$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa File: 396ba5c2-f713-34f3-90a6-299dd001744c.roa (raw, json) Hash identifier: VUowT5lnq3sA0CfUfgL4ta9fujtl48hnb3+1WzMDwFw= Subject key identifier: 4F:31:E2:DB:A4:C5:9A:2E:39:19:70:A8:4D:CC:60:00:C6:52:79:07 Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584F7782E325B36807823B8D39A0 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 11776 IP address blocks: 23.244.209.0/24 maxlen: 24 23.245.4.0/23 maxlen: 23 23.245.6.0/23 maxlen: 23 23.245.182.0/23 maxlen: 23 24.233.97.0/24 maxlen: 24 24.233.119.0/24 maxlen: 24 24.233.124.0/24 maxlen: 24 24.245.125.0/24 maxlen: 24 65.175.135.0/24 maxlen: 24 65.175.140.0/24 maxlen: 24 65.175.182.0/23 maxlen: 23 65.175.184.0/23 maxlen: 23 65.175.186.0/23 maxlen: 23 65.175.207.0/24 maxlen: 24 65.175.242.0/23 maxlen: 23 65.175.244.0/23 maxlen: 23 65.175.246.0/24 maxlen: 24 65.175.248.0/23 maxlen: 23 65.175.250.0/23 maxlen: 23 65.175.252.0/23 maxlen: 23 65.175.254.0/23 maxlen: 23 67.231.78.0/23 maxlen: 23 69.161.72.0/23 maxlen: 23 69.161.124.0/23 maxlen: 23 75.76.70.0/24 maxlen: 24 104.153.40.0/22 maxlen: 22 146.168.30.0/23 maxlen: 23 159.250.4.0/23 maxlen: 23 162.217.32.0/23 maxlen: 23 162.217.34.0/23 maxlen: 23 173.44.69.0/24 maxlen: 24 173.44.115.0/24 maxlen: 24 199.192.148.0/23 maxlen: 23 199.192.150.0/23 maxlen: 23 216.10.167.0/24 maxlen: 24 216.10.178.0/24 maxlen: 24 216.10.179.0/24 maxlen: 24 216.10.180.0/24 maxlen: 24 216.246.130.0/24 maxlen: 24 216.246.131.0/24 maxlen: 24 216.246.137.0/24 maxlen: 24 216.246.143.0/24 maxlen: 24 216.246.144.0/24 maxlen: 24 216.246.150.0/24 maxlen: 24 216.246.154.0/23 maxlen: 23 216.255.164.0/23 maxlen: 23 216.255.168.0/23 maxlen: 23 216.255.170.0/24 maxlen: 24 216.255.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e3:25:b3:68:07:82:3b:8d:39:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=8735ad59-d55a-4858-be06-0526e74451fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:5f:5d:94:da:a5:98:cd:f2:31:d5:a6:ef: 3c:75:bd:46:0f:db:8e:b2:0c:b0:c8:f7:ca:05:14: ec:44:6a:99:b0:b4:ae:ed:6a:a9:fa:2a:50:e8:db: 42:65:e6:35:bc:25:4b:c9:4a:cd:70:ba:41:9f:56: d2:92:e7:5d:3d:15:b8:49:6f:cb:9a:ff:63:cc:a0: c4:6b:f8:46:0e:5a:35:8d:71:15:13:3f:2b:30:cc: be:cd:11:d6:e6:5e:0c:23:fb:7b:09:2d:b4:64:f3: e1:d4:52:eb:25:20:c3:71:28:36:fe:83:b7:0f:7c: c9:cd:15:5c:8a:7c:6c:a9:9f:1d:86:47:79:d0:4a: 6b:49:d6:c5:8b:2d:8f:a2:41:a1:85:9c:79:42:a8: f3:a6:07:12:7f:60:83:d6:7c:6f:97:fb:9f:b2:51: e1:dd:53:64:2f:04:83:3e:41:ba:da:b9:73:60:37: dc:dd:6a:79:8d:e9:90:0b:33:c1:81:e0:f8:82:cd: 80:62:2a:a8:3b:39:e2:11:22:63:2a:25:fa:0d:28: 8d:21:43:43:0e:2f:b1:26:72:37:f2:c9:53:fc:65: 0b:b4:60:d9:3a:5d:30:21:a7:eb:8f:33:89:19:1e: c0:de:69:14:63:cc:de:7f:79:b6:7c:83:e1:0b:88: 13:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:31:E2:DB:A4:C5:9A:2E:39:19:70:A8:4D:CC:60:00:C6:52:79:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/396ba5c2-f713-34f3-90a6-299dd001744c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 23.244.209.0/24 23.245.4.0/22 23.245.182.0/23 24.233.97.0/24 24.233.119.0/24 24.233.124.0/24 24.245.125.0/24 65.175.135.0/24 65.175.140.0/24 65.175.182.0-65.175.187.255 65.175.207.0/24 65.175.242.0-65.175.246.255 65.175.248.0/21 67.231.78.0/23 69.161.72.0/23 69.161.124.0/23 75.76.70.0/24 104.153.40.0/22 146.168.30.0/23 159.250.4.0/23 162.217.32.0/22 173.44.69.0/24 173.44.115.0/24 199.192.148.0/22 216.10.167.0/24 216.10.178.0-216.10.180.255 216.246.130.0/23 216.246.137.0/24 216.246.143.0-216.246.144.255 216.246.150.0/24 216.246.154.0/23 216.255.164.0/23 216.255.168.0-216.255.170.255 216.255.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:cc:54:9c:1c:89:76:fe:06:26:55:3a:95:d1:74:e7:b6:2a: f1:01:d6:52:50:33:9e:3a:d7:93:50:7f:6b:a7:72:40:59:c9: a3:81:a7:bd:8f:d5:e2:1a:5b:64:d4:f8:c0:0a:1a:39:30:45: 9b:de:1d:3b:a7:fb:61:af:80:39:ed:cf:68:18:b3:a2:01:6d: 2b:06:4e:cb:b6:37:f4:73:60:00:61:f3:75:1e:e1:c8:07:d7: 5d:15:d1:82:35:eb:85:e2:dd:7a:90:5d:f1:39:14:8c:00:f5: 2f:1b:fe:c5:2f:4f:b5:14:32:ae:47:28:e2:2a:e0:74:92:b1: 8d:c5:2f:48:5e:a6:50:af:cf:9c:d9:cc:35:e8:cb:d9:d4:b2: cb:57:df:40:ce:3d:9f:ee:fb:49:c8:57:dd:b4:f3:be:ea:2d: e5:1f:b3:08:bb:21:67:13:66:e4:17:63:2b:96:85:0a:41:75: b4:d7:10:3d:df:23:6e:9d:5a:a7:89:d7:52:91:f2:8d:29:f6: 0c:b2:95:c7:a9:43:8c:27:53:bb:de:ed:ec:2f:ea:91:44:0b: f5:76:60:84:fa:5f:68:2d:02:10:f8:db:88:f3:c5:69:96:ce: 61:f2:48:f9:ab:de:23:12:6e:a8:08:a4:77:64:71:77:fb:01: c5:19:40:cb -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWE93guMls2gHgjuNOaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODczNWFkNTktZDU1YS00ODU4LWJlMDYtMDUyNmU3NDQ1MWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDdfXZTapZjN8jHVpu88db1GD9uOsgywyPfK BRTsRGqZsLSu7Wqp+ipQ6NtCZeY1vCVLyUrNcLpBn1bSkuddPRW4SW/Lmv9jzKDE a/hGDlo1jXEVEz8rMMy+zRHW5l4MI/t7CS20ZPPh1FLrJSDDcSg2/oO3D3zJzRVc inxsqZ8dhkd50EprSdbFiy2PokGhhZx5QqjzpgcSf2CD1nxvl/ufslHh3VNkLwSD PkG62rlzYDfc3Wp5jemQCzPBgeD4gs2AYiqoOzniESJjKiX6DSiNIUNDDi+xJnI3 8slT/GULtGDZOl0wIafrjzOJGR7A3mkUY8zef3m2fIPhC4gT5wIDAQABo4IESjCC BEYwHQYDVR0OBBYEFE8x4tukxZouORlwqE3MYADGUnkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvMzk2YmE1YzItZjcxMy0z NGYzLTkwYTYtMjk5ZGQwMDE3NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAATCB9AME ABf00QMEAhf1BAMEARf1tgMEABjpYQMEABjpdwMEABjpfAMEABj1fQMEAEGvhwME AEGvjDAMAwQBQa+2AwQCQa+4AwQAQa/PMAwDBAFBr/IDBABBr/YDBANBr/gDBAFD 504DBAFFoUgDBAFFoXwDBABLTEYDBAJomSgDBAGSqB4DBAGf+gQDBAKi2SADBACt LEUDBACtLHMDBALHwJQDBADYCqcwDAMEAdgKsgMEANgKtAMEAdj2ggMEANj2iTAM AwQA2PaPAwQA2PaQAwQA2PaWAwQB2PaaAwQB2P+kMAwDBAPY/6gDBADY/6oDBALY /6wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYcxUnByJdv4GJlU6ldF057Yq8QHWUlAznjrXk1B/a6dyQFnJ o4GnvY/V4hpbZNT4wAoaOTBFm94dO6f7Ya+AOe3PaBizogFtKwZOy7Y39HNgAGHz dR7hyAfXXRXRgjXrheLdepBd8TkUjAD1Lxv+xS9PtRQyrkco4irgdJKxjcUvSF6m UK/PnNnMNejL2dSyy1ffQM49n+77SchX3bTzvuot5R+zCLshZxNm5BdjK5aFCkF1 tNcQPd8jbp1ap4nXUpHyjSn2DLKVx6lDjCdTu97t7C/qkUQL9XZghPpfaC0CEPjb iPPFaZbOYfJI+aveIxJuqAikd2Rxd/sBxRlAyw== -----END CERTIFICATE-----Generated at Tue Oct 13 05:49:07 2026 by rpki-client