C3:57:55:E3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 24.153.36.0/23 24.153.44.0/22 24.233.202.0/23 24.245.109.0-24.245.111.255 24.245.116.0/22 65.99.116.0/23 65.99.120.0/24 65.99.127.0/24 66.85.4.0/24 72.9.17.0-72.9.31.255 74.214.32.0-74.214.38.255 74.214.50.0/23 74.214.56.0/24 146.168.18.0-146.168.21.255 146.168.25.0-146.168.26.255 146.168.32.0-146.168.55.255 146.168.132.0/23 146.168.142.0/23 159.250.66.0/23 159.250.70.0/23 162.223.182.0/23 162.247.106.0/24 173.44.70.0/23 173.44.74.0/24 173.44.108.0/22 198.52.11.0/24 209.42.132.0/23 209.42.137.0/24 209.42.158.0/24 216.10.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d9:f2:7b:49:00:1b:39:ee:ba:60:7a:e6:9c:90:68:33:a3: 15:a1:36:b4:f3:ab:f8:12:96:9c:7a:27:0f:75:f7:10:52:9a: e9:2f:76:91:b6:58:2e:62:4e:d6:0a:7f:d1:03:b2:a5:3a:84: b0:ee:17:04:d8:b2:a2:98:5d:bb:cd:ac:c1:5a:14:08:1f:ef: 65:0a:5f:07:b4:bd:e0:81:c4:c5:20:00:5f:2f:24:c9:bb:a3: 4f:26:e0:6f:cf:f9:fd:9b:d7:e9:ed:a4:26:4c:fc:9b:29:8b: 56:f1:52:b6:2f:66:a7:62:10:31:92:d6:8f:fa:66:68:79:5b: 8f:e8:bf:a0:db:5b:ed:c8:4e:fd:96:e6:7c:66:5a:ba:23:f2: 07:2a:4c:ff:46:54:67:05:7a:80:c4:1d:7d:61:de:2c:c3:40: c9:49:10:8f:1f:0c:19:ea:15:e5:dd:16:78:10:6c:9f:ff:6a: c7:26:04:4c:53:5c:6b:cf:81:2d:f9:cb:fd:19:30:6e:66:a9: 8b:94:95:ff:c5:43:0f:ce:47:b7:6f:1f:c9:48:91:89:2f:7a: e7:10:39:d5:4e:7b:2c:f7:8a:75:80:4e:38:40:bc:c4:77:0a: 1f:2b:ca:8b:0a:73:b7:74:61:02:49:83:47:9b:4e:26:d6:f4: 59:c1:3f:05 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE693FLkWMKlcqbHNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y0ZWFkOWEtMDcxZS00ZjI5LWJmNGUtNmRjNjMyODljMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbmjLFnIwW30iiMGcxqQlbB64XdVohOk0U4f oV/jQS/JqmS6Gk82xIdCZyb7tUN5uIa6/H9yBpaUDuPbf3tRaNUbpCBUjH9zccDn qYs1/OW+PBF+I7zYXKG98v95hGzr3WwiNPOT6vX/gocwqzGnIDZuVo0zp3kO96Al aZfC6cA+BIkIufTBL7lsHsHHZgyVq71f/RhWdpZDkweXxeU441wgp0HmYkatHvKJ CbHXncfV2V6WJzy+bXyhOCLg9BMuYT88eCV1kgXaKheO+MYao7Cxykg+JHu+Va6v q8Qeax/8N5PLcvGySO38QjLCk97Q/CCzE0dRXym0OKc1FOnyVwIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFDqgDIMV6/IWUE9/rPhzGMNXVeOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYWE3N2JiZmEtZWQ1NC0z MDQxLTk1OGMtZDQ1NTZmM2YyODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQB GJkkAwQCGJksAwQBGOnKMAwDBAAY9W0DBAQY9WADBAIY9XQDBAFBY3QDBABBY3gD BABBY38DBABCVQQwDAMEAEgJEQMEBUgJADAMAwQFStYgAwQAStYmAwQBStYyAwQA StY4MAwDBAGSqBIDBAGSqBQwDAMEAJKoGQMEAJKoGjAMAwQFkqggAwQDkqgwAwQB kqiEAwQBkqiOAwQBn/pCAwQBn/pGAwQBot+2AwQAovdqAwQBrSxGAwQArSxKAwQC rSxsAwQAxjQLAwQB0SqEAwQA0SqJAwQA0SqeAwQB2Aq+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJfZ8ntJ ABs57rpgeuackGgzoxWhNrTzq/gSlpx6Jw919xBSmukvdpG2WC5iTtYKf9EDsqU6 hLDuFwTYsqKYXbvNrMFaFAgf72UKXwe0veCBxMUgAF8vJMm7o08m4G/P+f2b1+nt pCZM/Jspi1bxUrYvZqdiEDGS1o/6Zmh5W4/ov6DbW+3ITv2W5nxmWroj8gcqTP9G VGcFeoDEHX1h3izDQMlJEI8fDBnqFeXdFngQbJ//ascmBExTXGvPgS35y/0ZMG5m qYuUlf/FQw/OR7dvH8lIkYkveucQOdVOeyz3inWATjhAvMR3Ch8ryosKc7d0YQJJ g0ebTibW9FnBPwU= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:53 2026 by rpki-client