$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa File: b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa (raw, json) Hash identifier: Rdm0tMvZa834RhUcSfjy3FFrQJUU5nL6VDiXpByeZ5o= Subject key identifier: AC:C8:E5:2A:D7:94:7D:B2:45:99:CA:5C:0F:D6:6A:EA:01:8A:53:CC Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F612D6A07C2E78D1220262000 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 11776 IP address blocks: 23.245.70.0/23 maxlen: 23 23.245.172.0/23 maxlen: 23 24.145.64.0/22 maxlen: 22 24.145.68.0/22 maxlen: 22 69.84.96.0/21 maxlen: 21 69.84.104.0/22 maxlen: 22 69.84.108.0/22 maxlen: 22 69.84.112.0/22 maxlen: 22 69.84.116.0/22 maxlen: 22 69.84.120.0/22 maxlen: 22 69.84.124.0/22 maxlen: 22 72.28.208.0/20 maxlen: 20 72.45.33.0/24 maxlen: 24 72.45.34.0/24 maxlen: 24 72.45.35.0/24 maxlen: 24 132.147.8.0/23 maxlen: 23 132.147.10.0/23 maxlen: 23 132.147.12.0/23 maxlen: 23 132.147.14.0/23 maxlen: 23 132.147.32.0/23 maxlen: 23 132.147.35.0/24 maxlen: 24 132.147.36.0/24 maxlen: 24 132.147.37.0/24 maxlen: 24 132.147.38.0/23 maxlen: 23 132.147.40.0/23 maxlen: 23 132.147.42.0/23 maxlen: 23 132.147.44.0/23 maxlen: 23 132.147.46.0/23 maxlen: 23 137.103.36.0/23 maxlen: 23 137.103.42.0/24 maxlen: 24 137.103.43.0/24 maxlen: 24 137.103.45.0/24 maxlen: 24 137.103.46.0/23 maxlen: 23 137.103.52.0/22 maxlen: 22 137.103.56.0/22 maxlen: 22 137.103.60.0/22 maxlen: 22 137.103.179.0/24 maxlen: 24 137.103.192.0/23 maxlen: 23 137.103.194.0/23 maxlen: 23 137.103.196.0/22 maxlen: 22 137.103.226.0/23 maxlen: 23 137.103.232.0/23 maxlen: 23 137.103.236.0/23 maxlen: 23 137.103.248.0/21 maxlen: 21 138.207.150.0/23 maxlen: 23 138.207.152.0/23 maxlen: 23 138.207.155.0/24 maxlen: 24 138.207.158.0/23 maxlen: 23 138.207.208.0/21 maxlen: 21 138.207.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:6a:07:c2:e7:8d:12:20:26:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=4dc47cbf-b012-4b94-9108-ca87a50f9415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:c8:91:27:0a:ed:2f:02:06:58:d3:f3:42: f5:3d:87:1f:33:d3:4d:7d:96:23:01:fd:a1:c5:3e: 9a:83:3d:bf:55:c8:5e:b1:58:1c:44:4c:e6:2f:48: ed:73:b0:9c:8e:31:16:39:e7:27:e0:0c:b5:fa:8d: 2f:fe:0b:ff:4f:ef:ad:46:ac:42:04:68:e6:ec:e1: 48:52:4a:27:39:ac:11:4c:d9:2f:5d:96:96:3f:02: da:cf:94:c9:e3:3e:6e:06:43:a2:83:d2:bb:83:1b: d3:8d:7e:78:d5:82:bc:bb:ea:60:2d:52:29:e0:fa: a2:94:13:8c:22:11:f1:77:42:b9:57:be:ff:c7:51: ba:22:36:11:d0:0c:69:25:27:df:f3:aa:07:81:46: c7:9b:95:06:ed:6b:7e:ad:ec:27:52:db:0f:51:79: aa:c3:fd:7e:c8:11:82:8d:0e:96:d7:76:35:4c:7f: 6e:76:20:f1:a6:1d:d5:10:b2:dd:be:14:84:e4:9d: d1:1a:c1:28:b0:42:8f:c0:df:32:0a:27:47:01:cf: 92:75:cc:af:3c:73:d6:95:f2:a6:d8:11:e4:dc:04: 22:b2:c6:1a:1a:34:c2:ad:46:c7:41:83:27:33:92: 39:da:f4:68:82:12:74:95:34:22:a7:88:58:4b:48: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C8:E5:2A:D7:94:7D:B2:45:99:CA:5C:0F:D6:6A:EA:01:8A:53:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/b40cb7af-b1b4-37cf-b4f8-51a03df033e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.245.70.0/23 23.245.172.0/23 24.145.64.0/21 69.84.96.0/19 72.28.208.0/20 72.45.33.0-72.45.35.255 132.147.8.0/21 132.147.32.0/23 132.147.35.0-132.147.47.255 137.103.36.0/23 137.103.42.0/23 137.103.45.0-137.103.47.255 137.103.52.0-137.103.63.255 137.103.179.0/24 137.103.192.0/21 137.103.226.0/23 137.103.232.0/23 137.103.236.0/23 137.103.248.0/21 138.207.150.0-138.207.153.255 138.207.155.0/24 138.207.158.0/23 138.207.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1b:d5:e1:60:6f:d6:6e:2f:67:cd:41:72:22:67:02:d8:e9: 1c:e7:d7:94:b1:d4:a0:84:9c:a0:ac:fb:a9:59:7b:bd:86:da: 45:55:e0:3e:5a:64:0f:2c:0d:70:68:01:b2:c6:1c:0b:44:94: 8a:cf:bd:20:18:fa:26:b1:9d:b4:1e:83:68:dc:5b:8a:4e:bd: cd:54:0f:4c:8f:22:3d:09:3d:1b:ac:3e:7d:1f:da:09:2c:85: 44:73:f5:2b:72:fa:8b:08:56:08:ff:26:03:ca:93:d2:f9:78: 93:e5:63:64:7d:df:c2:5a:32:b5:32:43:4a:53:ed:aa:e1:b7: 38:67:33:b6:39:e7:b9:af:16:ea:bd:1e:d1:9f:63:74:dc:c2: 4d:39:9f:e6:e0:d2:ac:ec:0d:38:01:ca:a8:e8:02:69:db:d5: 08:87:d8:1f:37:f7:66:52:70:d9:84:75:b7:db:e0:90:a5:31: 51:ea:8b:d6:47:75:20:5e:8d:c7:ae:cc:55:b4:21:6f:87:62: 8c:ab:d3:37:90:14:df:e6:7f:14:e8:9b:f4:f2:88:aa:50:98: 74:e9:f8:45:96:96:0b:b4:c4:85:ab:3a:6e:42:5d:7f:83:24: 3c:3e:d2:00:08:86:c4:bf:48:fc:d4:03:8e:b1:cb:7a:20:95: ed:85:08:cf -----BEGIN CERTIFICATE----- MIIG9DCCBdygAwIBAgIUAQ0Mn0MoWE9hLWoHwueNEiAmIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NGRjNDdjYmYtYjAxMi00Yjk0LTkxMDgtY2E4N2E1MGY5NDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyzIkScK7S8CBljT80L1PYcfM9NNfZYjAf2h xT6agz2/VchesVgcREzmL0jtc7CcjjEWOecn4Ay1+o0v/gv/T++tRqxCBGjm7OFI UkonOawRTNkvXZaWPwLaz5TJ4z5uBkOig9K7gxvTjX541YK8u+pgLVIp4PqilBOM IhHxd0K5V77/x1G6IjYR0AxpJSff86oHgUbHm5UG7Wt+rewnUtsPUXmqw/1+yBGC jQ6W13Y1TH9udiDxph3VELLdvhSE5J3RGsEosEKPwN8yCidHAc+SdcyvPHPWlfKm 2BHk3AQissYaGjTCrUbHQYMnM5I52vRoghJ0lTQip4hYS0iF6QIDAQABo4IEBjCC BAIwHQYDVR0OBBYEFKzI5SrXlH2yRZnKXA/WauoBilPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYjQwY2I3YWYtYjFiNC0z N2NmLWI0ZjgtNTFhMDNkZjAzM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBAEX 9UYDBAEX9awDBAMYkUADBAVFVGADBARIHNAwDAMEAEgtIQMEAkgtIAMEA4STCAME AYSTIDAMAwQAhJMjAwQEhJMgAwQBiWckAwQBiWcqMAwDBACJZy0DBASJZyAwDAME AolnNAMEBolnAAMEAIlnswMEA4lnwAMEAYln4gMEAYln6AMEAYln7AMEA4ln+DAM AwQBis+WAwQBis+YAwQAis+bAwQBis+eAwQEis/QMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA0b1eFgb9Zu L2fNQXIiZwLY6Rzn15Sx1KCEnKCs+6lZe72G2kVV4D5aZA8sDXBoAbLGHAtElIrP vSAY+iaxnbQeg2jcW4pOvc1UD0yPIj0JPRusPn0f2gkshURz9Sty+osIVgj/JgPK k9L5eJPlY2R938JaMrUyQ0pT7arhtzhnM7Y557mvFuq9HtGfY3Tcwk05n+bg0qzs DTgByqjoAmnb1QiH2B8392ZScNmEdbfb4JClMVHqi9ZHdSBejceuzFW0IW+HYoyr 0zeQFN/mfxTom/TyiKpQmHTp+EWWlgu0xIWrOm5CXX+DJDw+0gAIhsS/SPzUA46x y3ogle2FCM8= -----END CERTIFICATE-----Generated at Sun Oct 18 11:50:36 2026 by rpki-client