$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa File: aa77bbfa-ed54-3041-958c-d4556f3f285c.roa (raw, json) Hash identifier: +JfwJOM0RyojwMtfnCEbiBNRMt+woGSj3U80dTfNekc= Subject key identifier: 91:3F:EE:B1:E5:2B:78:DA:E2:3E:96:C4:99:53:58:47:FF:FD:53:EB Certificate issuer: /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Certificate serial: 010D0C9F4328584E1D2F722BA144909F9EA34500 Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa Signing time: Tue 09 Jun 2026 11:42:33 +0000 ROA not before: Tue 09 Jun 2026 11:42:33 +0000 ROA not after: Sun 06 Sep 2026 15:16:46 +0000 asID: 11776 IP address blocks: 24.153.36.0/23 maxlen: 23 24.153.46.0/23 maxlen: 23 24.233.202.0/23 maxlen: 23 24.245.109.0/24 maxlen: 24 24.245.110.0/23 maxlen: 23 24.245.116.0/22 maxlen: 22 65.99.116.0/23 maxlen: 23 65.99.120.0/24 maxlen: 24 65.99.127.0/24 maxlen: 24 66.85.4.0/24 maxlen: 24 72.9.17.0/24 maxlen: 24 72.9.18.0/23 maxlen: 23 72.9.20.0/23 maxlen: 23 72.9.22.0/23 maxlen: 23 72.9.24.0/22 maxlen: 22 72.9.28.0/23 maxlen: 23 72.9.30.0/23 maxlen: 23 74.214.32.0/23 maxlen: 23 74.214.34.0/24 maxlen: 24 74.214.35.0/24 maxlen: 24 74.214.36.0/24 maxlen: 24 74.214.37.0/24 maxlen: 24 74.214.38.0/24 maxlen: 24 74.214.50.0/23 maxlen: 23 74.214.56.0/24 maxlen: 24 146.168.18.0/23 maxlen: 23 146.168.20.0/23 maxlen: 23 146.168.25.0/24 maxlen: 24 146.168.26.0/24 maxlen: 24 146.168.32.0/20 maxlen: 20 146.168.48.0/21 maxlen: 21 146.168.132.0/23 maxlen: 23 146.168.142.0/23 maxlen: 23 159.250.66.0/23 maxlen: 23 159.250.70.0/23 maxlen: 23 162.223.182.0/23 maxlen: 23 162.247.106.0/24 maxlen: 24 173.44.70.0/24 maxlen: 24 173.44.71.0/24 maxlen: 24 173.44.74.0/24 maxlen: 24 173.44.108.0/23 maxlen: 23 173.44.110.0/24 maxlen: 24 173.44.111.0/24 maxlen: 24 198.52.11.0/24 maxlen: 24 209.42.132.0/23 maxlen: 23 209.42.137.0/24 maxlen: 24 209.42.158.0/24 maxlen: 24 216.10.190.0/24 maxlen: 24 216.10.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1d:2f:72:2b:a1:44:90:9f:9e:a3:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7 Validity Not Before: Jun 9 11:42:33 2026 GMT Not After : Sep 6 15:16:46 2026 GMT Subject: CN=3bd15de5-183c-4852-807b-f0d9a52708ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:dd:33:fd:66:ba:68:17:db:e5:1a:03:03: 35:37:f6:06:fb:9e:1f:b4:fa:b3:f1:b7:58:e5:81: 1d:13:b8:cd:a7:f8:b4:f6:03:e8:e5:09:e0:c0:96: 4d:5d:13:ac:dd:01:73:e3:16:b3:f3:1e:7e:40:62: c7:2c:87:23:dc:d5:eb:78:51:6c:d1:ff:85:92:e6: 8b:86:e7:a9:77:5a:14:3f:c0:56:f8:ea:46:d9:c3: 3b:fa:25:67:45:e4:71:52:47:ae:61:12:e4:6f:36: b4:89:f4:ae:d7:07:bb:22:f8:e4:99:50:8e:eb:f7: ce:d7:f1:c6:e8:70:3e:e9:5d:35:9c:65:3d:fc:a6: f9:55:90:32:0a:5f:bf:b5:da:29:44:8a:0c:18:f1: 78:ae:10:b3:53:35:4b:4f:97:12:77:04:0a:96:44: cd:e5:a7:37:1c:c8:83:25:59:bf:6c:4b:5c:3c:c6: 0f:76:05:d8:57:7d:61:91:1a:cd:d4:d7:24:40:e0: c8:7d:41:f7:a2:5f:71:42:f0:2a:40:5b:84:e8:26: 44:2e:39:64:b7:af:59:18:34:b1:18:42:c8:1b:70: 73:cc:63:d2:7c:0b:97:7e:cf:75:a3:0c:89:3c:80: d6:14:71:d0:9b:f4:87:73:e0:d4:46:ee:a3:f8:28: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3F:EE:B1:E5:2B:78:DA:E2:3E:96:C4:99:53:58:47:FF:FD:53:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/aa77bbfa-ed54-3041-958c-d4556f3f285c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl X509v3 Authority Key Identifier: keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer sbgp-ipAddrBlock: critical IPv4: 24.153.36.0/23 24.153.46.0/23 24.233.202.0/23 24.245.109.0-24.245.111.255 24.245.116.0/22 65.99.116.0/23 65.99.120.0/24 65.99.127.0/24 66.85.4.0/24 72.9.17.0-72.9.31.255 74.214.32.0-74.214.38.255 74.214.50.0/23 74.214.56.0/24 146.168.18.0-146.168.21.255 146.168.25.0-146.168.26.255 146.168.32.0-146.168.55.255 146.168.132.0/23 146.168.142.0/23 159.250.66.0/23 159.250.70.0/23 162.223.182.0/23 162.247.106.0/24 173.44.70.0/23 173.44.74.0/24 173.44.108.0/22 198.52.11.0/24 209.42.132.0/23 209.42.137.0/24 209.42.158.0/24 216.10.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:45:c1:da:fb:c0:f8:7c:3a:b8:10:1a:10:87:70:7b:d9:5a: 09:6d:9d:76:0a:6d:de:10:2a:5a:11:19:42:50:14:5d:5e:e7: 2d:a3:1f:15:98:1b:e3:f4:b3:89:a4:9d:fb:3b:7b:cb:0f:ff: 8e:d0:a9:40:e1:68:40:03:70:f1:31:dd:4f:7a:a9:cf:dd:97: 5d:99:93:07:20:e9:5d:d7:c3:30:a0:e4:05:d1:95:d9:1c:bd: a1:42:40:d4:c1:be:c1:72:22:12:12:40:f9:89:b4:f6:bb:0b: ec:69:ea:1a:3a:4d:b4:20:56:75:48:de:e8:4d:36:94:ea:9f: 82:d4:ce:70:1b:16:91:22:74:45:47:38:77:65:3c:de:21:e6: 9d:82:ab:1a:87:46:98:37:5e:0b:f8:aa:ec:ae:f6:f3:2f:4f: bb:43:f6:c0:2e:8b:8f:12:91:31:a1:c3:68:d6:21:0b:9c:cd: 6b:c1:32:ba:2a:80:ee:cf:84:f5:d6:7f:0f:c9:0d:78:20:55: f9:8a:ff:76:67:8f:5e:59:b6:62:9e:be:a2:4d:9e:00:37:42: eb:22:4e:67:ca:71:91:8a:9a:fd:e8:e2:54:96:1e:37:8a:72: 8e:c0:5e:ca:b4:16:57:77:43:e8:20:4e:75:66:a2:1e:fe:6b: fc:a4:0e:c9 -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWE4dL3IroUSQn56jRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5YTE0NDctN2NmYS00NTZmLWE2MDAtNGIyMDEyYzAx ZGM3MB4XDTI2MDYwOTExNDIzM1oXDTI2MDkwNjE1MTY0NlowLzEtMCsGA1UEAxMk M2JkMTVkZTUtMTgzYy00ODUyLTgwN2ItZjBkOWE1MjcwOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV/dM/1mumgX2+UaAwM1N/YG+54ftPqz8bdY 5YEdE7jNp/i09gPo5QngwJZNXROs3QFz4xaz8x5+QGLHLIcj3NXreFFs0f+FkuaL huepd1oUP8BW+OpG2cM7+iVnReRxUkeuYRLkbza0ifSu1we7IvjkmVCO6/fO1/HG 6HA+6V01nGU9/Kb5VZAyCl+/tdopRIoMGPF4rhCzUzVLT5cSdwQKlkTN5ac3HMiD JVm/bEtcPMYPdgXYV31hkRrN1NckQODIfUH3ol9xQvAqQFuE6CZELjlkt69ZGDSx GELIG3BzzGPSfAuXfs91owyJPIDWFHHQm/SHc+DURu6j+ChyAQIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFJE/7rHlK3ja4j6WxJlTWEf//VPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlh MTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIwMTJjMDFkYzcvYWE3N2JiZmEtZWQ1NC0z MDQxLTk1OGMtZDQ1NTZmM2YyODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYzY5YTE0NDctN2NmYS00NTZmLWE2 MDAtNGIyMDEyYzAxZGM3L2M2OWExNDQ3LTdjZmEtNDU2Zi1hNjAwLTRiMjAxMmMw MWRjNy5jcmwwHwYDVR0jBBgwFoAUAim6jdf4XnFYCVoyK2CEu0wjmpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jNjlhMTQ0Ny03Y2ZhLTQ1NmYtYTYwMC00YjIw MTJjMDFkYzcuY2VyMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQB GJkkAwQBGJkuAwQBGOnKMAwDBAAY9W0DBAQY9WADBAIY9XQDBAFBY3QDBABBY3gD BABBY38DBABCVQQwDAMEAEgJEQMEBUgJADAMAwQFStYgAwQAStYmAwQBStYyAwQA StY4MAwDBAGSqBIDBAGSqBQwDAMEAJKoGQMEAJKoGjAMAwQFkqggAwQDkqgwAwQB kqiEAwQBkqiOAwQBn/pCAwQBn/pGAwQBot+2AwQAovdqAwQBrSxGAwQArSxKAwQC rSxsAwQAxjQLAwQB0SqEAwQA0SqJAwQA0SqeAwQB2Aq+MFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACJFwdr7 wPh8OrgQGhCHcHvZWgltnXYKbd4QKloRGUJQFF1e5y2jHxWYG+P0s4mknfs7e8sP /47QqUDhaEADcPEx3U96qc/dl12Zkwcg6V3XwzCg5AXRldkcvaFCQNTBvsFyIhIS QPmJtPa7C+xp6ho6TbQgVnVI3uhNNpTqn4LUznAbFpEidEVHOHdlPN4h5p2CqxqH Rpg3Xgv4quyu9vMvT7tD9sAui48SkTGhw2jWIQuczWvBMroqgO7PhPXWfw/JDXgg VfmK/3Znj15ZtmKevqJNngA3QusiTmfKcZGKmv3o4lSWHjeKco7AXsq0Fld3Q+gg TnVmoh7+a/ykDsk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:45:16 2026 by rpki-client