$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa File: b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa (raw, json) Hash identifier: tHZimi8thjg1nUDBnLVyTF9bYPqKjhDBathGhLdeHik= Subject key identifier: 25:B0:08:D6:FD:9C:21:09:76:03:5F:BC:C7:2B:D7:3B:59:5B:9C:5E Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584EBDDC514E474158C405F901C0 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 11776 IP address blocks: 23.245.70.0/23 maxlen: 23 23.245.172.0/23 maxlen: 23 24.145.64.0/22 maxlen: 22 24.145.68.0/22 maxlen: 22 69.84.96.0/21 maxlen: 21 69.84.104.0/22 maxlen: 22 69.84.108.0/22 maxlen: 22 69.84.112.0/22 maxlen: 22 69.84.116.0/22 maxlen: 22 69.84.120.0/22 maxlen: 22 69.84.124.0/22 maxlen: 22 72.28.208.0/20 maxlen: 20 72.45.33.0/24 maxlen: 24 72.45.34.0/24 maxlen: 24 72.45.35.0/24 maxlen: 24 132.147.8.0/23 maxlen: 23 132.147.10.0/23 maxlen: 23 132.147.12.0/23 maxlen: 23 132.147.14.0/23 maxlen: 23 132.147.32.0/23 maxlen: 23 132.147.35.0/24 maxlen: 24 132.147.36.0/24 maxlen: 24 132.147.37.0/24 maxlen: 24 132.147.38.0/23 maxlen: 23 132.147.40.0/23 maxlen: 23 132.147.42.0/23 maxlen: 23 132.147.44.0/23 maxlen: 23 132.147.46.0/23 maxlen: 23 137.103.36.0/23 maxlen: 23 137.103.42.0/24 maxlen: 24 137.103.43.0/24 maxlen: 24 137.103.45.0/24 maxlen: 24 137.103.46.0/23 maxlen: 23 137.103.52.0/22 maxlen: 22 137.103.56.0/22 maxlen: 22 137.103.60.0/22 maxlen: 22 137.103.179.0/24 maxlen: 24 137.103.192.0/23 maxlen: 23 137.103.194.0/23 maxlen: 23 137.103.196.0/22 maxlen: 22 137.103.226.0/23 maxlen: 23 137.103.232.0/23 maxlen: 23 137.103.236.0/23 maxlen: 23 137.103.248.0/21 maxlen: 21 138.207.150.0/23 maxlen: 23 138.207.152.0/23 maxlen: 23 138.207.155.0/24 maxlen: 24 138.207.158.0/23 maxlen: 23 138.207.208.0/21 maxlen: 21 138.207.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:51:4e:47:41:58:c4:05:f9:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=cdecd446-7f77-460a-89a6-07088c3833f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:19:0b:e3:68:e0:0f:53:f3:67:e2:9b:69: 85:94:0e:f8:30:d0:ff:e0:36:a2:63:37:39:4e:bf: d9:13:ba:e8:04:5b:dc:70:50:02:df:f0:36:0e:ac: 24:70:b9:81:67:f7:9f:c5:8c:6f:80:3a:ef:7c:cb: e9:57:b9:2a:bd:55:ae:a0:d8:d3:f1:e4:03:b3:6a: c7:a7:59:1f:1e:e8:47:bf:09:86:d6:64:0c:35:71: 44:c1:63:24:b1:a3:37:7e:24:96:a5:1f:3c:b0:23: b6:5a:c7:23:93:bc:46:79:30:71:36:9f:e0:a8:d5: d9:dd:7e:5c:89:d4:de:af:d6:51:45:d6:93:07:7b: c2:34:c7:de:c1:84:60:5f:57:16:22:ec:1c:29:63: 99:ec:85:bd:4e:83:bf:74:be:d7:7f:f5:f8:ea:d4: 22:22:6d:7a:e2:13:e4:6c:1e:91:56:27:4e:96:8c: ef:29:28:4e:06:fe:14:2a:13:e4:49:65:5c:11:59: 7b:3e:28:a7:01:22:c5:0c:9e:08:95:16:73:09:1b: 96:a9:3c:58:7b:85:c7:dc:c6:31:67:76:79:1e:95: f8:e1:d7:46:17:84:54:07:dc:a0:c3:2c:64:b4:49: f9:b5:6d:49:61:53:2c:8f:f1:7b:f7:27:21:4f:98: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B0:08:D6:FD:9C:21:09:76:03:5F:BC:C7:2B:D7:3B:59:5B:9C:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.245.70.0/23 23.245.172.0/23 24.145.64.0/21 69.84.96.0/19 72.28.208.0/20 72.45.33.0-72.45.35.255 132.147.8.0/21 132.147.32.0/23 132.147.35.0-132.147.47.255 137.103.36.0/23 137.103.42.0/23 137.103.45.0-137.103.47.255 137.103.52.0-137.103.63.255 137.103.179.0/24 137.103.192.0/21 137.103.226.0/23 137.103.232.0/23 137.103.236.0/23 137.103.248.0/21 138.207.150.0-138.207.153.255 138.207.155.0/24 138.207.158.0/23 138.207.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6b:79:e9:e6:43:3a:be:49:84:5c:2b:d2:43:ac:c6:7c:86: ce:6c:1f:86:0c:24:ab:c2:bb:6e:22:a1:a2:84:d7:fe:da:f8: 8b:8f:bf:ba:6a:f9:da:7c:86:53:f8:d7:f5:06:a9:bd:35:e1: 35:b3:ce:1c:9a:16:14:be:b4:31:c4:34:a7:f9:46:3f:9d:35: 87:a0:dc:ef:59:37:0b:49:d8:ac:38:cd:1d:ac:71:50:9e:37: 55:40:fa:f6:c2:49:6b:db:bc:ff:c0:89:b3:35:ee:2b:55:4f: 0e:5f:9a:d0:67:ce:b5:6c:b4:f0:d6:36:42:13:f0:2f:9e:6a: 12:2a:f5:88:73:75:29:45:fb:9f:55:be:18:d7:25:e4:5e:f6: 39:cf:48:59:c3:3a:98:76:61:e1:c4:a2:56:68:6f:7b:3c:9e: fa:eb:8d:f6:ac:2f:52:54:93:81:0c:09:7c:a5:a0:21:ba:5f: 65:7d:c4:d9:74:81:8e:8f:cd:43:ee:5a:b4:67:b4:6c:fa:b8: 68:c7:f7:71:f8:48:b8:2e:f6:e1:90:2a:64:a6:06:57:eb:e6: cf:a8:24:22:71:d6:77:b6:3e:1d:56:b7:71:12:4e:af:32:41: 88:04:1b:db:30:73:0b:16:55:e6:bf:92:96:fc:2a:a6:6f:76: 3d:a3:a4:ce -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWE693FFOR0FYxAX5AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2RlY2Q0NDYtN2Y3Ny00NjBhLTg5YTYtMDcwODhjMzgzM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAEZC+No4A9T82fim2mFlA74MND/4DaiYzc5 Tr/ZE7roBFvccFAC3/A2DqwkcLmBZ/efxYxvgDrvfMvpV7kqvVWuoNjT8eQDs2rH p1kfHuhHvwmG1mQMNXFEwWMksaM3fiSWpR88sCO2Wscjk7xGeTBxNp/gqNXZ3X5c idTer9ZRRdaTB3vCNMfewYRgX1cWIuwcKWOZ7IW9ToO/dL7Xf/X46tQiIm164hPk bB6RVidOlozvKShOBv4UKhPkSWVcEVl7PiinASLFDJ4IlRZzCRuWqTxYe4XH3MYx Z3Z5HpX44ddGF4RUB9ygwyxktEn5tW1JYVMsj/F79ychT5ibBwIDAQABo4IEBjCC BAIwHQYDVR0OBBYEFCWwCNb9nCEJdgNfvMcr1ztZW5xeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYjQwY2I3YWYtYjFiNC0z N2NmLWI0ZjgtNTFhMDNkZjAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBAEX 9UYDBAEX9awDBAMYkUADBAVFVGADBARIHNAwDAMEAEgtIQMEAkgtIAMEA4STCAME AYSTIDAMAwQAhJMjAwQEhJMgAwQBiWckAwQBiWcqMAwDBACJZy0DBASJZyAwDAME AolnNAMEBolnAAMEAIlnswMEA4lnwAMEAYln4gMEAYln6AMEAYln7AMEA4ln+DAM AwQBis+WAwQBis+YAwQAis+bAwQBis+eAwQEis/QMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAExreenmQzq+ SYRcK9JDrMZ8hs5sH4YMJKvCu24ioaKE1/7a+IuPv7pq+dp8hlP41/UGqb014TWz zhyaFhS+tDHENKf5Rj+dNYeg3O9ZNwtJ2Kw4zR2scVCeN1VA+vbCSWvbvP/AibM1 7itVTw5fmtBnzrVstPDWNkIT8C+eahIq9YhzdSlF+59VvhjXJeRe9jnPSFnDOph2 YeHEolZob3s8nvrrjfasL1JUk4EMCXyloCG6X2V9xNl0gY6PzUPuWrRntGz6uGjH 93H4SLgu9uGQKmSmBlfr5s+oJCJx1ne2Ph1Wt3ESTq8yQYgEG9swcwsWVea/kpb8 KqZvdj2jpM4= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:52 2026 by rpki-client